Not able to connect to netopeer2-server via remote machine

[rajnkamr]

I have sysrepod and netopeer2-server running on my system.
When i run netopeer2-cli on local machine, i am able to connect to netopeer2-server and sysrepo and able to perform multiple operations.

Same is not possible when using netopeer2-cli on remote machine.
Please suggest.
ping/ssh to remote host is fine.
Do i need to edit remote host's sshd_config file etc..

command i am using to connect is as follows
[root@adv-ca85 ~]# ./netopeer2-cli

connect --host 10.1.17.84 --port 6001 --login root
nc ERROR: Unable to connect to 10.1.17.84:6001.
cmd_connect: Connecting to the 10.1.17.84:6001 as user "root" failed.

[michalvasko]

Hi,
for one, SSHD has nothing to do with netopeer2-server, it creates it's own SSH server. You can try connecting to the server using SSH - it should at least connect, but I believe that will fail as well. My guess is that firewall blocks your connection, but I obviously cannot be sure. Anyway, it is not a problem of our software or NETCONF.

Regards,
Michal

[fabioantonini]

Hi
In the past I had such a kind of problem when I tried to connect to the remote netopeer2/server running on my embedded board from my NETCONF manager (NETCONFc) using a root account on my PC.
It was fixed when I used a different user.
At the moment I have the dual problem, I cannot connect to netopeer2-server from netopeer2-cli running on the same board. Regards
fabio

[rajnkamr]

Thanks Michal,
It was firewall which was blocking.

Able to connect now,
After connecting i got below error

> connect --host 10.1.17.84 --port 6001 --login root
Interactive SSH Authentication
Type your password:
Password:

> connect --host 10.1.17.84 --port 6001 --login security
Interactive SSH Authentication
Type your password:
Password:
nc ERROR: Session 9: SSH channel unexpected EOF.
nc ERROR: Session 9: failed to receive a reply to <get-schema>.
ly ERROR: User module retrieval callback failed!
nc ERROR: Session 9: invalid session to send RPCs.
nc ERROR: Session 9: failed to send the <get-schema> RPC.
nc ERROR: Session 9: invalid session to send RPCs.
nc ERROR: Session 9: failed to send the <get-schema> RPC.
ly ERROR: User module retrieval callback failed!
ly ERROR: Invalid value "ietf-netconf-acm" of "import".
ly ERROR: Importing "ietf-netconf-acm" module into "ietf-netconf" failed.
ly ERROR: Module "ietf-netconf" parsing failed.
nc ERROR: Loading base NETCONF schema failed.
cmd_connect: Connecting to the 10.1.17.84:6001 as user "security" failed.

[michalvasko]

Hi,
what did the server print (-v2)?

Michal

[fabioantonini]

