tmate-io/tmate

"Cannot authenticate server" from 2.2.1 client

leftyfb opened this issue · 0 comments

leftyfb commented

I cannot seem to connect to a newly built self-hosted tmate server running from the docker container in AWS using 2.2.1 tmate clients on Ubuntu 18.04, but 2.4.0-1 on Ubuntu 20.04 works just fine. I tried dumbing down the RSA keys to only use a newly generated 2048 RSA key but that didn't seem to help. Both clients can connect just fine to the tmate.io servers. Nothing seems to show up when I attach to the docker container and try to connect with the 2.21 client. What am I missing here?

649199429.117543 @0 active pane not changed
1649199429.190975 %0 has 84 bytes
1649199429.190996 @0 alerts timer reset 0
1649199429.190999 @0 alerts flags added 0x2
1649199429.191005 input_parse: %0 ground, 84 bytes: #\033[01;32mleftyfb@seville\033[00m\033[01;37m[0\033[01;37m]\033[00m:\033[01;34m~/tmp\033[00m\033[33m\033[00m$
1649199429.191027 input_csi_dispatch: 'm' "" "01"
1649199429.191062 input_csi_dispatch: 'm' "" "00"
1649199429.191065 input_csi_dispatch: 'm' "" "01"
1649199429.191073 input_csi_dispatch: 'm' "" "01"
1649199429.191077 input_csi_dispatch: 'm' "" "00"
1649199429.191083 input_csi_dispatch: 'm' "" "01"
1649199429.191098 input_csi_dispatch: 'm' "" "00"
1649199429.191100 input_csi_dispatch: 'm' "" "33"
1649199429.191103 input_csi_dispatch: 'm' "" "00"
1649199429.191118 @0 active pane changed
1649199429.191168 format '#{pane_current_command}' -> 'bash'
1649199429.191172 format '' -> ''
1649199429.191175 format '#{?pane_in_mode,[tmux],#{pane_current_command}}#{?pane_dead,[dead],}' -> 'bash'
1649199429.191182 @0 name not changed (still bash)
1649199429.191196 @0 active pane not changed
1649199431.116154 [tmate] I Looking up tmate.example.com...
1649199431.116955 @0 active pane not changed
1649199431.117765 [tmate] D Connecting to tmate.example.com...
1649199431.117826 [tmate] D Trying server x.x.x.x
1649199431.118117 [tmate] D [2] [ssh_connect] ssh_connect: libssh 0.7.0 (c) 2003-2014 Aris Adamantiadis, Andreas Schneider, and libssh contributors. Distributed under the LGPL, please refer to COPYING file for information about your rights, using threading threads_noop
1649199431.118150 [tmate] D [3] [getai] getai: host x.x.x.x matches an IP address
1649199431.118346 [tmate] D [2] [ssh_socket_connect] ssh_socket_connect: Nonblocking connection socket: 13
1649199431.118375 [tmate] D [2] [ssh_connect] ssh_connect: Socket connecting, now waiting for the callbacks to work
1649199431.118402 [tmate] D [3] [ssh_connect] ssh_connect: current state : 1
1649199431.122789 @0 active pane not changed
1649199431.122872 @0 active pane not changed
1649199431.165934 [tmate] D [4] [ssh_socket_pollcallback] ssh_socket_pollcallback: Poll callback on socket 13 (POLLIN POLLOUT ), out buffer 0
1649199431.166018 [tmate] D [3] [ssh_socket_pollcallback] ssh_socket_pollcallback: Received POLLOUT in connecting state
1649199431.166047 [tmate] D [1] [socket_callback_connected] socket_callback_connected: Socket connection callback: 1 (0)
1649199431.166219 [tmate] D [3] [ssh_socket_unbuffered_write] ssh_socket_unbuffered_write: Enabling POLLOUT for socket
1649199431.166256 [tmate] D [3] [ssh_connect] ssh_connect: current state : 2
1649199431.166296 @0 active pane not changed
1649199431.166348 [tmate] D [4] [ssh_socket_pollcallback] ssh_socket_pollcallback: Poll callback on socket 13 (POLLIN POLLOUT ), out buffer 0
