Update to my comment above (#37):

I was able to connect to Box2 from OS X 10.11. I tried once more by
mistake and was shocked that it suddenly worked (albeit with a long
connection lag). With more testing I found I could connect from 10.11 to
Box2 maybe 1/25 times (as I said, crazy making). I wasn't ever able to
get to Box2 from Box1 despite trying numerous times. Long story short it
looks like the Ubuntu SSH client is the most particular vs least able to
win the race, followed by that in 10.11, followed by 10.9 which always
connected without a problem. Interestingly when I switched to keys 10.11
was much more likely to connect (1/5 times). The switch to keys had no
effect on Box1's inability to connect to Box2. So as with #36 I'd say
Ubuntu's ssh client gave the worst experience here - vs - is actually
the best but just needs an error message explaining why it's electing to
protect me from (...?) vs "working" as my other clients did.


For those curious about the sshd aspect of the story I did finally track down a 
fix for Box2. Box1 and Box2 are both dual nic systems. They were configured 
with eth0 as static and eth1 dhcp. Plugging eth1 and letting it obtained a dhcp 
lease / taking that interface out of the config fixed Box2. Having the 
interface configured but the jack unplug produced the client dependent 
connection issues I outlined in #37. Box1 had the exact same interface config 
(eth1 looking for a dhcp lease but not being plugged in) without any problem. 
They are both full Intel systems but totally different hardware. Seems like the 
kernel abstraction leaking hardware details up the stack but understandable 
given both were arguably misconfigured. Imagine how annoying it would be in a 
dual nic system to have a port go out and suddenly arbitrarily be unable to 
connect to sshd with anything other than an old copy of OS X. 

TL;DR - my 16.10 ssh client didn't work when others did and failed
silently. This may be Ubuntu being smart. It may be Ubuntu being broken.
Either repair or an informative error would make the experience better
than / comparable to others.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1254085

Title:
  ssh fails to connect to VPN host - hangs at 'expecting
  SSH2_MSG_KEX_ECDH_REPLY'

Status in openssh package in Ubuntu:
  Invalid

Bug description:
  ssh -vvv <host> is failing for me where <host> is a VPN system.

  VPN is configured and connected via network-manager. Last messages
  from ssh (hangs forever):

  debug2: kex_parse_kexinit: none,z...@openssh.com
  debug2: kex_parse_kexinit: none,z...@openssh.com
  debug2: kex_parse_kexinit: 
  debug2: kex_parse_kexinit: 
  debug2: kex_parse_kexinit: first_kex_follows 0 
  debug2: kex_parse_kexinit: reserved 0 
  debug2: mac_setup: found hmac-md5
  debug1: kex: server->client aes128-ctr hmac-md5 none
  debug2: mac_setup: found hmac-md5
  debug1: kex: client->server aes128-ctr hmac-md5 none
  debug1: sending SSH2_MSG_KEX_ECDH_INIT
  debug1: expecting SSH2_MSG_KEX_ECDH_REPLY

  
  = Workaround =

  $ sudo apt-get install putty
  $ putty <host>

  This works perfectly.

  ProblemType: Bug
  DistroRelease: Ubuntu 14.04
  Package: openssh-client 1:6.4p1-1
  ProcVersionSignature: Ubuntu 3.12.0-3.8-generic 3.12.0
  Uname: Linux 3.12.0-3-generic i686
  NonfreeKernelModules: nvidia
  ApportVersion: 2.12.7-0ubuntu1
  Architecture: i386
  CurrentDesktop: Unity
  Date: Fri Nov 22 15:37:18 2013
  InstallationDate: Installed on 2010-10-21 (1128 days ago)
  InstallationMedia: Ubuntu 10.10 "Maverick Meerkat" - Release i386 (20101007)
  RelatedPackageVersions:
   ssh-askpass       1:1.2.4.1-9
   libpam-ssh        N/A
   keychain          2.7.1-1
   ssh-askpass-gnome 1:6.4p1-1
  SSHClientVersion: OpenSSH_6.4p1 Ubuntu-1, OpenSSL 1.0.1e 11 Feb 2013
  SourcePackage: openssh
  UpgradeStatus: Upgraded to trusty on 2013-11-01 (20 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1254085/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to