SSH locks up

George Toft george at georgetoft.com
Tue Aug 5 17:42:18 MST 2008


Run sshd and ssh with the -vv option and see what happens. -vv is very 
verbose logging.

I have a problem like this on one server, but it's actually an iptables 
misconfiguration - something about limiting the output bytes per second.

George Toft, CISSP




Bryan O'Neal wrote:
> So I have two nearly identical servers that lock out my ssh connection.  
> I will connect and be working fine and then nothing, total lock up.  
> Usually it is rite after I hit enter on a command and the output has 
> been displayed.  After which I am greeted with a prompt but I have no 
> controlee over the blinking cursor.  Any thought about how I can go 
> about figuring what is going wrong?  It seems totally random and I have 
> six SSh sessions at once to my go daddy server and only one will drop 
> out on my at a time.  The secure log seems to indicate that is a pam 
> issue, but I would expect not to be able to login if it was a pam 
> issue.  What do you all think
> 
> Here is a clip from the secure log
> 
> Aug  5 13:15:12 myserver sshd[4280]: Accepted password for user_bryan 
> from 66.193.205.160 port 51738 ssh2
> 
> Aug  5 13:15:12 myserver sshd[4280]: pam_unix(sshd:session): session 
> opened for user user_bryan by (uid=0)
> 
> Aug  5 13:15:23 myserver su: pam_unix(su-l:session): session opened for 
> user root by user_bryan(uid=506)
> 
> Aug  5 13:16:44 myserver sshd[4454]: Accepted password for user_bryan 
> from 66.193.205.166 port 51739 ssh2
> 
> Aug  5 13:16:44 myserver sshd[4454]: pam_unix(sshd:session): session 
> opened for user user_bryan by (uid=0)
> 
> Aug  5 13:16:54 myserver su: pam_unix(su-l:session): session opened for 
> user root by user_bryan(uid=506)
> 
> Aug  5 13:17:57 myserver sshd[1406]: pam_unix(sshd:session): session 
> closed for user user_bryan
> 
> Aug  5 13:17:57 myserver su: pam_unix(su-l:session): session closed for 
> user root
> 
> Aug  5 13:24:46 myserver sshd[4454]: pam_unix(sshd:session): session 
> closed for user user_bryan
> 
> Aug  5 13:24:46 myserver su: pam_unix(su-l:session): session closed for 
> user root
> 
> Aug  5 13:35:09 myserver sshd[5418]: Accepted password for user_bryan 
> from 66.193.205.166 port 38322 ssh2
> 
> Aug  5 13:35:09 myserver sshd[5418]: pam_unix(sshd:session): session 
> opened for user user_bryan by (uid=0)
> 
> Aug  5 13:35:17 myserver su: pam_unix(su-l:session): session opened for 
> user root by user_bryan(uid=506)
> 
> 
> ------------------------------------------------------------------------
> 
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss


More information about the PLUG-discuss mailing list