[Info-vax] Eisner/Encompasserve down

John H. Reinhardt johnhreinhardt at thereinhardts.org
Thu Sep 5 12:49:00 EDT 2024


I don't know if this helps any.  I make a successful connection.  I have an older version of Open SSH 8.6p1 vs 9.0p1

For some of my older OpenVMS systems I do have to specify specific algorithms.

Host    asimov
     HostName            asimov.xxxxxxxx.xxx
     KexAlgorithms       +diffie-hellman-group1-sha1
     HostKeyAlgorithms   +ssh-dss
     Ciphers             aes128-cbc

But nothing special for eisner

Host    eisner
     HostName            eisner.decus.org
     Port                22867
     User                reinhardt


-- 
John H. Reinhardt


macOS Monterey 12.7.5

galadriel:~ jhreinhardt$ cat ~/.ssh/config
IPQoS=throughput

galadriel:~ jhreinhardt$ ssh -vvv eisner
OpenSSH_8.6p1, LibreSSL 3.3.6
debug1: Reading configuration data /Volumes/Users/jhreinhardt/.ssh/config
debug3: kex names ok: [diffie-hellman-group1-sha1]
debug3: kex names ok: [diffie-hellman-group1-sha1]
debug3: kex names ok: [diffie-hellman-group1-sha1]
debug3: kex names ok: [diffie-hellman-group1-sha1]
debug1: /Volumes/Users/jhreinhardt/.ssh/config line 63: Applying options for eisner
debug3: kex names ok: [diffie-hellman-group1-sha1]
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files
debug1: /etc/ssh/ssh_config line 54: Applying options for *
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/Volumes/Users/jhreinhardt/.ssh/known_hosts'
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/Volumes/Users/jhreinhardt/.ssh/known_hosts2'
debug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling
debug1: Connecting to eisner.decus.org port 22867.
debug1: Connection established.
debug1: identity file /Volumes/Users/jhreinhardt/.ssh/id_rsa type 0
debug1: identity file /Volumes/Users/jhreinhardt/.ssh/id_rsa-cert type -1
debug1: identity file /Volumes/Users/jhreinhardt/.ssh/id_dsa type -1
debug1: identity file /Volumes/Users/jhreinhardt/.ssh/id_dsa-cert type -1
debug1: identity file /Volumes/Users/jhreinhardt/.ssh/id_ecdsa type -1
debug1: identity file /Volumes/Users/jhreinhardt/.ssh/id_ecdsa-cert type -1
debug1: identity file /Volumes/Users/jhreinhardt/.ssh/id_ecdsa_sk type -1
debug1: identity file /Volumes/Users/jhreinhardt/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /Volumes/Users/jhreinhardt/.ssh/id_ed25519 type 3
debug1: identity file /Volumes/Users/jhreinhardt/.ssh/id_ed25519-cert type -1
debug1: identity file /Volumes/Users/jhreinhardt/.ssh/id_ed25519_sk type -1
debug1: identity file /Volumes/Users/jhreinhardt/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /Volumes/Users/jhreinhardt/.ssh/id_xmss type -1
debug1: identity file /Volumes/Users/jhreinhardt/.ssh/id_xmss-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.6
debug1: Remote protocol version 2.0, remote software version 6.1.5.0 Process Software SSH MultiNet
debug1: compat_banner: no match: 6.1.5.0 Process Software SSH MultiNet
debug3: fd 5 is O_NONBLOCK
debug1: Authenticating to eisner.decus.org:22867 as 'reinhardt'
debug3: put_host_port: [eisner.decus.org]:22867
debug3: record_hostkey: found key type ECDSA in file /Volumes/Users/jhreinhardt/.ssh/known_hosts:45
debug3: load_hostkeys_file: loaded 1 keys from [eisner.decus.org]:22867
debug1: load_hostkeys: fopen /Volumes/Users/jhreinhardt/.ssh/known_hosts2: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory
debug3: order_hostkeyalgs: prefer hostkeyalgs: ecdsa-sha2-nistp256-cert-v01 at openssh.com,ecdsa-sha2-nistp256
debug3: send packet: type 20
debug1: SSH2_MSG_KEXINIT sent
debug3: receive packet: type 20
debug1: SSH2_MSG_KEXINIT received
debug2: local client KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,curve25519-sha256 at libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c
debug2: host key algorithms: ecdsa-sha2-nistp256-cert-v01 at openssh.com,ecdsa-sha2-nistp256,ssh-ed25519-cert-v01 at openssh.com,ecdsa-sha2-nistp384-cert-v01 at openssh.com,ecdsa-sha2-nistp521-cert-v01 at openssh.com,sk-ssh-ed25519-cert-v01 at openssh.com,sk-ecdsa-sha2-nistp256-cert-v01 at openssh.com,rsa-sha2-512-cert-v01 at openssh.com,rsa-sha2-256-cert-v01 at openssh.com,ssh-rsa-cert-v01 at openssh.com,ssh-ed25519,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519 at openssh.com,sk-ecdsa-sha2-nistp256 at openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-rsa
