Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
sshd error: channel 0: chan_read_failed for istate 3
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Gentoo on Sparc
View previous topic :: View next topic  
Author Message
BillyBob-SA1
n00b
n00b


Joined: 17 Nov 2004
Posts: 53

PostPosted: Mon Jul 09, 2007 10:49 pm    Post subject: sshd error: channel 0: chan_read_failed for istate 3 Reply with quote

Hi there folks,

Ever since I emerged the ssh update last Saturday (July 9), I have been getting these errors on my Netra T105's and an E220 from scp'ing file over to them. They have never been present before.

secure:Jul 9 16:02:21 web2 sshd[13693]: error: channel 0: chan_read_failed for istate 3

Files are copied ok and md5 sums check good between boxes.

Here is my emerge --info

Any thoughts will be appreciated.

Portage 2.1.2.9 (default-linux/sparc/sparc64/2006.1, gcc-3.3.5-20050130, glibc-2.3.6-r5, 2.6.15-gentoo-r1-Production-1 sparc64)
=================================================================
System uname: 2.6.15-gentoo-r1-Production-1 sparc64 sun4u
Gentoo Base System release 1.12.9
Timestamp of tree: Mon, 09 Jul 2007 08:50:01 +0000
dev-lang/python: 2.3.5-r3, 2.4.4-r4
dev-python/pycrypto: 2.0.1-r5
sys-apps/sandbox: 1.2.17
sys-devel/autoconf: 2.13, 2.61
sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils: 2.17
sys-devel/gcc-config: 1.3.16
sys-devel/libtool: 1.5.23b
virtual/os-headers: 2.6.19.2-r2
ACCEPT_KEYWORDS="sparc"
AUTOCLEAN="yes"
CBUILD="sparc-unknown-linux-gnu"
CFLAGS="-O2 -mcpu=ultrasparc"
CHOST="sparc-unknown-linux-gnu"
CONFIG_PROTECT="/etc /usr/X11R6/lib/X11/xkb"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-O2 -mcpu=ultrasparc"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks metadata-transfer sandbox sfperms strict"
GENTOO_MIRRORS="http://mirror.datapipe.net/gentoo http://gentoo.osuosl.org/ ftp://mirrors.tds.net/gentoo"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://sync.oneeighty.com/gentoo-portage"
USE="apache2 berkdb caps clearpasswd cli cracklib crypt dri eds emboss encode foomaticdb fortran gcc64 gdbm gif gstreamer gtk2 iconv imlib isdnlog jpeg libwww mad mbox midi mikmod motif mpeg mudflap ncurses nls nptl nptlonly ogg openmp pam pcre perl png pppd python qt3 readline reflection session sparc spell spl tcpd userlocales vorbis xinetd xml xorg zlib" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="dummy fbdev glint mach64 mga r128 radeon sunbw2 suncg14 suncg3 suncg6 sunffb sunleo tdfx v4l voodoo"
Unset: CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY
_________________
-------------------------------------------------------
John Jaeger
System Administrator
Billings, Montana USA
Back to top
View user's profile Send private message
erik258
Advocate
Advocate


Joined: 12 Apr 2005
Posts: 2650
Location: Twin Cities, Minnesota, USA

PostPosted: Mon Jul 09, 2007 10:54 pm    Post subject: Reply with quote

Have you tried restarting your sshd daemon to make sure changes to the software go into effect?

Did you etc-update? Did you push through changes to sshd_config? If so, it might be worth revisiting that file.
_________________
Configuring a Firewall? Try my iptables configuration
LinuxCommando.com is my blog for linux-related scraps and tidbits. Stop by for a visit!
Back to top
View user's profile Send private message
BillyBob-SA1
n00b
n00b


Joined: 17 Nov 2004
Posts: 53

PostPosted: Mon Jul 09, 2007 11:02 pm    Post subject: Reply with quote

Yuppers to all of the above. Been at this a few years <G> One thing I did for get was my version of ssh & open_ssl.