1649199431.166383 [tmate] D [3] [callback_receive_banner] callback_receive_banner: Received banner: SSH-2.0-tmate
1649199431.166403 [tmate] D [1] [ssh_client_connection_callback] ssh_client_connection_callback: SSH server banner: SSH-2.0-tmate
1649199431.166466 [tmate] D [1] [ssh_analyze_banner] ssh_analyze_banner: Analyzing banner: SSH-2.0-tmate
1649199431.166487 [tmate] D [4] [ssh_socket_pollcallback] ssh_socket_pollcallback: sending control flow event
1649199431.166507 [tmate] D [4] [ssh_packet_socket_controlflow_callback] ssh_packet_socket_controlflow_callback: sending channel_write_wontblock callback
1649199431.166526 [tmate] D [3] [ssh_connect] ssh_connect: current state : 4
1649199431.166544 @0 active pane not changed
1649199431.189806 [tmate] D [4] [ssh_socket_pollcallback] ssh_socket_pollcallback: Poll callback on socket 13 (POLLIN POLLOUT ), out buffer 0
1649199431.189926 [tmate] D [3] [ssh_packet_socket_callback] ssh_packet_socket_callback: packet: read type 20 [len=884,padding=5,comp=878,payload=878]
1649199431.189954 [tmate] D [3] [ssh_packet_process] ssh_packet_process: Dispatching handler for packet type 20
1649199431.190001 [tmate] D [4] [ssh_list_kex] ssh_list_kex: kex algos: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
1649199431.190023 [tmate] D [4] [ssh_list_kex] ssh_list_kex: server host key algo: rsa-sha2-512,rsa-sha2-256,ssh-rsa
1649199431.190049 [tmate] D [4] [ssh_list_kex] ssh_list_kex: encryption client->server: aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc
1649199431.190074 [tmate] D [4] [ssh_list_kex] ssh_list_kex: encryption server->client: aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc
1649199431.190099 [tmate] D [4] [ssh_list_kex] ssh_list_kex: mac algo client->server: hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
1649199431.190153 [tmate] D [4] [ssh_list_kex] ssh_list_kex: mac algo server->client: hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
1649199431.190176 [tmate] D [4] [ssh_list_kex] ssh_list_kex: compression algo client->server: zlib@openssh.com,zlib
1649199431.190194 [tmate] D [4] [ssh_list_kex] ssh_list_kex: compression algo server->client: zlib@openssh.com,zlib
1649199431.190210 [tmate] D [4] [ssh_list_kex] ssh_list_kex: languages client->server:
1649199431.190226 [tmate] D [4] [ssh_list_kex] ssh_list_kex: languages server->client:
1649199431.206118 [tmate] D [3] [match_hashed_host] match_hashed_host: Matching a hashed host: x.x.x.x match=0
1649199431.206167 [tmate] D [3] [match_hashed_host] match_hashed_host: Matching a hashed host: [x.x.x.x]:2223 match=0
1649199431.215218 [tmate] D [4] [ssh_list_kex] ssh_list_kex: kex algos: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
1649199431.215249 [tmate] D [4] [ssh_list_kex] ssh_list_kex: server host key algo: ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-rsa,ssh-dss
1649199431.215268 [tmate] D [4] [ssh_list_kex] ssh_list_kex: encryption client->server: aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,blowfish-cbc,3des-cbc
1649199431.215285 [tmate] D [4] [ssh_list_kex] ssh_list_kex: encryption server->client: aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,blowfish-cbc,3des-cbc
1649199431.215301 [tmate] D [4] [ssh_list_kex] ssh_list_kex: mac algo client->server: hmac-sha2-256,hmac-sha2-512,hmac-sha1
1649199431.215316 [tmate] D [4] [ssh_list_kex] ssh_list_kex: mac algo server->client: hmac-sha2-256,hmac-sha2-512,hmac-sha1
1649199431.215330 [tmate] D [4] [ssh_list_kex] ssh_list_kex: compression algo client->server: zlib@openssh.com,zlib
1649199431.215344 [tmate] D [4] [ssh_list_kex] ssh_list_kex: compression algo server->client: zlib@openssh.com,zlib
1649199431.215358 [tmate] D [4] [ssh_list_kex] ssh_list_kex: languages client->server:
1649199431.215399 [tmate] D [4] [ssh_list_kex] ssh_list_kex: languages server->client:
1649199431.215528 [tmate] D [3] [ssh_socket_unbuffered_write] ssh_socket_unbuffered_write: Enabling POLLOUT for socket
1649199431.215552 [tmate] D [3] [packet_send2] packet_send2: packet: wrote [len=588,padding=8,comp=579,payload=579]
1649199431.222958 [tmate] D [3] [packet_send2] packet_send2: packet: wrote [len=44,padding=6,comp=37,payload=37]
1649199431.223018 [tmate] D [3] [ssh_socket_unbuffered_write] ssh_socket_unbuffered_write: Enabling POLLOUT for socket
1649199431.223031 [tmate] D [3] [ssh_connect] ssh_connect: current state : 6
1649199431.223047 @0 active pane not changed
1649199431.268502 [tmate] D [4] [ssh_socket_pollcallback] ssh_socket_pollcallback: Poll callback on socket 13 (POLLIN POLLOUT ), out buffer 0
1649199431.268601 [tmate] D [3] [ssh_packet_socket_callback] ssh_packet_socket_callback: packet: read type 31 [len=604,padding=8,comp=595,payload=595]
1649199431.268623 [tmate] D [3] [ssh_packet_process] ssh_packet_process: Dispatching handler for packet type 31
1649199431.268640 [tmate] D [2] [ssh_packet_dh_reply] ssh_packet_dh_reply: Received SSH_KEXDH_REPLY
1649199431.276498 [tmate] D [3] [packet_send2] packet_send2: packet: wrote [len=12,padding=10,comp=1,payload=1]
1649199431.276536 [tmate] D [2] [ssh_client_curve25519_reply] ssh_client_curve25519_reply: SSH_MSG_NEWKEYS sent
1649199431.276555 [tmate] D [3] [ssh_packet_socket_callback] ssh_packet_socket_callback: Processing 16 bytes left in socket buffer
1649199431.276576 [tmate] D [3] [ssh_packet_socket_callback] ssh_packet_socket_callback: packet: read type 21 [len=12,padding=10,comp=1,payload=1]
1649199431.276592 [tmate] D [3] [ssh_packet_process] ssh_packet_process: Dispatching handler for packet type 21
1649199431.276606 [tmate] D [2] [ssh_packet_newkeys] ssh_packet_newkeys: Received SSH_MSG_NEWKEYS
1649199431.276675 [tmate] D [3] [crypt_set_algorithms2] crypt_set_algorithms2: Set output algorithm to aes256-ctr
1649199431.276693 [tmate] D [3] [crypt_set_algorithms2] crypt_set_algorithms2: Set HMAC output algorithm to hmac-sha2-256
1649199431.276709 [tmate] D [3] [crypt_set_algorithms2] crypt_set_algorithms2: Set input algorithm to aes256-ctr
1649199431.276724 [tmate] D [3] [crypt_set_algorithms2] crypt_set_algorithms2: Set HMAC output algorithm to hmac-sha2-256
1649199431.276779 [tmate] D [4] [ssh_pki_signature_verify_blob] ssh_pki_signature_verify_blob: Going to verify a ssh-rsa type signature
1649199431.276972 [tmate] D [2] [ssh_packet_newkeys] ssh_packet_newkeys: Signature verified and valid
1649199431.277082 [tmate] D [3] [ssh_socket_unbuffered_write] ssh_socket_unbuffered_write: Enabling POLLOUT for socket
1649199431.277104 [tmate] D [3] [ssh_connect] ssh_connect: current state : 7
1649199431.277117 [tmate] D Establishing connection to x.x.x.x
1649199431.277160 [tmate] D Cannot authenticate server
1649199431.277195 [tmate] D SSH client killed (x.x.x.x)
1649199431.277316 [tmate] D Reconnecting... (Cannot authenticate server)