debug2: ciphers ctos: chacha20-poly1305 at openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm at openssh.com,aes256-gcm at openssh.com
debug2: ciphers stoc: chacha20-poly1305 at openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm at openssh.com,aes256-gcm at openssh.com
debug2: MACs ctos: umac-64-etm at openssh.com,umac-128-etm at openssh.com,hmac-sha2-256-etm at openssh.com,hmac-sha2-512-etm at openssh.com,hmac-sha1-etm at openssh.com,umac-64 at openssh.com,umac-128 at openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: umac-64-etm at openssh.com,umac-128-etm at openssh.com,hmac-sha2-256-etm at openssh.com,hmac-sha2-512-etm at openssh.com,hmac-sha1-etm at openssh.com,umac-64 at openssh.com,umac-128 at openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,zlib at openssh.com,zlib
debug2: compression stoc: none,zlib at openssh.com,zlib
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug2: peer server KEXINIT proposal
debug2: KEX algorithms: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c
debug2: host key algorithms: ecdsa-sha2-nistp256,ssh-rsa
debug2: ciphers ctos: aes128-gcm at openssh.com,aes256-gcm at openssh.com,aes128-ctr,aes128-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc,3des-ctr,3des-cbc,blowfish-ctr,blowfish-cbc
debug2: ciphers stoc: aes128-gcm at openssh.com,aes256-gcm at openssh.com,aes128-ctr,aes128-cbc,aes192-ctr,aes192-cbc,aes256-ctr,aes256-cbc,3des-ctr,3des-cbc,blowfish-ctr,blowfish-cbc
debug2: MACs ctos: hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5
debug2: MACs stoc: hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5
debug2: compression ctos: none,zlib
debug2: compression stoc: none,zlib
debug2: languages ctos:
debug2: languages stoc:
debug2: first_kex_follows 0
debug2: reserved 0
debug1: kex: algorithm: ecdh-sha2-nistp256
debug1: kex: host key algorithm: ecdsa-sha2-nistp256
debug1: kex: server->client cipher: aes128-ctr MAC: hmac-sha2-256 compression: none
debug1: kex: client->server cipher: aes128-ctr MAC: hmac-sha2-256 compression: none
debug3: send packet: type 30
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug3: receive packet: type 31
debug1: SSH2_MSG_KEX_ECDH_REPLY received
debug1: Server host key: ecdsa-sha2-nistp256 SHA256:JoHpRctiSnlBJVPRnkRBoys7CcdyNa8zRL2g+A21ePw
debug3: put_host_port: [192.42.95.250]:22867
debug3: put_host_port: [eisner.decus.org]:22867
debug3: record_hostkey: found key type ECDSA in file /Volumes/Users/jhreinhardt/.ssh/known_hosts:45
debug3: load_hostkeys_file: loaded 1 keys from [eisner.decus.org]:22867
debug1: load_hostkeys: fopen /Volumes/Users/jhreinhardt/.ssh/known_hosts2: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory
debug1: Host '[eisner.decus.org]:22867' is known and matches the ECDSA host key.
debug1: Found key in /Volumes/Users/jhreinhardt/.ssh/known_hosts:45
debug3: send packet: type 21
debug2: set_newkeys: mode 1
debug1: rekey out after 4294967296 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug3: receive packet: type 21
debug1: SSH2_MSG_NEWKEYS received
debug2: set_newkeys: mode 0
debug1: rekey in after 4294967296 blocks
debug1: Will attempt key: /Volumes/Users/jhreinhardt/.ssh/id_rsa RSA SHA256:R9Rne4rNkESc45iYCM6JUCcU5cwpYLj9TFJh6MDsdQ0 agent
debug1: Will attempt key: /Volumes/Users/jhreinhardt/.ssh/id_dsa
debug1: Will attempt key: /Volumes/Users/jhreinhardt/.ssh/id_ecdsa
debug1: Will attempt key: /Volumes/Users/jhreinhardt/.ssh/id_ecdsa_sk
debug1: Will attempt key: /Volumes/Users/jhreinhardt/.ssh/id_ed25519 ED25519 SHA256:0adBmFKAT+fVMALa/Q26r0Q247eswxd968I509JMUAY
debug1: Will attempt key: /Volumes/Users/jhreinhardt/.ssh/id_ed25519_sk
debug1: Will attempt key: /Volumes/Users/jhreinhardt/.ssh/id_xmss
debug2: pubkey_prepare: done
debug3: send packet: type 5
debug3: receive packet: type 2
debug3: Received SSH2_MSG_IGNORE
debug3: receive packet: type 6
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug3: send packet: type 50
debug3: receive packet: type 2
debug3: Received SSH2_MSG_IGNORE
debug3: receive packet: type 53
debug3: input_userauth_banner: entering

