Monday, November 9, 2020

HP Comware SSH issues

One of our customers recently bought some HP 5900 Switches and I'm having some issue with SSH I just cant quite figure out.

I updated to the most recent firmware(R2432P06), set up the user and ssh server and ... well, I just doesnt quite work.

The authentication using password actually succeeds but then I get an immediate disconnect.

%Sep 11 01:23:04:051 2020 HPE SSHS/6/SSHS_LOG: Accepted password for nl from 192.168.128.135 port 64981 ssh2.

%Sep 11 01:23:04:448 2020 HPE SSHS/6/SSHS_DISCONNECT: SSH user nl (IP: 192.168.128.135) disconnected from the server.

We do have some other HP Switches at that particular customer(not same model but some firmware rev) and I've compared the configs and everything looks exactly the same.There are no ACLs or other access restrictions in place(and if they were the login shouldnt succeed or I shouldnt even be able to connect).The very same user can access the Web interface on the switch just fine.

Here's how the user looks, looks pretty right to me:Device management user nl:

State: Active

Service type: FTP/PAD/SSH/Telnet/Terminal/HTTP/HTTPS

Access limit: Enabled

Max access number: 1024

Current access number: 1

User group: system

Bind attributes:

Authorization attributes:

Work directory: flash:

User role list: network-admin, network-operator

Total ssh users:1

Username Authentication-type User-public-key-name Service-type

nl password all

Turning on debugging on the switch didnt yield any usable results and the client using -vvv just tells me everything fine until it gets disconnected from the server.I'm really at a loss here to what might cause this. As I said, the switches are pretty much virgin in their configs other than the management interface being configured and the users created. Did this step-by-step as per the HP documentation.I know on any linux machine this would point to some issue with permissions on directory or files but here ... ????

EDIT:
here's the client side of things in verbose mode...

debug1: Authentications that can continue: password

debug1: Next authentication method: password

[nl@192.168.128.231](mailto:nl@192.168.128.231)'s password:

debug1: Authentication succeeded (password).

Authenticated to 192.168.128.231 ([192.168.128.231]:22).

debug1: channel 0: new [client-session]

debug1: Entering interactive session.

debug1: pledge: network

debug1: Sending environment.

debug1: Sending env LANG = C.UTF-8

debug1: channel 0: free: client-session, nchannels 1

Connection to 192.168.128.231 closed by remote host.

Connection to 192.168.128.231 closed.



No comments:

Post a Comment