Hi Michal
here below the server output during the remote authentication step

> connect --host 192.168.1.117 -p 6001 --login root
nc VERBOSE: Successfully connected to 192.168.1.117:6001 over IPv4.
[2016/09/27 15:02:22.986222, 1] ssh_connect:  libssh 0.6.3 (c) 2003-2014 Aris Adamantiadis, Andreas Schneider, and libssh contributors. Distributed under the LGPL, please refer to COPYING file for information about your rights, using threading threads_pthread
[2016/09/27 15:02:22.986272, 2] ssh_connect:  Socket connecting, now waiting for the callbacks to work
[2016/09/27 15:02:22.986290, 3] ssh_socket_pollcallback:  Received POLLOUT in connecting state
[2016/09/27 15:02:22.986303, 1] socket_callback_connected:  Wrong state in socket_callback_connected : 2
[2016/09/27 15:02:22.986314, 3] ssh_connect:  ssh_connect: Actual state : 2
[2016/09/27 15:02:22.986411, 3] ssh_connect:  ssh_connect: Actual state : 2
........
........
[2016/09/27 15:02:23.199930, 3] ssh_connect:  ssh_connect: Actual state : 2
[2016/09/27 15:02:23.200046, 3] ssh_connect:  ssh_connect: Actual state : 2
[2016/09/27 15:02:23.201123, 3] ssh_connect:  ssh_connect: Actual state : 2
[2016/09/27 15:02:23.201239, 3] ssh_connect:  ssh_connect: Actual state : 2
[2016/09/27 15:02:23.201387, 3] callback_receive_banner:  Received banner: SSH-2.0-libssh_0.7.0
[2016/09/27 15:02:23.201427, 1] ssh_client_connection_callback:  SSH server banner: SSH-2.0-libssh_0.7.0
[2016/09/27 15:02:23.201462, 1] ssh_analyze_banner:  Analyzing banner: SSH-2.0-libssh_0.7.0
[2016/09/27 15:02:23.201535, 3] ssh_socket_unbuffered_write:  Enabling POLLOUT for socket
[2016/09/27 15:02:23.201588, 3] ssh_connect:  ssh_connect: Actual state : 4
[2016/09/27 15:02:23.212057, 3] ssh_connect:  ssh_connect: Actual state : 4
[2016/09/27 15:02:23.212142, 3] ssh_connect:  ssh_connect: Actual state : 4
[2016/09/27 15:02:23.212262, 3] ssh_packet_socket_callback:  packet: read type 20 [len=508,padding=10,comp=497,payload=497]
[2016/09/27 15:02:23.212283, 3] ssh_packet_process:  Dispatching handler for packet type 20
[2016/09/27 15:02:23.212510, 3] ssh_socket_unbuffered_write:  Enabling POLLOUT for socket
[2016/09/27 15:02:23.212526, 3] packet_send2:  packet: wrote [len=492,padding=5,comp=486,payload=486]
[2016/09/27 15:02:23.218748, 3] packet_send2:  packet: wrote [len=44,padding=6,comp=37,payload=37]
[2016/09/27 15:02:23.219860, 3] ssh_connect:  ssh_connect: Actual state : 6
[2016/09/27 15:02:23.220006, 3] ssh_socket_unbuffered_write:  Enabling POLLOUT for socket
[2016/09/27 15:02:23.220028, 3] ssh_connect:  ssh_connect: Actual state : 6
[2016/09/27 15:02:23.220121, 3] ssh_connect:  ssh_connect: Actual state : 6
[2016/09/27 15:02:23.436559, 3] ssh_connect:  ssh_connect: Actual state : 6
[2016/09/27 15:02:23.436657, 3] ssh_connect:  ssh_connect: Actual state : 6
[2016/09/27 15:02:23.436753, 3] ssh_connect:  ssh_connect: Actual state : 6
..........
..........
[2016/09/27 15:02:23.436859, 3] ssh_connect:  ssh_connect: Actual state : 6
[2016/09/27 15:02:23.436955, 3] ssh_connect:  ssh_connect: Actual state : 6
[2016/09/27 15:02:23.437397, 3] ssh_packet_socket_callback:  packet: read type 31 [len=348,padding=10,comp=337,payload=337]
[2016/09/27 15:02:23.437417, 3] ssh_packet_process:  Dispatching handler for packet type 31
[2016/09/27 15:02:23.437430, 2] ssh_packet_dh_reply:  Received SSH_KEXDH_REPLY
[2016/09/27 15:02:23.444851, 3] ssh_socket_unbuffered_write:  Enabling POLLOUT for socket
[2016/09/27 15:02:23.444884, 3] packet_send2:  packet: wrote [len=12,padding=10,comp=1,payload=1]
[2016/09/27 15:02:23.444902, 2] ssh_client_curve25519_reply:  SSH_MSG_NEWKEYS sent
[2016/09/27 15:02:23.444920, 3] ssh_connect:  ssh_connect: Actual state : 6
[2016/09/27 15:02:23.445033, 3] ssh_connect:  ssh_connect: Actual state : 6
[2016/09/27 15:02:23.445303, 3] ssh_packet_socket_callback:  packet: read type 21 [len=12,padding=10,comp=1,payload=1]
[2016/09/27 15:02:23.445317, 3] ssh_packet_process:  Dispatching handler for packet type 21
[2016/09/27 15:02:23.445325, 2] ssh_packet_newkeys:  Received SSH_MSG_NEWKEYS
[2016/09/27 15:02:23.445371, 3] crypt_set_algorithms2:  Set output algorithm to aes256-ctr
[2016/09/27 15:02:23.445380, 3] crypt_set_algorithms2:  Set input algorithm to aes256-ctr
[2016/09/27 15:02:23.445522, 2] ssh_packet_newkeys:  Signature verified and valid