This was just released last week:
net-misc/openssh-4.6_p1-r2

And this has been around awhile:
dev-libs/openssl-0.9.8d

Since there is no real issue with the files transfered, I am not going to revert.

I came off:
net-misc/openssh-4.5_p1-r1

<G>
_________________
-------------------------------------------------------
John Jaeger
System Administrator
Billings, Montana USA
Back to top
View user's profile Send private message
erik258
Advocate
Advocate


Joined: 12 Apr 2005
Posts: 2650
Location: Twin Cities, Minnesota, USA

PostPosted: Tue Jul 10, 2007 3:16 am    Post subject: Reply with quote

Code:
Been at this a few years <G>


In that case I don't think any of my guesses are going to help you. My computers are all at 4.5_p1-r1 and happy.
_________________
Configuring a Firewall? Try my iptables configuration
LinuxCommando.com is my blog for linux-related scraps and tidbits. Stop by for a visit!
Back to top
View user's profile Send private message
BillyBob-SA1
n00b
n00b


Joined: 17 Nov 2004
Posts: 53

PostPosted: Tue Jul 10, 2007 3:45 am    Post subject: Reply with quote

Mine were happy at that too... Oh well, I'm sure I won't be the only one wondering. All my Sun's are doing the same thing.

Have a good evening...
_________________
-------------------------------------------------------
John Jaeger
System Administrator
Billings, Montana USA
Back to top
View user's profile Send private message
starrbuck
Tux's lil' helper
Tux's lil' helper


Joined: 04 Apr 2005
Posts: 138
Location: North Texas

PostPosted: Tue Jul 10, 2007 7:33 pm    Post subject: Reply with quote

BillyBob-SA1 wrote:
This was just released last week:
net-misc/openssh-4.6_p1-r2

I had to mask this new version and go back to the older one on my Ultra 1 due to a compile error. The build error told me that ldap wasn't supported and recommended that I mask it and try again in the future.

/shrug
_________________
Gentoo Linux is groovy, baby! Yeah!
Back to top
View user's profile Send private message
BillyBob-SA1
n00b
n00b


Joined: 17 Nov 2004
Posts: 53

PostPosted: Tue Jul 10, 2007 7:52 pm    Post subject: Reply with quote

Kinda figured there were other issues 8)

I just threw this up as info for the developers. They are usually pretty quick in the Sparc fourm to notice this stuff. I suppose I should file a bug report instead...

P.S There is a similar bug open for net-misc/openssh-4.6_p1-r1 although I never had an issue with it.

https://bugs.gentoo.org/show_bug.cgi?id=181407

I'll just leave it be for awhile :roll:
_________________
-------------------------------------------------------
John Jaeger
System Administrator
Billings, Montana USA
Back to top
View user's profile Send private message
Philippe23
Tux's lil' helper
Tux's lil' helper


Joined: 20 Dec 2006
Posts: 129
Location: Central NY

PostPosted: Fri Aug 03, 2007 12:57 pm    Post subject: Reply with quote

I just noticed this in my logs last night too. (I did a scp to the machine.)

I'm running an x86 (Core 2 Duo)
Quote:
Aug 2 18:30:59 hobbes sshd(pam_unix)[20597]: session opened for user peep by (uid=0)
Aug 2 18:30:59 hobbes sshd[20597]: subsystem request for sftp
Aug 2 18:43:43 hobbes sshd[20597]: error: channel 0: chan_read_failed for istate 3
Aug 2 18:43:43 hobbes sshd[20597]: error: channel 0: chan_read_failed for istate 3
Aug 2 18:43:43 hobbes sshd(pam_unix)[20597]: session closed for user peep

Aug 2 18:49:10 hobbes sshd(pam_unix)[20666]: session opened for user peep by (uid=0)
Aug 2 18:49:10 hobbes sshd[20666]: subsystem request for sftp
Aug 2 18:49:12 hobbes sshd[20666]: error: channel 0: chan_read_failed for istate 3
Aug 2 18:49:12 hobbes sshd[20666]: error: channel 0: chan_read_failed for istate 3
Aug 2 18:49:12 hobbes sshd(pam_unix)[20666]: session closed for user peep

