Package: monkeysphere
Version: 0.36-1
Severity: normal

Dear Maintainer,

I had a hard time debugging a disturbing and seemingly intermittent
failure while using the monkeysphere . When trying to connect to a small
subset of the servers I usually connect to, I immediately got a
connection refused error from ssh, before I even started connecting to
the remote server.

When disabling the monkeysphere-proxycommand in ~/.ssh/config I was able
to successfully connect to these hosts.

After much hand-wringing and debugging, I tried calling:

MONKEYSPHERE_LOG_LEVEL=DEBUG /usr/bin/monkeysphere ssh-proxycommand <host>

With working hosts, we get an SSH welcome message. With the non-working
hosts I received no feedback and exit code 1.

I finally tracked it down:

ssh-keygen -F <host> -f /home/jamie/.ssh/known_hosts

Which generated a useful error about my known_hosts file having a line
that was too long (somehow I had inserted garbage into my known_hosts
file which prevent ssh-keygen from working properly).

So, the small subset of hosts that were failing were the ones that
weren't in my OpenPGP keyring (which makes sense ... mostly this was
affecting my access to the non-public virtual guests on my laptop.).

I *think* the proper fixes are:

 * Check the error code when calling ssh-keygen and return a reasonable
   error to the user if it fails.
 * Add more feedback to the ssh-proxycommand subcommand when
   MONKEYSPHERE_LOG_LEVEL=DEBUG

jamie (sjj)


-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.10-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages monkeysphere depends on:
ii  adduser                    3.113+nmu3
ii  gnupg                      1.4.14-1
ii  libcrypt-openssl-rsa-perl  0.28-1
ii  lockfile-progs             0.1.17
ii  perl [libdigest-sha-perl]  5.14.2-21

Versions of packages monkeysphere recommends:
ii  cron                         3.0pl1-124
ii  netcat-traditional [netcat]  1.10-40
ii  openssh-client               1:6.2p2-6
ii  socat                        1.7.2.2-1
ii  ssh-askpass                  1:1.2.4.1-9

Versions of packages monkeysphere suggests:
ii  msva-perl [monkeysphere-validation-agent]  0.9.1-1

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to