Opened 8 years ago

Closed 8 years ago

#1667 closed defect (fixed)

ssh login to upload.osgeo.org not possible

Reported by: jef Owned by: sac@…
Priority: major Milestone:
Component: SysAdmin Keywords:
Cc: upload

Description

Currently ssh login to upload.osgeo.org does not work (neither via password nor key)

Change History (10)

comment:1 by jef, 8 years ago

login to the qgis vm also affected

comment:2 by martin, 8 years ago

I'm working on adding new certificates to LDAP authentication. Upload and Qgis should be fixed already, please holler if yours still doesn't work within 12 hours from now.

Martin.

comment:3 by strk, 8 years ago

I confirm upload is fixed for me. git.osgeo.org still fails, with:

ssh_exchange_identification: read: Connection reset by peer

comment:4 by martin, 8 years ago

Worksforme. Too many failed logins ?

Please try from a different IP and report back, Martin.

comment:5 by jef, 8 years ago

upload and qgis vm login are fixed.

comment:6 by strk, 8 years ago

Works from a different IP, so I guess it is due to "too many failed logins". (When) will this protection expire ?

comment:7 by strk, 8 years ago

sshd logs show a refused connect message for my IP,but I don't see which configuration of sshd determines that.

comment:8 by strk, 8 years ago

iptables -L shows no rule in place

comment:9 by strk, 8 years ago

So with the help or Jurgen the forbidding line was found in /etc/hosts.deny, added on May 1st. The ssh logs show that around that time I had multiple failing login attempts due to LDAP service being unreachable.

Now if I remove my IP from /etc/hosts.deny I can log in, but the hosts.deny records re-appears shortly after. Looking at "denyhosts" configuration it seems that 1 failed login (DENY_THRESHOLD_RESTRICTED) results in 1 week of denial (PURGE_DENY).

Adding my (static) IP to /etc/hosts.allow lets me in no matter the denial period. I've "solved" the issue like this. The ticket can be closed, for what concerns myself.

comment:10 by jef, 8 years ago

Resolution: fixed
Status: newclosed
Note: See TracTickets for help on using tickets.