Aug 2 18:49:36 hobbes sshd[20668]: Accepted keyboard-interactive/pam for peep from 216.144.251.47 port 50365 ssh2
Aug 2 18:49:36 hobbes sshd(pam_unix)[20677]: session opened for user peep by (uid=0)
Aug 2 18:49:36 hobbes sshd[20677]: subsystem request for sftp
Aug 2 18:49:39 hobbes sshd[20677]: error: channel 0: chan_read_failed for istate 3
Aug 2 18:49:39 hobbes sshd[20677]: error: channel 0: chan_read_failed for istate 3
Aug 2 18:49:39 hobbes sshd(pam_unix)[20677]: session closed for user peep
Aug 2 18:49:42 hobbes sshd(pam_unix)[20526]: session closed for user peep
I tried to color code the pid lines up there for easier reading....

Emerge --info:
Code:
Portage 2.1.2.11 (default-linux/x86/2006.1/server, gcc-4.1.2, glibc-2.5-r4, 2.6.17-gentoo-r8 i686)
=================================================================
System uname: 2.6.17-gentoo-r8 i686 Genuine Intel(R) CPU T2400 @ 1.83GHz
Gentoo Base System release 1.12.9
Timestamp of tree: Fri, 03 Aug 2007 12:20:01 +0000
dev-lang/python:     2.4.4-r4
dev-python/pycrypto: 2.0.1-r6
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.61
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.17
sys-devel/gcc-config: 1.3.16
sys-devel/libtool:   1.5.23b
virtual/os-headers:  2.6.21
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium-m -msse3 -pipe -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/php/apache2-php4/ext-active/ /etc/php/cgi-php4/ext-active/ /etc/php/cli-php4/ext-active/ /etc/revdep-rebuild /etc/terminfo /etc/texmf/web2c"
CXXFLAGS="-O2 -march=pentium-m -msse3 -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks fixpackages metadata-transfer sandbox sfperms strict userfetch userpriv usersandbox"
GENTOO_MIRRORS="          ftp://gentoo.chem.wisc.edu/gentoo/          http://open-systems.ufl.edt/mirrors/gentoo         "
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage/overlays/g-cpan"
SYNC="rsync://rsync.us.gentoo.org/gentoo-portage"
USE="acpi apache2 authdaemond bash-completion berkdb bitmap-fonts bzip2 clearpasswd cli cracklib crypt dcc doc dri gd gpm iconv imap isdnlog javascript libg++ logrotate maildir mailwrapper midi mime mmx mudflap mysql ncurses nfs nptl nptlonly openmp pam pcre pear perl perlsuid php pni postfix ppds pppd python pyzor pyzord razor readline reflection sasl session spf spl sse sse2 sse3 ssl tcpd tools truetype truetype-fonts type1-fonts vda vhosts x86 xml xorg zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="apm ark chips cirrus cyrix dummy fbdev glint i128 i740 i810 imstt mach64 mga neomagic nsc nv r128 radeon rendition s3 s3virge savage siliconmotion sis sisusb tdfx tga trident tseng v4l vesa vga via vmware voodoo"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
OpenSSH & OpenSSL Versions:

  • net-misc/openssh-4.6_p1-r2
  • dev-libs/openssl-0.9.8d
Everything went fine for me as well, but I found this bug while trying to figure out what those warnings were, so I figured I'd post here.

I'm also sticking a "me too" on Bug #181407.[/url]
Back to top
View user's profile Send private message
hanj
Veteran
Veteran


Joined: 19 Aug 2003
Posts: 1490

PostPosted: Fri Aug 03, 2007 4:14 pm    Post subject: Reply with quote

Yep... I'm seeing these too since openssh update this morning.

hanji
_________________
Server Admin Blog - Uno-Code.com
Back to top
View user's profile Send private message
hanj
Veteran
Veteran


Joined: 19 Aug 2003
Posts: 1490

PostPosted: Tue Aug 07, 2007 1:36 pm    Post subject: Reply with quote

Looks like this is fixed now. You'll need to add ~x86 to get the latest version with the fix.

portage/package.keywords:
Code:
=net-misc/openssh-4.6_p1-r4     ~x86


Here is the changelog:
Code:
*openssh-4.6_p1-r4 (06 Aug 2007)

  06 Aug 2007; Mike Frysinger <vapier@gentoo.org>
  +files/openssh-4.6_p1-chan-read-failed.patch, +openssh-4.6_p1-r4.ebuild:
  Fix from upstream for spurious chan_read_failed errors #181407.


hanji
_________________
Server Admin Blog - Uno-Code.com
Back to top
View user's profile Send private message
trojahn
n00b
n00b


Joined: 29 Jun 2006
Posts: 8

PostPosted: Wed Aug 08, 2007 12:42 pm    Post subject: Reply with quote

Well, installing the new version did fixed the errors but the accounts that used to login using rbash now can't... Changing them to bash make them work but, obviously, they use rbash for a reason :)

Ideas?
Back to top
View user's profile Send private message
trojahn
n00b
n00b


Joined: 29 Jun 2006
Posts: 8

PostPosted: Wed Aug 08, 2007 12:53 pm    Post subject: Reply with quote

trojahn wrote:
Well, installing the new version did fixed the errors but the accounts that used to login using rbash now can't... Changing them to bash make them work but, obviously, they use rbash for a reason :)

Ideas?


Nevermind... It worked again changing /etc/pam.d/sshd from this:
Code:

auth       required     pam_shells.so
auth       required     pam_nologin.so
auth       include      system-auth
account    include      system-auth
password   include      system-auth
session    include      system-auth


to this:
Code:

auth       include      system-auth
auth       required     pam_shells.so
auth       required     pam_nologin.so
account    include      system-auth
password   include      system-auth
session    include      system-auth


I remembered I had to update this file last emerge I did... Not sure though about the problems I may have changing that file...
Back to top
View user's profile Send private message
tredman2
Apprentice
Apprentice


Joined: 06 Dec 2002
Posts: 169
Location: Holiday, FL

PostPosted: Thu Aug 09, 2007 7:39 pm    Post subject: SSH Issues Reply with quote

According to a bug on the OpenSSH tracker (https://bugzilla.mindrot.org/show_bug.cgi?id=1306), this was fixed in 4.7p1. There was a ancient HUP bug that was being fixed (I was seeing it about 25% of the time), and the fix for that created the spurious error messages, particularly on scp operations, it seems. There was some talk about backing out the patch that caused this problem, but it seems they were able to fix the spurious errors without reintroducing the HUP regression. 4.6p1-r4 (Bug 181407) seems to backport the fix to 4.6, so that should work until 4.7 makes its way into the tree.
_________________
Tim
"I drank what?" - Socrates, 399 BCE
Back to top
View user's profile Send private message
ashak
n00b
n00b


Joined: 19 Mar 2003
Posts: 11

PostPosted: Thu Jul 17, 2008 1:44 pm    Post subject: Reply with quote

If anyone comes across this post searching for 'not being able to login with rbash via ssh' like I did, then what trojahn suggests above above changing the order of /etc/pam.d/sshd is incorrect. The reason rbash doesn't work because the first line in /etc/pam.d/sshd:

auth required pam_shells.so

Checks for a 'valid shell' and some other things. Essentially that the users shell is listed in /etc/shells. Adding rbash to this file allows users to login that have rbash set as their shell. Without having to reorder the correctly ordered default pam sshd file.
Back to top
View user's profile Send private message
natros
n00b
n00b


Joined: 26 Sep 2003
Posts: 70

PostPosted: Sat Aug 09, 2008 10:39 am    Post subject: Reply with quote

Thank you,
you saved my day.

I was unable to login because my /etc/shells was empty.
_________________
-=[abit ip35 pro core2quad q6600 (oc 3.0 ghz) 8 gb ram 2x320 raid0 ext4 xfx8800gt 512mb]=-
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Gentoo on Sparc All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum