On Fri, 2016-06-10 at 22:50 -0500, Laverne Schrock wrote: > Hi all, > > I have a client running an older version of ssh > '$ssh -V > OpenSSH_6.0p1 Debian-4+deb7u4, OpenSSL 1.0.1e 11 Feb 2013' > and a server running a current version of ssh > 'OpenSSH_7.2p2 Debian-5, OpenSSL 1.0.2h 3 May 2016' > > I can access other servers running 6.9, but not any running 7.2. The > error. Here is the (sanitized) output of a connection attempt. > '$ ssh -vvv user@remotehost > OpenSSH_6.0p1 Debian-4+deb7u4, OpenSSL 1.0.1e 11 Feb 2013 > debug1: Reading configuration data /etc/ssh/ssh_config > debug1: /etc/ssh/ssh_config line 19: Applying options for * > debug2: ssh_connect: needpriv 0 > debug1: Connecting to remotehost [ip.ip.ip.ip] port 22. > debug1: Connection established. > debug3: Incorrect RSA1 identifier > debug3: Could not load "/home/user/.ssh/id_rsa" as a RSA1 public key > debug1: identity file /home/user/.ssh/id_rsa type 1 > debug1: Checking blacklist file /usr/share/ssh/blacklist.RSA-2048 > debug1: Checking blacklist file /etc/ssh/blacklist.RSA-2048 > debug1: identity file /home/user/.ssh/id_rsa-cert type -1 > debug1: identity file /home/user/.ssh/id_dsa type -1 > debug1: identity file /home/user/.ssh/id_dsa-cert type -1 > debug1: identity file /home/user/.ssh/id_ecdsa type -1 > debug1: identity file /home/user/.ssh/id_ecdsa-cert type -1 > ssh_exchange_identification: Connection closed by remote host' > > Is there a setting on the OpenSSH 7 server to allow the older client > to > connect? Note that the older server accepts my new client just fine. > I > can connect to the newer server from additional, up to date clients. > > Thanks, > lverns Never mind me! I had forgotten that this particular server was behind a proxy and needed a ProxyCommand set in '.ssh/config'
Sorry for the noise, lverns
