This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: IBM ssh gateway
Hi Ryan,
On Wednesday 01 February 2012 13:43:32 Ryan Johnson wrote:
> On 01/02/2012 5:46 AM, Guy Harrison wrote:
> > Hi Folks,
> >
> > Can anyone help interpret this? I am fairly certain the problem lies
> > with IBM but I am no crypto expert. Is (for instance) the server
> > rejecting the connection because (say) it does not understand ECDSA?
> > Unfortunately I do not have an older instance of cygwin ssh to try that
> > theory out. The failure is recent. I upgraded my cygwin instances over
> > xmas.
> >
> > My primary concern is that the latter (linux) connection (after ~~~)
> > may fail after a future upgrade.
>
> I would definitely check with your local network security folks. When I
> was last at IBM I had trouble connecting from a certain machine -- just
> that one -- and nobody could figure out why. Finally, it turned out that
> I had a lot of locales installed and the long list of supported
> languages announced by my ssh client triggered some firewall rule.
Unfortunately I forgot to mention the problem occurs both from my home
network and via my work network (which I could easily have believed was at
fault - they've messed with it a lot recently). The ~~~ linux box above
connects via my home network but I have an aix box at work that also
connects successfully whereas work cygwin (that's on XP) fails in the same
fashion as my original post.
I'm not sure about checking the locale's passed? None of the windows boxes
have anything other than en_US/en_GB installed though.
> Meanwhile, have you tried using `ssh -i' with a different key type? That
> should clarify whether it's an ECDSA issue, at least.
No change I'm afraid..
ssh -vvv -i ~/.ssh/id_dsa.pub 198.81.193.104
..no point duplicating the original output. Fwiw there is only a DSA key on
all these boxes.
TIA
Guy
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple