Getting error establishing ssh connection to a remote machine running OpenSSH 7.2p2

[Jason Ang]

Hi, 

I have a windows node installed with cygwin bundled with OpenSSH 7.2p2.

I configured a simple job to test command execution on the windows node. When I ran the job, I saw it failing to establish ssh connection to the node.

Below is an extract of the last few lines in the debug output indicating the error.  The full debug log is attached. (See Test Job-20160408-170628.txt)

I am using ssh password authentication.

  SSH_MSG_KEX_DH_GEX_REQUEST(1024<1024<1024) sent

  expecting SSH_MSG_KEX_DH_GEX_GROUP

  Disconnecting from usalvwomclstr1 port 22

  Session.connect: java.io.IOException: End of IO Stream Read

  Failed: SSHProtocolFailure: Session.connect: java.io.IOException: End of IO Stream Read

I was able to ssh to this windows node using other ssh client on the same machine running Rundeck. 

Please see screenshot in attached 'Successful Connect.png'

Further to above, I was able to execute the same job on another windows node also installed with cygwin but with an older version of OpenSSH, 6.4p1.

Is there something else I need to tweak to make it work or is the built-in ssh client used by Rundeck not compatible with OpenSSH 7.2p2?

Thanks!

Jason

[Anthony Yuan]

I got exactly the same error.

[Jason Ang]

I did further testing to narrow down the issue.

I was able to get Rundeck to connect to an older Cygwin that has OpenSSH 6.4p1 and executed the job successfully.

It only refuses to connect to Cygwin with OpenSSH 7.2p2. 

I know an alternative would be to use WinRM. For now, I only wish to get it working with Cygwin on Windows. 

Please let me know if this might be a defect. If not, can someone suggest anything I can do to work around this issue.

Thanks!

[Greg Schueler]

Hi, 

The SSH plugin in Rundeck uses the JSCH (version 0.1.52)  open source SSH library.  You might ask on the JSCH user mailing list.  If there is a bug there, or a newer version of JSCH, we may need to upgrade it.

-- 
You received this message because you are subscribed to the Google Groups "rundeck-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rundeck-discu...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/rundeck-discuss/ed5e0aba-8ef3-4c60-bd28-8ea6919effbb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Anthony Yuan]

Confirmed. The bug is on the JSCH side. I tested with version 0.1.53 (replace the jsch-0.1.52.jar with jsch-0.1.53.jar) and then the problem is gone. So please upgrade it.

[Greg Schueler]

Ok, I will file a github issue to upgrade it.  thanks for confirming it!

On Apr 12, 2016, at 9:26 AM, Anthony Yuan <anthony....@gmail.com> wrote:

Confirmed. The bug is on the JSCH side. I tested with version 0.1.53 (replace the jsch-0.1.52.jar with jsch-0.1.53.jar) and then the problem is gone. So please upgrade it.

--
You received this message because you are subscribed to the Google Groups "rundeck-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rundeck-discu...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/rundeck-discuss/cf918ed7-c600-4f4a-b9c4-532cd4ff8360%40googlegroups.com.

[Jason Ang]

Awesome! Thanks for confirming the issue! Looking forward to the release with the upgraded jar.