Guest User

ssh daemon log

a guest
Nov 26th, 2018
147
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 16.42 KB | None | 0 0
  1. debug2: load_server_config: filename /etc/ssh/sshd_config
  2. debug2: load_server_config: done config len = 308
  3. debug2: parse_server_config: config /etc/ssh/sshd_config len 308
  4. debug3: /etc/ssh/sshd_config:15 setting ListenAddress 0.0.0.0
  5. debug3: /etc/ssh/sshd_config:41 setting AuthorizedKeysFile .ssh/authorized_keys
  6. debug3: /etc/ssh/sshd_config:61 setting ChallengeResponseAuthentication no
  7. debug3: /etc/ssh/sshd_config:82 setting UsePAM yes
  8. debug3: /etc/ssh/sshd_config:87 setting X11Forwarding yes
  9. debug3: /etc/ssh/sshd_config:89 setting X11UseLocalhost no
  10. debug3: /etc/ssh/sshd_config:91 setting PrintMotd no
  11. debug3: /etc/ssh/sshd_config:109 setting Subsystem sftp /usr/lib/ssh/sftp-server
  12. debug1: sshd version OpenSSH_7.9, OpenSSL 1.1.1 11 Sep 2018
  13. debug1: private host key #0: ssh-rsa SHA256:wt679z4lw0qHMMYlspAmBoG2QpAm1HwitzT1KLcMdeI
  14. debug1: private host key #1: ecdsa-sha2-nistp256 SHA256:QzKEHytgEKHxIGSqH6AaKPn4ZW24YORnGq1vKB/a/+g
  15. debug1: private host key #2: ssh-ed25519 SHA256:fSNSAB7gH+SUvdqfCwbQXWLtY9spE3cRB09hrMcdDKk
  16. debug1: rexec_argv[0]='/usr/bin/sshd'
  17. debug1: rexec_argv[1]='-ddd'
  18. debug3: oom_adjust_setup
  19. debug1: Set /proc/self/oom_score_adj from 0 to -1000
  20. debug2: fd 5 setting O_NONBLOCK
  21. debug1: Bind to port 22 on 0.0.0.0.
  22. Server listening on 0.0.0.0 port 22.
  23. debug3: fd 6 is not O_NONBLOCK
  24. debug1: Server will not fork when running in debugging mode.
  25. debug3: send_rexec_state: entering fd = 9 config len 308
  26. debug3: ssh_msg_send: type 0
  27. debug3: send_rexec_state: done
  28. debug1: rexec start in 6 out 6 newsock 6 pipe -1 sock 9
  29. debug1: inetd sockets after dupping: 5, 5
  30. Connection from x.x.x.10 port 51950 on x.x.x.23 port 22
  31. debug1: Client protocol version 2.0; client software version OpenSSH_7.9
  32. debug1: match: OpenSSH_7.9 pat OpenSSH* compat 0x04000000
  33. debug1: Local version string SSH-2.0-OpenSSH_7.9
  34. debug2: fd 5 setting O_NONBLOCK
  35. debug3: ssh_sandbox_init: preparing seccomp filter sandbox
  36. debug2: Network child is on pid 19314
  37. debug3: preauth child monitor started
  38. debug3: privsep user:group 65534:65534 [preauth]
  39. debug1: permanently_set_uid: 65534/65534 [preauth]
  40. debug3: ssh_sandbox_child: setting PR_SET_NO_NEW_PRIVS [preauth]
  41. debug3: ssh_sandbox_child: attaching seccomp filter program [preauth]
  42. debug1: list_hostkey_types: rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
  43. debug3: send packet: type 20 [preauth]
  44. debug1: SSH2_MSG_KEXINIT sent [preauth]
  45. debug3: receive packet: type 20 [preauth]
  46. debug1: SSH2_MSG_KEXINIT received [preauth]
  47. debug2: local server KEXINIT proposal [preauth]
  48. debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1 [preauth]
  49. debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
  50. debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
  51. debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
  52. debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
  53. debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
  54. debug2: compression ctos: none,zlib@openssh.com [preauth]
  55. debug2: compression stoc: none,zlib@openssh.com [preauth]
  56. debug2: languages ctos: [preauth]
  57. debug2: languages stoc: [preauth]
  58. debug2: first_kex_follows 0 [preauth]
  59. debug2: reserved 0 [preauth]
  60. debug2: peer client KEXINIT proposal [preauth]
  61. debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c [preauth]
  62. debug2: host key algorithms: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa [preauth]
  63. debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
  64. debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com [preauth]
  65. debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
  66. debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
