SSH just doesn't work

[Moogle Stiltzkin]

i got 2 units that had issue accessing ssh. a 653a and a 659 pro II.

for 653a support eventually helped me to install a ssh fix qpkg, at which point my ssh now just works.

whereas on the 659 pro II which doesn't have it, i can access ssh if i enable telnet.

anyway will try this later on 659 later

[winstona]

Hi!
I just had the same problems and was able to connect thru telnet.
Starting sshd manually showed the root cause:

Code: Select all

# /etc/init.d/login.sh start
Starting sshd service: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0644 for '/etc/ssh/ssh_host_rsa_key' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
key_load_private: bad permissions
Could not load host key: /etc/ssh/ssh_host_rsa_key

...

It is required that your private key files are NOT accessible by others.
This private key will be ignored.
key_load_private: bad permissions
Could not load host key: /etc/ssh/ssh_host_dsa_key
Disabling protocol version 2. Could not load host key
sshd: no hostkeys available -- exiting.
OK
[~] #

As I had this issue already once before, I'm sure, that my key files had the correct permissions already set before the QTS 4.3.3 upgrade was started.

I did the same QTS upgrade on an other machine and had no problems. So, I don't know why the permissions were incorrect, but, they are preventing sshd from operation. Changing the permissions is not very difficult:

Code: Select all

[/etc/ssh] # ls -la
total 20
drwxr-xr-x    2 admin    administ       140 Apr 23  2010 ./
drwxr-xr-x   28 admin    administ      3000 May 29 15:10 ../
-rw-r--r--    1 admin    administ       668 Oct 24  2015 ssh_host_dsa_key
-rw-r--r--    1 admin    administ       605 Oct 24  2015 ssh_host_dsa_key.pub
-rw-r--r--    1 admin    administ      1675 Oct 24  2015 ssh_host_rsa_key
-rw-r--r--    1 admin    administ       397 Oct 24  2015 ssh_host_rsa_key.pub
-rw-r--r--    1 admin    administ      3084 Apr 23  2010 sshd_config
[/etc/ssh] # chmod 600 ssh_host_dsa_key ssh_host_rsa_key
[/etc/ssh] # /etc/init.d/login.sh start
Starting sshd service: OK
Starting telnet service: telnetd: starting
  port: xxxxx; interface: any; login program: /bin/naslogin
bind: Address already in use
OK
[/etc/ssh] # 

Good luck to all !

SSH has been down for so long for me. I've tried so many things but it ended up being this. Thank you so much!