[20201102]SSH2_MSG_UNIMPLEMENTED packet error with PuTTY.txt

lfree發表於2020-11-03

[20201102]SSH2_MSG_UNIMPLEMENTED packet error with PuTTY.txt

--//上班登入伺服器發現提示:Disconnected Server protocol vioalation :unexpected SSH2_MSG_UNIMPLEMENTED packet 。
--//這個問題以前就遇到過,連結:http://blog.itpub.net/267265/viewspace-2218327/,不過這次版本rh 6.5
--//不知道安全等保需求又改動了什麼.

--//檢視當前openssh_server允許的keyexchange方法可用 /usr/sbin/sshd -T |grep kexalgorithms:

# /usr/sbin/sshd -T |grep kexalgorithms | tr ',' '\n'
kexalgorithms curve25519-sha256
curve25519-sha256@libssh.org
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
diffie-hellman-group-exchange-sha256
diffie-hellman-group16-sha512
diffie-hellman-group18-sha512
diffie-hellman-group14-sha256
diffie-hellman-group14-sha1

#  rpm -qa | grep ssh
openssh-clients-4.3p2-82.el5
openssh-server-4.3p2-82.el5
openssh-4.3p2-82.el5

--//奇怪在我的測試機器報錯,sshd版本也一樣,使用man sshd查詢沒有-T選項:
#  /usr/sbin/sshd -T
sshd: illegal option -- T
OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008
usage: sshd [-46Ddeiqt] [-b bits] [-f config_file] [-g login_grace_time]
            [-h host_key_file] [-k key_gen_time] [-o option] [-p port] [-u len]

#  diff  sshd_config20201001 sshd_config
44c44
< RSAAuthentication no
---
> #RSAAuthentication no
49c49
< RhostsRSAAuthentication no
---
> #RhostsRSAAuthentication no
53c53
< RhostsRSAAuthentication no
---
> #RhostsRSAAuthentication no
68c68
< KerberosAuthentication no
---
> #KerberosAuthentication no
75c75,76
< GSSAPIAuthentication no
---
> #GSSAPIAuthentication no
> #GSSAPICleanupCredentials yes
77d77
< GSSAPICleanupCredentials yes
88c88
< UsePAM yes
---
> #UsePAM yes
103,104c103,104
< UseLogin no
< UsePrivilegeSeparation yes
---
> #UseLogin no
> #UsePrivilegeSeparation yes
123c123,125
< Ciphers arcfour,aes128-ctr,aes192-ctr,aes256-ctr
---
> #Ciphers arcfour,aes128-ctr,aes192-ctr,aes256-ctr
> Ciphers aes256-ctr,aes192-ctr,aes128-ctr
> MACs hmac-sha2-512,hmac-sha2-256,hmac-sha1

--//不知道什麼引數導致要這樣設定,僅僅做一個記錄。
--//感覺安全等保做的有點過,完全沒有這個必要。我就害怕改變兩臺機器相互認證無需登入密碼的情況,測試沒有問題。

來自 “ ITPUB部落格 ” ,連結:http://blog.itpub.net/267265/viewspace-2731752/,如需轉載,請註明出處,否則將追究法律責任。

相關文章