Problem with HotSSH and Cisco IOS Devices

[Jeffrey Ollie]

I'm trying out the latest HotSSH from SVN against some of my Cisco IOS
devices. The SSH server in IOS isn't as complete as one would like,
which is why I'm probably having problems. This first problem is that
when you make the first connection, the error message "channel 1: open
failed: resource shortage:" is printed a number of times. The second,
related problem is if you try and open a second connection the
connection fails. I believe that both problems are related to the
usage of the "ControlMaster" and "ControlPath" options as I do not
have any problems connecting to these Cisco devices with plain SSH
commands from a regular terminal. I've attached the results of
connecting to one router with "-vvv" specified in the options. The
first attachment is from the initial connection, the second attachment
is from trying to open a second connection to the same device.

I think that what this boils down to is the need to have an option to
disable the connection sharing for certain hosts. It'd be nice if
there were some way to auto-detect a Cisco IOS server, but I'd settle
for a checkbox in the connection dialog.

Jeff

[Colin Walters]

On May 12, 9:05 am, "Jeffrey Ollie" <j...@ocjtech.us> wrote:
> I'm trying out the latest HotSSH from SVN against some of my Cisco IOS
> devices.  The SSH server in IOS isn't as complete as one would like,
> which is why I'm probably having problems.  This first problem is that
> when you make the first connection, the error message "channel 1: open
> failed: resource shortage:" is printed a number of times.  

Ah, hm. This thread looks related:

http://www.gossamer-threads.com/lists/openssh/dev/42814?page=last

But there's no conclusion...

> I think that what this boils down to is the need to have an option to
> disable the connection sharing for certain hosts.  It'd be nice if
> there were some way to auto-detect a Cisco IOS server,
> but I'd settle
> for a checkbox in the connection dialog.

Ok this is a total quick hack before I have to head out for the night:

Committed r1252
M hotssh/sshwindow.py
r1252 = ad594928452c7d00d19231b8991f77de2cbebf05 (git-svn)

Basically you can pass -oControlPath=none in the Options list, and we
then won't use connection sharing.

I think there might also be a way to set this in "~/.ssh/config";
something like:

Host *.myswitches.example.com
ControlPath=none

Though we might actually override that =/

I think I see a ssh config parser in my future...