With a little side of applesauce...

Thursday, February 23, 2012

Debian - issues upgrading openssh-server


I was having problems upgrading both openssh-client and openssh-server on Debian Squeeze, after finding that  both packages had a status of 'ic'. I found that both /usr/bin/ssh and /usr/sbin/sshd had a few attributes set, then were causing the upgrades to fail per this post. Here is a quick run-down from the post:




   74  lsattr /usr/bin/ssh
   75  chattr -i /usr/bin/ssh
   76  chattr -a /usr/bin/ssh
   77  lsattr /usr/sbin/sshd
   78  chattr -i /usr/sbin/sshd
   79  chattr -a /usr/sbin/sshd



The symptoms of that lead to my discovery were:


bash: scp: command not found
lost connection


when trying to scp some files to the server. And, then the following errors were found in /var/log/auth.log on the server:



Feb 23 09:54:04 host sshd[20432]: error: Bad prime description in line 185
Feb 23 09:54:04 host sshd[20432]: error: Bad prime description in line 186
Feb 23 09:54:04 host sshd[20432]: error: Bad prime description in line 187
Feb 23 09:54:04 host sshd[20432]: error: Bad prime description in line 188
Feb 23 09:54:04 host sshd[20432]: error: Bad prime description in line 189
Feb 23 09:54:04 host sshd[20432]: error: Bad prime description in line 190


which were caused by someone trying to start an SSH session.

It seems like an old bug, so not sure how we were still suffering from it...

No comments: