[opensuse] fyi - sftp url parsing (with included port) broken in 11.3 kde3 - fish OK - howto work around?
I've run across a strange issue with sftp on 11.3 kde3 after recent updates. Attempting to connect to my server on my LAN with sftp, I get the following error: Unexpected sftp error: 2 - konqueror Error encountered while talking to ssh I don't know what recent update may have caused this (I suspect openssl), but it isn't suse specific. It also broke on Arch. The strange thing with both is 'fish' works fine -- even on a non-standard port. (apparently fish respects ~/.ssh/config) Another data point I have is that sftp still works fine with 11.0. So I guess whatever update 11.3 got that 11.0 didn't is causing the issue. I've checked syslog and nothing gets logged with the failure. It looks like a command line parsing issue. In konqueror, if I enter the url in the following form (as I've done for at least 4 years): sftp://user@host:port/dir1/dir2 sftp gives the error. However in 11.3 if I use the command line and do: sftp -Pport user@host:/dir1/dir2 I connect just fine. So it looks like the string kde3 now sends to ssh isn't working anymore. Ahah!! I just checked another box from 11.3 that uses the default port 22 as the ssh port and I can connect in konqueror in 11.3 via sftp just fine! Bingo. So I guess I need to know where I can try and fix this?? It seems that whatever changed in ssh no longer lets kde3 specify sftp locations as: sftp://user@host:port/dir1/dir2 Any thoughts on how I can work around this problem?? cc: Tim Pearson -- David C. Rankin, J.D.,P.E. Rankin Law Firm, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 Telephone: (936) 715-9333 Facsimile: (936) 715-9339 www.rankinlawfirm.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On 10/06/2010 09:10 PM, David C. Rankin wrote:
I've run across a strange issue with sftp on 11.3 kde3 after recent updates. Attempting to connect to my server on my LAN with sftp, I get the following error:
Unexpected sftp error: 2 - konqueror
Error encountered while talking to ssh
I don't know what recent update may have caused this (I suspect openssl), but it isn't suse specific. It also broke on Arch. The strange thing with both is 'fish' works fine -- even on a non-standard port. (apparently fish respects ~/.ssh/config)
Another data point I have is that sftp still works fine with 11.0. So I guess whatever update 11.3 got that 11.0 didn't is causing the issue. I've checked syslog and nothing gets logged with the failure.
It looks like a command line parsing issue. In konqueror, if I enter the url in the following form (as I've done for at least 4 years):
sftp://user@host:port/dir1/dir2
sftp gives the error. However in 11.3 if I use the command line and do:
sftp -Pport user@host:/dir1/dir2
I connect just fine. So it looks like the string kde3 now sends to ssh isn't working anymore.
Ahah!! I just checked another box from 11.3 that uses the default port 22 as the ssh port and I can connect in konqueror in 11.3 via sftp just fine! Bingo.
So I guess I need to know where I can try and fix this?? It seems that whatever changed in ssh no longer lets kde3 specify sftp locations as:
sftp://user@host:port/dir1/dir2
Any thoughts on how I can work around this problem??
OK, I have isolated the issue to a particular ssh host. I *can* connect with other servers on with ssh on high ports - just not my main one. The problem is *not* with the know_hosts file or authorized_keys file on either box. I need help figuring out why konqueror won't connect to my server. The client which throws the error in konqueror is (zephyr) and server (nirvana - ssh on port 6710). I can ssh from zephyr to nirvana from the cli in konsole just fine: 10:20 zephyr:~> ssh -v nirvana OpenSSH_5.4p1, OpenSSL 1.0.0 29 Mar 2010 debug1: Reading configuration data /home/david/.ssh/config debug1: Applying options for nirvana debug1: Reading configuration data /etc/ssh/ssh_config debug1: Applying options for * debug1: Connecting to nirvana [192.168.6.17] port 6710. debug1: Connection established. debug1: identity file /home/david/.ssh/id_rsa type -1 debug1: identity file /home/david/.ssh/id_rsa-cert type -1 debug1: identity file /home/david/.ssh/id_dsa type 2 debug1: identity file /home/david/.ssh/id_dsa-cert type -1 debug1: Remote protocol version 2.0, remote software version OpenSSH_5.6 debug1: match: OpenSSH_5.6 pat OpenSSH* debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_5.4 debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug1: kex: server->client aes128-ctr hmac-md5 none debug1: kex: client->server aes128-ctr hmac-md5 none debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP debug1: SSH2_MSG_KEX_DH_GEX_INIT sent debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY debug1: Host '[nirvana]:6710' is known and matches the RSA host key. debug1: Found key in /home/david/.ssh/known_hosts:1 debug1: ssh_rsa_verify: signature correct debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug1: SSH2_MSG_NEWKEYS received debug1: Roaming not allowed by server debug1: SSH2_MSG_SERVICE_REQUEST sent debug1: SSH2_MSG_SERVICE_ACCEPT received debug1: Authentications that can continue: publickey,password debug1: Next authentication method: publickey debug1: Trying private key: /home/david/.ssh/id_rsa debug1: Offering public key: /home/david/.ssh/id_dsa debug1: Server accepts key: pkalg ssh-dss blen 433 debug1: read PEM private key done: type DSA debug1: Authentication succeeded (publickey). debug1: channel 0: new [client-session] debug1: Requesting no-more-sessions@openssh.com debug1: Entering interactive session. debug1: Sending environment. debug1: Sending env LANG = en_US.UTF-8 Last login: Fri Oct 8 10:20:03 2010 from zephyr.3111skyline.com So the question is - if I can connect from konsole, why is konqueror refusing to connect and throwing and Unexpected ssh error? And... what made it stop connecting and start puking? (it has worked to this same host for years) Firewall isn't an issue. The sshd_config on the nirvana is: Port 6710 ListenAddress 0.0.0.0 Protocol 2 PermitEmptyPasswords no ChallengeResponseAuthentication no UsePAM yes X11Forwarding yes Subsystem sftp /usr/lib/ssh/sftp-server AllowGroups rankin xfamily I have tried with and without: ChallengeResponseAuthentication yes PasswordAuthentication yes But that makes no difference. So I need help from the really smart people to figure out why konqueror won't sftp. Is there anything cached anywhere in kde3 that could cause the problem? I have multiple servers with the same sshd config and I can get to them. I can't tell if this is definitely a server issue or a host issue? Any guesses will be better than mine -- I'm all out :( -- David C. Rankin, J.D.,P.E. Rankin Law Firm, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 Telephone: (936) 715-9333 Facsimile: (936) 715-9339 www.rankinlawfirm.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On 10/08/2010 11:44 AM, David C. Rankin wrote:
I can't tell if this is definitely a server issue or a host issue? Any guesses will be better than mine -- I'm all out :(
AARGH - nevermind. Some idiot had messed up the localhost line in /etc/hosts ;-) it was 127.0.0.1 host.domain localhost host changed to 127.0.0.1 localhost host and it works again. God knows how long it was like that, or what caused konqueror to start throwing errors when gnome/kde4/etc.. just kept working. I guess k3 is just the only desktop smart enough to check for the inconsistency :p -- David C. Rankin, J.D.,P.E. Rankin Law Firm, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 Telephone: (936) 715-9333 Facsimile: (936) 715-9339 www.rankinlawfirm.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (1)
-
David C. Rankin