                                 N O T I C E

This is DECUServe.  Access is for subscribed individuals only.

  o  By logging into the system you agree to abide by the DECUServe
     Canons of Conduct.

  o  Source code or any other information posted on this system is not
     warranted in any way.  YOU USE IT AT YOUR OWN RISK.

  o  If you submit source code to or post information on this system, you
     must allow its unrestricted use.  You must have the right to grant
     such permission.

  o  Refer to the DECUServe Canons of Conduct, posted in the
     DECUServe_Information conference topic 4.3, for further guidance.

  o  Report problems in DECUServe_Forum.

  o  DECUServe is running VSI OpenVMS on vtAlpha, hosted by Process Software

For information about DECUServe please login under -> Username INFORMATION
To subscribe to DECUServe       please login under -> Username REGISTRATION
To report any form of a problem please login under -> Username PROBLEMS
To renew an Expired account     please login under -> Username REGISTRATION

debug3: receive packet: type 2
debug3: Received SSH2_MSG_IGNORE
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey,password
debug3: start over, passed a different list publickey,password
debug3: preferred publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Offering public key: /Volumes/Users/jhreinhardt/.ssh/id_rsa RSA SHA256:R9Rne4rNkESc45iYCM6JUCcU5cwpYLj9TFJh6MDsdQ0 agent
debug3: send packet: type 50
debug2: we sent a publickey packet, wait for reply
debug3: receive packet: type 2
debug3: Received SSH2_MSG_IGNORE
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey,password
debug1: Trying private key: /Volumes/Users/jhreinhardt/.ssh/id_dsa
debug3: no such identity: /Volumes/Users/jhreinhardt/.ssh/id_dsa: No such file or directory
debug1: Trying private key: /Volumes/Users/jhreinhardt/.ssh/id_ecdsa
debug3: no such identity: /Volumes/Users/jhreinhardt/.ssh/id_ecdsa: No such file or directory
debug1: Trying private key: /Volumes/Users/jhreinhardt/.ssh/id_ecdsa_sk
debug3: no such identity: /Volumes/Users/jhreinhardt/.ssh/id_ecdsa_sk: No such file or directory
debug1: Offering public key: /Volumes/Users/jhreinhardt/.ssh/id_ed25519 ED25519 SHA256:0adBmFKAT+fVMALa/Q26r0Q247eswxd968I509JMUAY
debug3: send packet: type 50
debug2: we sent a publickey packet, wait for reply
debug3: receive packet: type 2
debug3: Received SSH2_MSG_IGNORE
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey,password
debug1: Trying private key: /Volumes/Users/jhreinhardt/.ssh/id_ed25519_sk
debug3: no such identity: /Volumes/Users/jhreinhardt/.ssh/id_ed25519_sk: No such file or directory
debug1: Trying private key: /Volumes/Users/jhreinhardt/.ssh/id_xmss