[2016/09/27 15:02:23.445534, 3] ssh_connect:  ssh_connect: Actual state : 7
[2016/09/27 15:02:23.445615, 3] match_hashed_host:  Matching a hashed host: 192.168.1.117 match=0
[2016/09/27 15:02:23.445635, 3] match_hashed_host:  Matching a hashed host: [192.168.1.117]:6001 match=0
..........
..........
[2016/09/27 15:02:23.446754, 3] match_hashed_host:  Matching a hashed host: 192.168.1.117 match=0
[2016/09/27 15:02:23.446769, 3] match_hashed_host:  Matching a hashed host: [192.168.1.117]:6001 match=0
[2016/09/27 15:02:23.446789, 3] match_hashed_host:  Matching a hashed host: 192.168.1.117 match=1
[2016/09/27 15:02:23.446946, 3] ssh_socket_unbuffered_write:  Enabling POLLOUT for socket
[2016/09/27 15:02:23.446973, 3] packet_send2:  packet: wrote [len=28,padding=10,comp=17,payload=17]
[2016/09/27 15:02:23.446991, 3] ssh_service_request:  Sent SSH_MSG_SERVICE_REQUEST (service ssh-userauth)
[2016/09/27 15:02:23.447011, 1] ssh_userauth_request_service:  Failed to request "ssh-userauth" service
...........
...........
[2016/09/27 15:02:23.453975, 1] ssh_userauth_request_service:  Failed to request "ssh-userauth" service
[2016/09/27 15:02:23.454069, 1] ssh_userauth_request_service:  Failed to request "ssh-userauth" service
[2016/09/27 15:02:23.454195, 3] ssh_packet_socket_callback:  packet: read type 6 [len=28,padding=10,comp=17,payload=17]
[2016/09/27 15:02:23.454218, 3] ssh_packet_process:  Dispatching handler for packet type 6
[2016/09/27 15:02:23.454236, 3] ssh_packet_service_accept:  Received SSH_MSG_SERVICE_ACCEPT
[2016/09/27 15:02:23.454300, 3] ssh_socket_unbuffered_write:  Enabling POLLOUT for socket
[2016/09/27 15:02:23.454322, 3] packet_send2:  packet: wrote [len=44,padding=8,comp=35,payload=35]
[2016/09/27 15:02:23.462746, 3] ssh_packet_socket_callback:  packet: read type 51 [len=60,padding=14,comp=45,payload=45]
[2016/09/27 15:02:23.462824, 3] ssh_packet_process:  Dispatching handler for packet type 51
[2016/09/27 15:02:23.462846, 2] ssh_packet_userauth_failure:  Access denied. Authentication that can continue: publickey,keyboard-interactive,password
[2016/09/27 15:02:23.462865, 1] ssh_packet_userauth_failure:  Access denied. Authentication that can continue: publickey,keyboard-interactive,password
nc VERBOSE: Keyboard-interactive authentication.
[2016/09/27 15:02:23.462919, 3] ssh_userauth_kbdint_init:  Sending keyboard-interactive init request
[2016/09/27 15:02:23.462993, 3] ssh_socket_unbuffered_write:  Enabling POLLOUT for socket
[2016/09/27 15:02:23.463016, 3] packet_send2:  packet: wrote [len=76,padding=16,comp=59,payload=59]
[2016/09/27 15:02:23.473536, 3] ssh_packet_socket_callback:  packet: read type 60 [len=92,padding=10,comp=81,payload=81]
[2016/09/27 15:02:23.473575, 3] ssh_packet_process:  Dispatching handler for packet type 60
[2016/09/27 15:02:23.473596, 3] ssh_packet_userauth_info_request:  1 keyboard-interactive prompts
Interactive SSH Authentication
Type your password:
Password: 
[2016/09/27 15:02:27.550827, 3] ssh_userauth_kbdint_send:  Sending keyboard-interactive response packet
[2016/09/27 15:02:27.550943, 3] ssh_socket_unbuffered_write:  Enabling POLLOUT for socket
[2016/09/27 15:02:27.550976, 3] packet_send2:  packet: wrote [len=28,padding=9,comp=18,payload=18]
[2016/09/27 15:02:27.573331, 3] ssh_packet_socket_callback:  packet: read type 52 [len=12,padding=10,comp=1,payload=1]
[2016/09/27 15:02:27.573379, 3] ssh_packet_process:  Dispatching handler for packet type 52
[2016/09/27 15:02:27.573394, 3] ssh_packet_userauth_success:  Authentication successful
nc VERBOSE: Authentication successful.
[2016/09/27 15:02:27.573436, 2] channel_open:  Creating a channel 43 with 64000 window and 32768 max packet
[2016/09/27 15:02:27.573480, 3] ssh_socket_unbuffered_write:  Enabling POLLOUT for socket
[2016/09/27 15:02:27.573500, 3] packet_send2:  packet: wrote [len=44,padding=19,comp=24,payload=24]
[2016/09/27 15:02:27.573511, 3] channel_open:  Sent a SSH_MSG_CHANNEL_OPEN type session for channel 43
[2016/09/27 15:02:27.576447, 1] ssh_socket_exception_callback:  Socket exception callback: 2 (104)
[2016/09/27 15:02:27.576482, 1] ssh_socket_exception_callback:  Socket error: Connection reset by peer
nc ERROR: Opening an SSH channel failed (Socket error: Connection reset by peer).
cmd_connect: Connecting to the 192.168.1.117:6001 as user "root" failed.

regards
fabio

[fabioantonini]

sorry this is the outoput of the netopeer2-cli

[fabioantonini]

here the server output

[fabioantonini]

[2016/05/30 13:32:45.482173, 1] ssh_server_connection_callback: SSH client banner: SSH-2.0-libssh-0.6.3
[2016/05/30 13:32:45.482437, 1] ssh_analyze_banner: Analyzing banner: SSH-2.0-libssh-0.6.3
[2016/05/30 13:32:45.702282, 2] ssh_server_curve25519_init: SSH_MSG_KEX_ECDH_REPLY sent
[2016/05/30 13:32:45.703264, 2] ssh_server_curve25519_init: SSH_MSG_NEWKEYS sent
[2016/05/30 13:32:45.712246, 2] ssh_packet_newkeys: Received SSH_MSG_NEWKEYS
netopeer2-server[6034]: Received an SSH message "request-service" of subtype "ssh-userauth".
netopeer2-server[6034]: Received an SSH message "request-auth" of subtype "none".
netopeer2-server[6034]: Received an SSH message "request-auth" of subtype "interactive".
[2016/05/30 13:32:45.953315, 2] ssh_message_auth_interactive_request: Warning: Got a keyboard-interactive response but it seems we didn't send the request.
netopeer2-server[6034]: Received an SSH message "request-auth" of subtype "interactive".
netopeer2-server[6034]: User "root" authenticated.
netopeer2-server[6034]: Mutex lock failed (Invalid argument).

[fabioantonini]

I see often the message
Mutex lock failed (Invalid argument).
does it sound strange to you too?
thanks
fabio

[michalvasko]

Hi Fabio,
the error is definitely strange, but before anything I suggest you update your libssh library, from the output it seems you are using version 0.6.3. libnetconf2 should be checking that you have at least version 0.6.4, so I am not sure how you managed to install it. Best is to use either 0.7.3 or build it from the source, from the master branch.

Regards,
Michal

EDIT: As for the error, I replied in #26.

[ZhaoGuangYue1986]

this issue may be same with #14