Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 191371 - net-misc/openssh-4.7_p1: -R tunnels Cause Ssh Session Termination
Summary: net-misc/openssh-4.7_p1: -R tunnels Cause Ssh Session Termination
Status: RESOLVED WORKSFORME
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High minor (vote)
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-09-05 12:02 UTC by FieldySnuts
Modified: 2008-04-11 16:42 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description FieldySnuts 2007-09-05 12:02:49 UTC
I use ssh to connect to my server, like so:

ssh -p someport -D localport -R remoteIP:remotelistenPORT:localIP:localPORT username@remoteIP -C -2

-D sets up a socks4/5 "server" listening on localport, so i can connect socks aware apps to it and they communicate out the server. -R is similar to -L, except that it reverse tunnels from server -> client.

On the server, a backup script which uses rsync runs. This script connects to its local port remotelistenPORT from above. This is then tunneled back over SSH and comes out to localIP and localPORT, to connect to an rsync server.

This all worked fine prior to ssh 4.7_p1. After that, any time this script runs at 40 minutes after every hour, my ssh session dies, and apps that were using the tunnel get disconnected.

The server is using 4.6_p1-r3. I would test the server with 4.7 if I had physical access but... well you know.

Here is the output I see:

Client side:

buffer_get_string_ret: bad string length 364172
buffer_get_string: buffer error


Server side:

Sep  5 11:40:06 thing sshd[23786]: fatal: buffer_append_space: len 1646878 not supported
Sep  5 11:40:06 thing sshd(pam_unix)[23786]: session closed for user myuser
Sep  5 11:40:06 thing sshd[23784]: syslogin_perform_logout: logout() returned an error


I tried running my backup script manually and was able to reproduce this:

Client side:

buffer_get_string_ret: bad string length 270072
buffer_get_string: buffer error


Server side:

Sep  5 11:43:41 thing sshd[24104]: fatal: buffer_append_space: len 1440384 not supported
Sep  5 11:43:41 thing sshd(pam_unix)[24104]: session closed for user myuser
Sep  5 11:43:41 thing sshd[24102]: syslogin_perform_logout: logout() returned an error

I attempted to speak with #openssh on freenode but got no response.


Client:

Portage 2.1.3.7 (default-linux/x86/2007.0, gcc-4.1.2, glibc-2.5-r4, 2.6.22.6 i686)
=================================================================
System uname: 2.6.22.6 i686 Intel(R) Pentium(R) M processor 1.86GHz
Gentoo Base System release 1.12.9
Timestamp of tree: Wed, 05 Sep 2007 07:50:01 +0000
distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
ccache version 2.4 [enabled]
app-shells/bash:     3.2_p17-r1
dev-java/java-config: 1.3.7, 2.0.33-r1
dev-lang/python:     2.4.4-r4
dev-python/pycrypto: 2.0.1-r6
dev-util/ccache:     2.4-r7
sys-apps/baselayout: 1.12.9-r2
sys-apps/sandbox:    1.2.18.1
sys-devel/autoconf:  2.13, 2.61-r1
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.18
sys-devel/gcc-config: 1.4.0-r2
sys-devel/libtool:   1.5.24
virtual/os-headers:  2.6.22-r2
ACCEPT_KEYWORDS="x86"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-Os -march=pentium-m -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config /usr/share/texmf/dvipdfm/config/ /usr/share/texmf/dvips/config/ /usr/share/texmf/tex/generic/config/ /usr/share/texmf/tex/platex/config/ /usr/share/texmf/xdvi/"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-Os -march=pentium-m -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="ccache distlocks metadata-transfer sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://gentoo.cites.uiuc.edu/pub/gentoo/ http://gentoo.mirrors.easynews.com/linux/gentoo/ http://194.117.143.69/ http://194.117.143.70/ http://85.25.128.62"
LINGUAS="en"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.namerica.gentoo.org/gentoo-portage"
USE="3dnow X a52 acl alsa berkdb bitmap-fonts bzip2 cdr chroot cli cracklib crypt cups dri dv dvd dvdr dvdread encode ffmpeg flac fortran gdbm gif gnome gpm gtk gtk2 hal iconv isdnlog jpeg kde midi mmx mp3 mudflap ncurses network nls nptl nptlonly ogg opengl openmp oss pam pcre pdflib perl png pppd pwdb python qt3 qt4 readline reflection sdl session spell spl sse ssl svg theora tiff truetype truetype-fonts type1-fonts unicode usb vorbis x86 xml2 xorg xvid zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="keyboard mouse synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en" USERLAND="GNU" VIDEO_CARDS="radeon fglrx"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS



Server:

Portage 2.1.2.12 (default-linux/amd64/2007.0/server, gcc-4.1.2, glibc-2.5-r4, 2.6.18-4-xen-amd64 x86_64)
=================================================================
System uname: 2.6.18-4-xen-amd64 x86_64 Intel(R) Xeon(R) CPU 5110 @ 1.60GHz
Gentoo Base System release 1.12.9
Timestamp of tree: Tue, 04 Sep 2007 06:20:01 +0000
ccache version 2.4 [disabled]
app-shells/bash:     3.2_p17
dev-java/java-config: 1.3.7, 2.0.33-r1
dev-lang/python:     2.4.4-r4
dev-python/pycrypto: 2.0.1-r6
dev-util/ccache:     2.4-r7
sys-apps/baselayout: 1.12.9-r2
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.61
sys-devel/automake:  1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.17
sys-devel/gcc-config: 1.3.16
sys-devel/libtool:   1.5.24
virtual/os-headers:  2.6.21
ACCEPT_KEYWORDS="amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=nocona -Os -pipe -fomit-frame-pointer -fforce-addr"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/X11/xkb /var/bind"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-march=nocona -Os -pipe -fomit-frame-pointer -fforce-addr"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks fixpackages metadata-transfer parallel-fetch sandbox sfperms strict userfetch userpriv usersandbox"
GENTOO_MIRRORS="http://mirror.bytemark.co.uk/gentoo ftp://mirror.qubenet.net/mirror/gentoo/ ftp://212.219.56.133/sites/www.ibiblio.org/gentoo/ http://213.186.33.37/gentoo-distfiles/ ftp://212.219.56.135/sites/www.ibiblio.org/gentoo/ http://212.219.56.134/sites/www.ibiblio.org/gentoo/"
MAKEOPTS="-j8"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_EXTRA_OPTS="--bwlimit=4096"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://mirror.bytemark.co.uk/gentoo-portage"
USE="acl amd64 bash-completion berkdb bzip2 cracklib crypt exif gd gdbm libwww ncurses nls nptl nptlonly pam pcre perl python readline session snmp ssl tcpd truetype unicode vhosts xml zlib" ELIBC="glibc" KERNEL="linux" USERLAND="GNU"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTDIR_OVERLAY
Comment 1 FieldySnuts 2007-09-06 03:47:36 UTC
FYI, today I dropped down to 4.6_p1-r4 and i do not have the issue.

Cheers.
Comment 2 FieldySnuts 2007-11-21 01:53:33 UTC
I still have these issues. Any word on anything being done to address it? Bug is over 2 months old and still marked as new.
Comment 3 FieldySnuts 2008-04-10 20:57:25 UTC
Newer versions of openssh resolve this. Though I'm not sure how much newer. I believe this should now be closed or resolved, however, I am not sure in what manner, so I will leave that to wranglers.
Comment 4 SpanKY gentoo-dev 2008-04-11 16:42:08 UTC
thanks for testing