debug3: no such identity: /Volumes/Users/jhreinhardt/.ssh/id_xmss: No such file or directory
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password
debug3: remaining preferred: ,password
debug3: authmethod_is_enabled password
debug1: Next authentication method: password
reinhardt at eisner.decus.org's password:



On 9/5/2024 10:45 AM, Stephen Hoffman wrote:
> On 2024-08-30 18:57:12 +0000, Hunter Goatley said:
> 
>> AFAIK, EISNER has been available this entire time (once you use the correct port). Is anyone (still) having problems connecting?
> 
> macOS 13.6.9; Ventura current.
> 
> % # default ssh attempt, on the variant port
> % ssh -p 22867 -vvv myremoteuser at eisner.decus.org
> OpenSSH_9.0p1, LibreSSL 3.3.6
> debug1: Reading configuration data /Users/mylocaluser/.ssh/config
> debug1: /Users/hoffman/.ssh/config line 20: Applying options for *
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: /etc/ssh/ssh_config line 21: include /etc/ssh/ssh_config.d/* matched no files
> debug1: /etc/ssh/ssh_config line 54: Applying options for *
> debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/Users/mylocaluser/.ssh/known_hosts'
> debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts2' -> '/Users/mylocaluser/.ssh/known_hosts2'
> debug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling
> debug1: Connecting to eisner.decus.org port 22867.
> ssh: connect to host eisner.decus.org port 22867: Connection refused
> %
> % # ssh with the backward-compatibility options selected:
> %  ssh -p 22867 -vvv -o HostKeyAlgorithms=ssh-rsa,ssh-dss -o KexAlgorithms=diffie-hellman-group1-sha1 -o Ciphers=aes128-cbc,3des-cbc -o MACs=hmac-md5,hmac-sha1 myremoteuser at eisner.decus.org
> OpenSSH_9.0p1, LibreSSL 3.3.6
> ... [same sequence]
> %
> % # default connection, but with no certificates used
> % ssh -o PubkeyAuthentication=no -o PreferredAuthentications=password -p 22867 myremoteuser at eisner.decus.org
> ssh: connect to host eisner.decus.org port 22867: Connection refused
> %
> % # and this included because "it's always DNS":
> % dig +short eisner.decus.org
> 192.42.95.250
> % dig +short @8.8.8.8 eisner.decus.org
> 192.42.95.250
> % dig +short -x 192.42.95.250
> eisner.decus.org.
> % dig +short @8.8.8.8 -x 192.42.95.250
> eisner.decus.org.
> %
> % # That all seems to be a consistently-referenced IPv4 A record.
> %
> % # Seems the other decuserve DNS is still tangled with HP/HPE, which is why I've been using the eisner.decus.org name:
> % dig +short @8.8.8.8 decuserve.org
> 15.197.225.128
> 3.33.251.168
> %
> 
> 
> I'd initially suspect something has been upgraded within the local macOS 13.6.9 OpenSSH ssh client, and it's again become incompatible with OpenVMS ssh. Still digging.
> 
> 


More information about the Info-vax mailing list