  67. debug2: compression ctos: none,zlib@openssh.com,zlib [preauth]
  68. debug2: compression stoc: none,zlib@openssh.com,zlib [preauth]
  69. debug2: languages ctos: [preauth]
  70. debug2: languages stoc: [preauth]
  71. debug2: first_kex_follows 0 [preauth]
  72. debug2: reserved 0 [preauth]
  73. debug1: kex: algorithm: curve25519-sha256 [preauth]
  74. debug1: kex: host key algorithm: ecdsa-sha2-nistp256 [preauth]
  75. debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none [preauth]
  76. debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none [preauth]
  77. debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth]
  78. debug3: receive packet: type 30 [preauth]
  79. debug3: mm_sshkey_sign entering [preauth]
  80. debug3: mm_request_send entering: type 6 [preauth]
  81. debug3: mm_sshkey_sign: waiting for MONITOR_ANS_SIGN [preauth]
  82. debug3: mm_request_receive_expect entering: type 7 [preauth]
  83. debug3: mm_request_receive entering [preauth]
  84. debug3: mm_request_receive entering
  85. debug3: monitor_read: checking request 6
  86. debug3: mm_answer_sign
  87. debug3: mm_answer_sign: hostkey proof signature 0x5654fb09df70(101)
  88. debug3: mm_request_send entering: type 7
  89. debug2: monitor_read: 6 used once, disabling now
  90. debug3: send packet: type 31 [preauth]
  91. debug3: send packet: type 21 [preauth]
  92. debug2: set_newkeys: mode 1 [preauth]
  93. debug1: rekey after 134217728 blocks [preauth]
  94. debug1: SSH2_MSG_NEWKEYS sent [preauth]
  95. debug1: expecting SSH2_MSG_NEWKEYS [preauth]
  96. debug3: send packet: type 7 [preauth]
  97. debug3: receive packet: type 21 [preauth]
  98. debug1: SSH2_MSG_NEWKEYS received [preauth]
  99. debug2: set_newkeys: mode 0 [preauth]
  100. debug1: rekey after 134217728 blocks [preauth]
  101. debug1: KEX done [preauth]
  102. debug3: receive packet: type 5 [preauth]
  103. debug3: send packet: type 6 [preauth]
  104. debug3: receive packet: type 50 [preauth]
  105. debug1: userauth-request for user pdaddy service ssh-connection method none [preauth]
  106. debug1: attempt 0 failures 0 [preauth]
  107. debug3: mm_getpwnamallow entering [preauth]
  108. debug3: mm_request_send entering: type 8 [preauth]
  109. debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
  110. debug3: mm_request_receive_expect entering: type 9 [preauth]
  111. debug3: mm_request_receive entering [preauth]
  112. debug3: mm_request_receive entering
  113. debug3: monitor_read: checking request 8
  114. debug3: mm_answer_pwnamallow
  115. debug2: parse_server_config: config reprocess config len 308
  116. debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
  117. debug3: mm_request_send entering: type 9
  118. debug2: monitor_read: 8 used once, disabling now
  119. debug2: input_userauth_request: setting up authctxt for pdaddy [preauth]
  120. debug3: mm_start_pam entering [preauth]
  121. debug3: mm_request_send entering: type 100 [preauth]
  122. debug3: mm_inform_authserv entering [preauth]
  123. debug3: mm_request_send entering: type 4 [preauth]
  124. debug2: input_userauth_request: try method none [preauth]
  125. debug3: user_specific_delay: user specific delay 0.000ms [preauth]
  126. debug3: ensure_minimum_time_since: elapsed 2.336ms, delaying 5.255ms (requested 7.592ms) [preauth]
  127. debug3: mm_request_receive entering
  128. debug3: monitor_read: checking request 100
  129. debug1: PAM: initializing for "pdaddy"
  130. debug1: PAM: setting PAM_RHOST to "x.x.x.10"
  131. debug1: PAM: setting PAM_TTY to "ssh"
  132. debug2: monitor_read: 100 used once, disabling now
  133. debug3: mm_request_receive entering
  134. debug3: monitor_read: checking request 4
  135. debug3: mm_answer_authserv: service=ssh-connection, style=
  136. debug2: monitor_read: 4 used once, disabling now
  137. debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
  138. debug3: send packet: type 51 [preauth]
  139. debug3: receive packet: type 50 [preauth]
  140. debug1: userauth-request for user pdaddy service ssh-connection method publickey [preauth]
  141. debug1: attempt 1 failures 0 [preauth]
  142. debug2: input_userauth_request: try method publickey [preauth]
  143. debug1: userauth_pubkey: test pkalg rsa-sha2-512 pkblob RSA SHA256:S/DpflLT0joAwq60OZ3eqTqR8avmyUXJB3yU/dLiFNg [preauth]
  144. debug3: mm_key_allowed entering [preauth]
  145. debug3: mm_request_send entering: type 22 [preauth]
  146. debug3: mm_key_allowed: waiting for MONITOR_ANS_KEYALLOWED [preauth]
  147. debug3: mm_request_receive_expect entering: type 23 [preauth]
  148. debug3: mm_request_receive entering [preauth]
  149. debug3: mm_request_receive entering
  150. debug3: monitor_read: checking request 22
  151. debug3: mm_answer_keyallowed entering
  152. debug3: mm_answer_keyallowed: key_from_blob: 0x5654fb0a4ca0
  153. debug1: temporarily_use_uid: 1000/1000 (e=0/0)
  154. debug1: trying public key file /home/pdaddy/.ssh/authorized_keys
  155. debug1: fd 7 clearing O_NONBLOCK
  156. debug1: /home/pdaddy/.ssh/authorized_keys:14: matching key found: RSA SHA256:S/DpflLT0joAwq60OZ3eqTqR8avmyUXJB3yU/dLiFNg
  157. debug1: /home/pdaddy/.ssh/authorized_keys:14: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding
  158. Accepted key RSA SHA256:S/DpflLT0joAwq60OZ3eqTqR8avmyUXJB3yU/dLiFNg found at /home/pdaddy/.ssh/authorized_keys:14
  159. debug1: restore_uid: 0/0
  160. debug3: mm_answer_keyallowed: publickey authentication test: RSA key is allowed
  161. debug3: mm_request_send entering: type 23
  162. debug3: send packet: type 60 [preauth]
  163. debug2: userauth_pubkey: authenticated 0 pkalg rsa-sha2-512 [preauth]
  164. debug3: user_specific_delay: user specific delay 0.000ms [preauth]
  165. debug3: ensure_minimum_time_since: elapsed 5.361ms, delaying 2.230ms (requested 7.592ms) [preauth]
  166. Postponed publickey for pdaddy from x.x.x.10 port 51950 ssh2 [preauth]
  167. debug3: receive packet: type 50 [preauth]
  168. debug1: userauth-request for user pdaddy service ssh-connection method publickey [preauth]
  169. debug1: attempt 2 failures 0 [preauth]
  170. debug2: input_userauth_request: try method publickey [preauth]
  171. debug3: userauth_pubkey: have rsa-sha2-512 signature for RSA SHA256:S/DpflLT0joAwq60OZ3eqTqR8avmyUXJB3yU/dLiFNg [preauth]
  172. debug3: mm_key_allowed entering [preauth]
  173. debug3: mm_request_send entering: type 22 [preauth]
  174. debug3: mm_key_allowed: waiting for MONITOR_ANS_KEYALLOWED [preauth]
  175. debug3: mm_request_receive_expect entering: type 23 [preauth]
  176. debug3: mm_request_receive entering [preauth]
  177. debug3: mm_request_receive entering
  178. debug3: monitor_read: checking request 22
  179. debug3: mm_answer_keyallowed entering
  180. debug3: mm_answer_keyallowed: key_from_blob: 0x5654fb0a9c60
  181. debug1: temporarily_use_uid: 1000/1000 (e=0/0)
  182. debug1: trying public key file /home/pdaddy/.ssh/authorized_keys
  183. debug1: fd 7 clearing O_NONBLOCK
  184. debug1: /home/pdaddy/.ssh/authorized_keys:14: matching key found: RSA SHA256:S/DpflLT0joAwq60OZ3eqTqR8avmyUXJB3yU/dLiFNg
  185. debug1: /home/pdaddy/.ssh/authorized_keys:14: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding
  186. Accepted key RSA SHA256:S/DpflLT0joAwq60OZ3eqTqR8avmyUXJB3yU/dLiFNg found at /home/pdaddy/.ssh/authorized_keys:14
  187. debug1: restore_uid: 0/0
  188. debug3: mm_answer_keyallowed: publickey authentication: RSA key is allowed
  189. debug3: mm_request_send entering: type 23
  190. debug3: mm_sshkey_verify entering [preauth]
  191. debug3: mm_request_send entering: type 24 [preauth]
  192. debug3: mm_sshkey_verify: waiting for MONITOR_ANS_KEYVERIFY [preauth]
  193. debug3: mm_request_receive_expect entering: type 25 [preauth]
  194. debug3: mm_request_receive entering [preauth]
  195. debug3: mm_request_receive entering
  196. debug3: monitor_read: checking request 24
  197. debug3: mm_answer_keyverify: publickey 0x5654fb0a4ca0 signature verified
  198. debug1: auth_activate_options: setting new authentication options
  199. debug3: mm_request_send entering: type 25
  200. debug3: mm_request_receive_expect entering: type 102
  201. debug3: mm_request_receive entering
  202. debug1: do_pam_account: called
  203. debug2: do_pam_account: auth information in SSH_AUTH_INFO_0
  204. debug3: PAM: do_pam_account pam_acct_mgmt = 0 (Success)
  205. debug3: mm_request_send entering: type 103
  206. Accepted publickey for pdaddy from x.x.x.10 port 51950 ssh2: RSA SHA256:S/DpflLT0joAwq60OZ3eqTqR8avmyUXJB3yU/dLiFNg
  207. debug1: monitor_child_preauth: pdaddy has been authenticated by privileged process
  208. debug3: mm_get_keystate: Waiting for new keys
  209. debug3: mm_request_receive_expect entering: type 26
  210. debug3: mm_request_receive entering
  211. debug3: mm_get_keystate: GOT new keys
  212. debug1: auth_activate_options: setting new authentication options [preauth]
  213. debug2: userauth_pubkey: authenticated 1 pkalg rsa-sha2-512 [preauth]
  214. debug3: user_specific_delay: user specific delay 0.000ms [preauth]
  215. debug3: ensure_minimum_time_since: elapsed 2.754ms, delaying 4.837ms (requested 7.592ms) [preauth]
  216. debug3: mm_do_pam_account entering [preauth]
  217. debug3: mm_request_send entering: type 102 [preauth]
  218. debug3: mm_request_receive_expect entering: type 103 [preauth]
  219. debug3: mm_request_receive entering [preauth]
  220. debug3: mm_do_pam_account returning 1 [preauth]
  221. debug3: send packet: type 52 [preauth]
  222. debug3: mm_request_send entering: type 26 [preauth]
  223. debug3: mm_send_keystate: Finished sending state [preauth]
  224. debug1: monitor_read_log: child log fd closed
  225. debug3: ssh_sandbox_parent_finish: finished
  226. debug1: PAM: establishing credentials
  227. debug3: PAM: opening session
  228. debug2: do_pam_session: auth information in SSH_AUTH_INFO_0
  229. User child is on pid 19317
  230. debug1: PAM: establishing credentials
  231. debug1: permanently_set_uid: 1000/1000
  232. debug3: monitor_apply_keystate: packet_set_state
  233. debug2: set_newkeys: mode 0
  234. debug1: rekey after 134217728 blocks
  235. debug2: set_newkeys: mode 1
  236. debug1: rekey after 134217728 blocks
  237. debug1: ssh_packet_set_postauth: called
  238. debug3: ssh_packet_set_state: done
  239. debug3: notify_hostkeys: key 0: ssh-rsa SHA256:wt679z4lw0qHMMYlspAmBoG2QpAm1HwitzT1KLcMdeI
  240. debug3: notify_hostkeys: key 1: ecdsa-sha2-nistp256 SHA256:QzKEHytgEKHxIGSqH6AaKPn4ZW24YORnGq1vKB/a/+g
  241. debug3: notify_hostkeys: key 2: ssh-ed25519 SHA256:fSNSAB7gH+SUvdqfCwbQXWLtY9spE3cRB09hrMcdDKk
  242. debug3: notify_hostkeys: sent 3 hostkeys
  243. debug3: send packet: type 80
  244. debug1: active: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding
  245. debug3: sending debug message: /home/pdaddy/.ssh/authorized_keys:14: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding
  246. debug3: send packet: type 4
  247. debug3: sending debug message: /home/pdaddy/.ssh/authorized_keys:14: key options: agent-forwarding port-forwarding pty user-rc x11-forwarding
  248. debug3: send packet: type 4
  249. debug1: Entering interactive session for SSH2.
  250. debug2: fd 10 setting O_NONBLOCK
  251. debug2: fd 11 setting O_NONBLOCK
  252. debug1: server_init_dispatch
  253. debug3: receive packet: type 90
  254. debug1: server_input_channel_open: ctype session rchan 1 win 1048576 max 16384
  255. debug1: input_session_request
  256. debug1: channel 0: new [server-session]
  257. debug2: session_new: allocate (allocated 0 max 10)
  258. debug3: session_unused: session id 0 unused
  259. debug1: session_new: session 0
  260. debug1: session_open: channel 0
  261. debug1: session_open: session 0: link with channel 0
  262. debug1: server_input_channel_open: confirm session
  263. debug3: send packet: type 91
  264.  
  265. The hang occurs here. There is no additional logging from the daemon after I
  266. kill the client. The remaining log lines simple come after I hit <Ctrl>+<c>
  267. to kill the daemon.
  268.  
  269. debug3: mm_request_receive entering
  270. debug1: do_cleanup
  271. debug1: PAM: cleanup
  272. debug1: PAM: closing session
  273. debug1: PAM: deleting credentials
  274. debug3: PAM: sshpam_thread_cleanup entering
Add Comment
Please, Sign In to add comment