Solved

Solaris 10 SSH issues

Posted on 2011-09-21
5
1,185 Views
Last Modified: 2012-05-12
Experts,

I'm having an issue where I can successfully SSH inside our LAN, but can't SSH from the WAN to Solaris servers. These are new vanilla installs of Solaris 10 v5.10 with 10_Recommended patch cluster 144488-17 installed. From what I can tell SSH installed with no problems as I can SSH to and from Windows, Linux and other Solaris servers, yet when I try to come in from the WAN I get a "connection timed out" error from Putty. Also I must mention that this error is intermittent in that sometimes a connection will work on box A and B, but Box C won't connect and vice versa. I can also successfully ping each server from the WAN with no problems. Where should I start troubleshooting?

Thanks
0
Comment
Question by:drei22
  • 2
  • 2
5 Comments
 
LVL 76

Expert Comment

by:arnold
ID: 36575175
Did you setup port forwarding on the external router to allow port 22 traffic to hit the solaris 10 server?


check /etc/hosts.allow and see whether you have sshd:LAN_IP_range

try telnet <solaris_server> 22
and see whether the connection is in syn_sent or whether the TCP session is actually established.
0
 

Author Comment

by:drei22
ID: 36581692
@arnold

The firewall has been configured to allow a range of the correct IP's. The weird thing is that certain boxes will allow ssh for a short time, then disconnect for no reason at all. I have no /etc/hosts.allow files on these boxes, are they necessary?
0
 
LVL 76

Accepted Solution

by:
arnold earned 250 total points
ID: 36581728
the /etc/hosts.allow and /etc/hosts.deny are a pair that one can use to restrict access to the system based on the where they are comming from.

The disconnect could be by the firewall (idle timeout).

Unfortunately, there is not enough information beyond the suggestions I made.

Check /var/adm/messages for events from sshd unless you altered sshd_config to other facility/authority for syslog options..
0
 
LVL 4

Assisted Solution

by:Anacreo
Anacreo earned 250 total points
ID: 36713127
Can you reach out to the WAN from the Sun servers?

Check your defaults such as:

Default Route:
# netstat -rn (although if you are intermittently successful, less likely to be the culprit)

Subnetmask and Broadcast address:
# ifconfig -a

Check the system log to see if any errors line up:
# dmesg

Stop SSHD and run it manually in debug mode:
# svcadm disable sshd
# /usr/lib/ssh/sshd -d
(when done)
ctrl-c
# svcadm enable sshd

Lastly try taking a snoop and loading that into your favorite network genius tool (Wireshark)
# snoop -d <nic> -o sshlog.snoop port 22
1 attempt connection
2 ctrl-c after your SSH connection dies..
3 FTP that over to your machine with Wireshark and see what it says...

On the client side you could also try running ssh client in debug mode and see if the failure helps diagnose this.

Basics first I always say...
0
 

Author Closing Comment

by:drei22
ID: 36924027
The problem ended up being that routing wasn't setup correctly on each server.
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

Let's say you need to move the data of a file system from one partition to another. This generally involves dismounting the file system, backing it up to tapes, and restoring it to a new partition. You may also copy the file system from one place to…
This tech tip describes how to install the Solaris Operating System from a tape backup that was created using the Solaris flash archive utility. I have used this procedure on the Solaris 8 and 9 OS, and it shoudl also work well on the Solaris 10 rel…
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now