Can't SSH into Webmin servers

Submitted by yngens on Thu, 02/19/2015 - 17:57

Not sure if this has anything with https://virtualmin.com/node/36253, but today we can't SSH in to bunch of Webmin servers with the following output of SSH command with -v parameter:

OpenSSH_6.2p2, OSSLShim 0.9.8r 8 Dec 2011
debug1: Reading configuration data /Users/alan/.ssh/config
debug1: Reading configuration data /etc/ssh_config
debug1: /etc/ssh_config line 20: Applying options for *
debug1: Connecting to xxx.xxx.xxx.xx [xxx.xxx.xxx.xx] port 13487.
debug1: Connection established.
debug1: identity file /Users/alan/.ssh/id_rsa type 1
debug1: identity file /Users/alan/.ssh/id_rsa-cert type -1
debug1: identity file /Users/alan/.ssh/id_dsa type 2
debug1: identity file /Users/alan/.ssh/id_dsa-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.2
debug1: Remote protocol version 2.0, remote software version OpenSSH_6.4
debug1: match: OpenSSH_6.4 pat OpenSSH*
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-ctr hmac-md5-etm@openssh.com none
debug1: kex: client->server aes128-ctr hmac-md5-etm@openssh.com none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
Read from socket failed: Operation timed out

Something related to SSH from last Webmin upgrade must be causing this.

Status: 
Closed (fixed)

Comments

Submitted by yngens on Thu, 02/19/2015 - 18:04

Here is the version of SSH on perfectly working Webmin server:

OpenSSH_5.3p1, OpenSSL 1.0.1e-fips 11 Feb 2013

and here is from the broken one with Webmin and remote SSH unavailable:

OpenSSH_6.4p1, OpenSSL 1.0.1e-fips 11 Feb 2013

What strange is that I can SSH into broken server from OpenSSH_5.3p1, however from my local Mac laptop which has

OpenSSH_6.2p2, OSSLShim 0.9.8r 8 Dec 2011

I can't connect. So something definitely went wrong with OpenSSH_6.4p1, OpenSSL 1.0.1e-fips 11 Feb 2013.

Submitted by yngens on Thu, 02/19/2015 - 18:21

Edited:

One more consideration: the issue is happening on only CentOS 7 based VPSs. CentOS 6 based machines with the following SSH version:

OpenSSH_5.3p1, OpenSSL 1.0.1e-fips 11 Feb 2013

are accessible through Webmin UI and SSH normally.

Submitted by yngens on Thu, 02/19/2015 - 18:49

Quite strange, but after some time without any change made by our part all servers started to be available through bot Webmin UI and SSH.

What might be the reason for this strange temporary issue? Comcast, which is my local ISP or our data-center, where our servers are located?

Submitted by JamieCameron on Thu, 02/19/2015 - 19:44

Hard to say, but Webmin itself should never interfere with your ability to SSH.

Submitted by yngens on Mon, 02/23/2015 - 22:18

Thanks Jamie and sorry for false report. Closing this issue...