Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Long time to authorize #262

Open
q000p opened this issue Nov 30, 2023 · 15 comments
Open

Long time to authorize #262

q000p opened this issue Nov 30, 2023 · 15 comments

Comments

@q000p
Copy link

q000p commented Nov 30, 2023 •
edited
Loading

If I connect from another network, I will timeout before success authorization up to 9 seconds.
If I connect from the same network, all will work correctly.
As example device have IP 192.168.223.40:
root@Decoder:/etc/dropbear# dropbear -F -E -r dropbear_ed25519_host_key [26237] Nov 30 08:58:03 Not backgrounding [26319] Nov 30 08:58:12 Child connection from 192.168.223.1:37902 [26319] Nov 30 08:58:14 Password auth succeeded for 'root' from 192.168.223.1:37902 [26319] Nov 30 08:58:18 Exit (root) from <192.168.223.1:37902>: Disconnect received [26416] Nov 30 08:58:22 Child connection from 192.168.59.17:56442 [26416] Nov 30 08:58:31 Pubkey auth succeeded for 'root' with ssh-rsa key SHA256:26OBMOgzbiRQj8cF6I3MM714tse/ag/dz7Lb4TkvPNE from 192.168.59.17:56442 [26416] Nov 30 08:58:36 Exit (root) from <192.168.59.17:56442>: Disconnect received [26237] Nov 30 08:58:40 Early exit: Terminated by signal
As result I can input pass during 2 seconds from the same network
And authorize from another network take 9 seconds (without time to type pass).

dropbear 2017.75 without this problem but too old
@mkj
Copy link
Owner

mkj commented Dec 11, 2023

Can you get a tcpdump/wireshark capture of the failed session?

My first thoughts would be either DNS or network MTU has problems.

@q000p
Copy link
Author

q000p commented Dec 14, 2023

dump3.zip
The session is not failed but so long.

@mkj
Copy link
Owner

mkj commented Dec 14, 2023

Dropbear delays 5 seconds from accepting the connection and sending the first packet.

Did you compile Dropbear, or where is the package from? DNS seems a likely reason if it's different from different networks, but the default config for Dropbear is to disable host lookups (#define DO_HOST_LOOKUP 0).

Another possibility is that session key exchange crypto is slow. When you were connecting from different networks (which were fast), was it a different SSH client? What kind of device is Dropbear running on?

No.	Time	Source	Destination	Protocol	Length	Message type	Message type	Value	Info
5	0.004736	192.168.222.41	192.168.11.2	TCP	60		22		22 → 59661 [ACK] Seq=1 Ack=22 Win=64224 Len=0
6	5.031283	192.168.222.41	192.168.11.2	SSHv2	560		22		Server: Protocol (SSH-2.0-dropbear_2020.79), Key Exchange Init

@q000p
Copy link
Author

q000p commented Dec 19, 2023

I compiled dropbear with default options (as I understood with disable host lookups)
I tried to connect from same PC to device. If network is different, I will have delay.

@mkj
Copy link
Owner

mkj commented Dec 19, 2023

What hardware and OS is Dropbear running on?

What client are you using from each network?

@q000p
Copy link
Author

q000p commented Dec 19, 2023

The device based on ARMv7 and buildroot.

@q000p
Copy link
Author

q000p commented Dec 19, 2023

About clients:
Last test was on OpenSSH_for_Windows_8.1p1, LibreSSL 3.0.2
The bug present also:
OpenSSH_9.3p1, OpenSSL 1.1.1t 7 Feb 2023
OpenSSH_8.2p1 Ubuntu-4ubuntu0.9, OpenSSL 1.1.1f 31 Mar 2020

@mkj
Copy link
Owner

mkj commented Dec 19, 2023 via email

@q000p

This comment was marked as duplicate.

Sign in to view
@q000p
Copy link
Author

q000p commented Dec 20, 2023

As I understood all logs are identical.

@mkj
Copy link
Owner

mkj commented Dec 20, 2023

It looks like the newlines got broken, can you try paste it differently?

@q000p
Copy link
Author

q000p commented Dec 20, 2023

The same network

C:\Users\framegrabber>ssh root@192.168.226.40 -vvv
OpenSSH_for_Windows_8.1p1, LibreSSL 3.0.2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/config error:2
debug3: Failed to open file:C:/ProgramData/ssh/ssh_config error:2
debug2: resolve_canonicalize: hostname 192.168.226.40 is address
debug2: ssh_connect_direct
debug1: Connecting to 192.168.226.40 [192.168.226.40] port 22.
debug1: Connection established.
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_rsa error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_rsa.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_rsa type -1
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_rsa-cert error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_rsa-cert.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_rsa-cert type -1
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_dsa error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_dsa.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_dsa type -1
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_dsa-cert error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_dsa-cert.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_dsa-cert type -1
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_ecdsa error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_ecdsa.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_ecdsa type -1
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_ecdsa-cert error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_ecdsa-cert.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_ecdsa-cert type -1
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_ed25519 error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_ed25519.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_ed25519 type -1
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_ed25519-cert error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_ed25519-cert.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_ed25519-cert type -1
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_xmss error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_xmss.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_xmss type -1
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_xmss-cert error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_xmss-cert.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_xmss-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_for_Windows_8.1
debug1: Remote protocol version 2.0, remote software version dropbear_2020.79
debug1: no match: dropbear_2020.79
debug2: fd 3 setting O_NONBLOCK
debug1: Authenticating to 192.168.226.40:22 as 'root'
debug3: hostkeys_foreach: reading file "C:\Users\framegrabber/.ssh/known_hosts"
debug3: record_hostkey: found key type ECDSA in file C:\Users\framegrabber/.ssh/known_hosts:4
debug3: load_hostkeys: loaded 1 keys from 192.168.226.40
debug3: Failed to open file:C:/Users/framegrabber/.ssh/known_hosts2 error:2
debug3: Failed to open file:C:/ProgramData/ssh/ssh_known_hosts error:2
debug3: Failed to open file:C:/ProgramData/ssh/ssh_known_hosts2 error:2
debug3: order_hostkeyalgs: prefer hostkeyalgs: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
debug3: send packet: type 20
debug1: SSH2_MSG_KEXINIT sent
debug3: receive packet: type 20
debug1: SSH2_MSG_KEXINIT received
debug2: local client KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c
debug2: host key algorithms: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa
debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,zlib@openssh.com,zlib
debug2: compression stoc: none,zlib@openssh.com,zlib
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug2: peer server KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,kexguess2@matt.ucc.asn.au
debug2: host key algorithms: ssh-ed25519,ecdsa-sha2-nistp256,rsa-sha2-256,ssh-rsa,ssh-dss
debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes256-ctr
debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes256-ctr
debug2: MACs ctos: hmac-sha1,hmac-sha2-256
debug2: MACs stoc: hmac-sha1,hmac-sha2-256
debug2: compression ctos: none
debug2: compression stoc: none
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug1: kex: algorithm: curve25519-sha256
debug1: kex: host key algorithm: ecdsa-sha2-nistp256
debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: compression: none
debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: compression: none
debug3: send packet: type 30
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug3: receive packet: type 31
debug1: Server host key: ecdsa-sha2-nistp256 SHA256:1Shqyzo7ByuUKYVK0aJ4UFncxEnSPiN+YAE618bfLYY
debug3: hostkeys_foreach: reading file "C:\Users\framegrabber/.ssh/known_hosts"
debug3: record_hostkey: found key type ECDSA in file C:\Users\framegrabber/.ssh/known_hosts:4
debug3: load_hostkeys: loaded 1 keys from 192.168.226.40
debug3: Failed to open file:C:/Users/framegrabber/.ssh/known_hosts2 error:2
debug3: Failed to open file:C:/ProgramData/ssh/ssh_known_hosts error:2
debug3: Failed to open file:C:/ProgramData/ssh/ssh_known_hosts2 error:2
debug1: Host '192.168.226.40' is known and matches the ECDSA host key.
debug1: Found key in C:\Users\framegrabber/.ssh/known_hosts:4
debug3: send packet: type 21
debug2: set_newkeys: mode 1
debug1: rekey out after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug3: receive packet: type 21
debug1: SSH2_MSG_NEWKEYS received
debug2: set_newkeys: mode 0
debug1: rekey in after 134217728 blocks
debug3: unable to connect to pipe \\.\pipe\openssh-ssh-agent, error: 2
debug1: pubkey_prepare: ssh_get_authentication_socket: No such file or directory
debug1: Will attempt key: C:\Users\framegrabber/.ssh/id_rsa
debug1: Will attempt key: C:\Users\framegrabber/.ssh/id_dsa
debug1: Will attempt key: C:\Users\framegrabber/.ssh/id_ecdsa
debug1: Will attempt key: C:\Users\framegrabber/.ssh/id_ed25519
debug1: Will attempt key: C:\Users\framegrabber/.ssh/id_xmss
debug2: pubkey_prepare: done
debug3: send packet: type 5
debug3: receive packet: type 7
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-256,ssh-rsa,ssh-dss>
debug3: receive packet: type 6
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug3: send packet: type 50
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey,password
debug3: start over, passed a different list publickey,password
debug3: preferred publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Trying private key: C:\Users\framegrabber/.ssh/id_rsa
debug3: no such identity: C:\Users\framegrabber/.ssh/id_rsa: No such file or directory
debug1: Trying private key: C:\Users\framegrabber/.ssh/id_dsa
debug3: no such identity: C:\Users\framegrabber/.ssh/id_dsa: No such file or directory
debug1: Trying private key: C:\Users\framegrabber/.ssh/id_ecdsa
debug3: no such identity: C:\Users\framegrabber/.ssh/id_ecdsa: No such file or directory
debug1: Trying private key: C:\Users\framegrabber/.ssh/id_ed25519
debug3: no such identity: C:\Users\framegrabber/.ssh/id_ed25519: No such file or directory
debug1: Trying private key: C:\Users\framegrabber/.ssh/id_xmss
debug3: no such identity: C:\Users\framegrabber/.ssh/id_xmss: No such file or directory
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password
debug3: remaining preferred: ,password
debug3: authmethod_is_enabled password
debug1: Next authentication method: password
debug3: failed to open file:C:/dev/tty error:3
debug1: read_passphrase: can't open /dev/tty: No such file or directory
root@192.168.226.40's password:

@q000p
Copy link
Author

q000p commented Dec 20, 2023

The different network

C:\Users\framegrabber>ssh root@192.168.226.40 -vvv
OpenSSH_for_Windows_8.1p1, LibreSSL 3.0.2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/config error:2
debug3: Failed to open file:C:/ProgramData/ssh/ssh_config error:2
debug2: resolve_canonicalize: hostname 192.168.226.40 is address
debug2: ssh_connect_direct
debug1: Connecting to 192.168.226.40 [192.168.226.40] port 22.
debug1: Connection established.
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_rsa error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_rsa.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_rsa type -1
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_rsa-cert error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_rsa-cert.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_rsa-cert type -1
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_dsa error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_dsa.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_dsa type -1
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_dsa-cert error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_dsa-cert.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_dsa-cert type -1
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_ecdsa error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_ecdsa.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_ecdsa type -1
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_ecdsa-cert error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_ecdsa-cert.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_ecdsa-cert type -1
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_ed25519 error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_ed25519.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_ed25519 type -1
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_ed25519-cert error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_ed25519-cert.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_ed25519-cert type -1
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_xmss error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_xmss.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_xmss type -1
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_xmss-cert error:2
debug3: Failed to open file:C:/Users/framegrabber/.ssh/id_xmss-cert.pub error:2
debug1: identity file C:\Users\framegrabber/.ssh/id_xmss-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_for_Windows_8.1
debug1: Remote protocol version 2.0, remote software version dropbear_2020.79
debug1: no match: dropbear_2020.79
debug2: fd 3 setting O_NONBLOCK
debug1: Authenticating to 192.168.226.40:22 as 'root'
debug3: hostkeys_foreach: reading file "C:\Users\framegrabber/.ssh/known_hosts"
debug3: record_hostkey: found key type ECDSA in file C:\Users\framegrabber/.ssh/known_hosts:4
debug3: load_hostkeys: loaded 1 keys from 192.168.226.40
debug3: Failed to open file:C:/Users/framegrabber/.ssh/known_hosts2 error:2
debug3: Failed to open file:C:/ProgramData/ssh/ssh_known_hosts error:2
debug3: Failed to open file:C:/ProgramData/ssh/ssh_known_hosts2 error:2
debug3: order_hostkeyalgs: prefer hostkeyalgs: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
debug3: send packet: type 20
debug1: SSH2_MSG_KEXINIT sent
debug3: receive packet: type 20
debug1: SSH2_MSG_KEXINIT received
debug2: local client KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c
debug2: host key algorithms: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa
debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,zlib@openssh.com,zlib
debug2: compression stoc: none,zlib@openssh.com,zlib
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug2: peer server KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,kexguess2@matt.ucc.asn.au
debug2: host key algorithms: ssh-ed25519,ecdsa-sha2-nistp256,rsa-sha2-256,ssh-rsa,ssh-dss
debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes256-ctr
debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes256-ctr
debug2: MACs ctos: hmac-sha1,hmac-sha2-256
debug2: MACs stoc: hmac-sha1,hmac-sha2-256
debug2: compression ctos: none
debug2: compression stoc: none
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug1: kex: algorithm: curve25519-sha256
debug1: kex: host key algorithm: ecdsa-sha2-nistp256
debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: compression: none
debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: compression: none
debug3: send packet: type 30
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug3: receive packet: type 31
debug1: Server host key: ecdsa-sha2-nistp256 SHA256:1Shqyzo7ByuUKYVK0aJ4UFncxEnSPiN+YAE618bfLYY
debug3: hostkeys_foreach: reading file "C:\Users\framegrabber/.ssh/known_hosts"
debug3: record_hostkey: found key type ECDSA in file C:\Users\framegrabber/.ssh/known_hosts:4
debug3: load_hostkeys: loaded 1 keys from 192.168.226.40
debug3: Failed to open file:C:/Users/framegrabber/.ssh/known_hosts2 error:2
debug3: Failed to open file:C:/ProgramData/ssh/ssh_known_hosts error:2
debug3: Failed to open file:C:/ProgramData/ssh/ssh_known_hosts2 error:2
debug1: Host '192.168.226.40' is known and matches the ECDSA host key.
debug1: Found key in C:\Users\framegrabber/.ssh/known_hosts:4
debug3: send packet: type 21
debug2: set_newkeys: mode 1
debug1: rekey out after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug3: receive packet: type 21
debug1: SSH2_MSG_NEWKEYS received
debug2: set_newkeys: mode 0
debug1: rekey in after 134217728 blocks
debug3: unable to connect to pipe \\.\pipe\openssh-ssh-agent, error: 2
debug1: pubkey_prepare: ssh_get_authentication_socket: No such file or directory
debug1: Will attempt key: C:\Users\framegrabber/.ssh/id_rsa
debug1: Will attempt key: C:\Users\framegrabber/.ssh/id_dsa
debug1: Will attempt key: C:\Users\framegrabber/.ssh/id_ecdsa
debug1: Will attempt key: C:\Users\framegrabber/.ssh/id_ed25519
debug1: Will attempt key: C:\Users\framegrabber/.ssh/id_xmss
debug2: pubkey_prepare: done
debug3: send packet: type 5
debug3: receive packet: type 7
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-256,ssh-rsa,ssh-dss>
debug3: receive packet: type 6
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug3: send packet: type 50
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey,password
debug3: start over, passed a different list publickey,password
debug3: preferred publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Trying private key: C:\Users\framegrabber/.ssh/id_rsa
debug3: no such identity: C:\Users\framegrabber/.ssh/id_rsa: No such file or directory
debug1: Trying private key: C:\Users\framegrabber/.ssh/id_dsa
debug3: no such identity: C:\Users\framegrabber/.ssh/id_dsa: No such file or directory
debug1: Trying private key: C:\Users\framegrabber/.ssh/id_ecdsa
debug3: no such identity: C:\Users\framegrabber/.ssh/id_ecdsa: No such file or directory
debug1: Trying private key: C:\Users\framegrabber/.ssh/id_ed25519
debug3: no such identity: C:\Users\framegrabber/.ssh/id_ed25519: No such file or directory
debug1: Trying private key: C:\Users\framegrabber/.ssh/id_xmss
debug3: no such identity: C:\Users\framegrabber/.ssh/id_xmss: No such file or directory
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password
debug3: remaining preferred: ,password
debug3: authmethod_is_enabled password
debug1: Next authentication method: password
debug3: failed to open file:C:/dev/tty error:3
debug1: read_passphrase: can't open /dev/tty: No such file or directory
root@192.168.226.40's password:

@mkj
Copy link
Owner

mkj commented Dec 20, 2023

OK, nothing obvious there.

Are there any other connections being made to the SSH server at the same time by chance? (Wondering if it's the pre-auth per-IP limit. Seems unlikely).

@q000p
Copy link
Author

q000p commented Dec 21, 2023

No. The client PC moved from one network to another.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@mkj @q000p