tmate-io / tmate

Instant Terminal Sharing
https://tmate.io/
Other
5.65k stars 301 forks source link

"Cannot authenticate server" from 2.2.1 client #263

Open leftyfb opened 2 years ago

leftyfb commented 2 years ago

I cannot seem to connect to a newly built self-hosted tmate server running from the docker container in AWS using 2.2.1 tmate clients on Ubuntu 18.04, but 2.4.0-1 on Ubuntu 20.04 works just fine. I tried dumbing down the RSA keys to only use a newly generated 2048 RSA key but that didn't seem to help. Both clients can connect just fine to the tmate.io servers. Nothing seems to show up when I attach to the docker container and try to connect with the 2.21 client. What am I missing here?

649199429.117543 @0 active pane not changed 1649199429.190975 %0 has 84 bytes 1649199429.190996 @0 alerts timer reset 0 1649199429.190999 @0 alerts flags added 0x2 1649199429.191005 input_parse: %0 ground, 84 bytes: #\033[01;32mleftyfb@seville\033[00m\033[01;37m[0\033[01;37m]\033[00m:\033[01;34m~/tmp\033[00m\033[33m\033[00m$ 1649199429.191027 input_csi_dispatch: 'm' "" "01" 1649199429.191062 input_csi_dispatch: 'm' "" "00" 1649199429.191065 input_csi_dispatch: 'm' "" "01" 1649199429.191073 input_csi_dispatch: 'm' "" "01" 1649199429.191077 input_csi_dispatch: 'm' "" "00" 1649199429.191083 input_csi_dispatch: 'm' "" "01" 1649199429.191098 input_csi_dispatch: 'm' "" "00" 1649199429.191100 input_csi_dispatch: 'm' "" "33" 1649199429.191103 input_csi_dispatch: 'm' "" "00" 1649199429.191118 @0 active pane changed 1649199429.191168 format '#{pane_current_command}' -> 'bash' 1649199429.191172 format '' -> '' 1649199429.191175 format '#{?pane_in_mode,[tmux],#{pane_current_command}}#{?pane_dead,[dead],}' -> 'bash' 1649199429.191182 @0 name not changed (still bash) 1649199429.191196 @0 active pane not changed 1649199431.116154 [tmate] I Looking up tmate.example.com... 1649199431.116955 @0 active pane not changed 1649199431.117765 [tmate] D Connecting to tmate.example.com... 1649199431.117826 [tmate] D Trying server x.x.x.x 1649199431.118117 [tmate] D [2] [ssh_connect] ssh_connect: libssh 0.7.0 (c) 2003-2014 Aris Adamantiadis, Andreas Schneider, and libssh contributors. Distributed under the LGPL, please refer to COPYING file for information about your rights, using threading threads_noop 1649199431.118150 [tmate] D [3] [getai] getai: host x.x.x.x matches an IP address 1649199431.118346 [tmate] D [2] [ssh_socket_connect] ssh_socket_connect: Nonblocking connection socket: 13 1649199431.118375 [tmate] D [2] [ssh_connect] ssh_connect: Socket connecting, now waiting for the callbacks to work 1649199431.118402 [tmate] D [3] [ssh_connect] ssh_connect: current state : 1 1649199431.122789 @0 active pane not changed 1649199431.122872 @0 active pane not changed 1649199431.165934 [tmate] D [4] [ssh_socket_pollcallback] ssh_socket_pollcallback: Poll callback on socket 13 (POLLIN POLLOUT ), out buffer 0 1649199431.166018 [tmate] D [3] [ssh_socket_pollcallback] ssh_socket_pollcallback: Received POLLOUT in connecting state 1649199431.166047 [tmate] D [1] [socket_callback_connected] socket_callback_connected: Socket connection callback: 1 (0) 1649199431.166219 [tmate] D [3] [ssh_socket_unbuffered_write] ssh_socket_unbuffered_write: Enabling POLLOUT for socket 1649199431.166256 [tmate] D [3] [ssh_connect] ssh_connect: current state : 2 1649199431.166296 @0 active pane not changed 1649199431.166348 [tmate] D [4] [ssh_socket_pollcallback] ssh_socket_pollcallback: Poll callback on socket 13 (POLLIN POLLOUT ), out buffer 0 1649199431.166383 [tmate] D [3] [callback_receive_banner] callback_receive_banner: Received banner: SSH-2.0-tmate 1649199431.166403 [tmate] D [1] [ssh_client_connection_callback] ssh_client_connection_callback: SSH server banner: SSH-2.0-tmate 1649199431.166466 [tmate] D [1] [ssh_analyze_banner] ssh_analyze_banner: Analyzing banner: SSH-2.0-tmate 1649199431.166487 [tmate] D [4] [ssh_socket_pollcallback] ssh_socket_pollcallback: sending control flow event 1649199431.166507 [tmate] D [4] [ssh_packet_socket_controlflow_callback] ssh_packet_socket_controlflow_callback: sending channel_write_wontblock callback 1649199431.166526 [tmate] D [3] [ssh_connect] ssh_connect: current state : 4 1649199431.166544 @0 active pane not changed 1649199431.189806 [tmate] D [4] [ssh_socket_pollcallback] ssh_socket_pollcallback: Poll callback on socket 13 (POLLIN POLLOUT ), out buffer 0 1649199431.189926 [tmate] D [3] [ssh_packet_socket_callback] ssh_packet_socket_callback: packet: read type 20 [len=884,padding=5,comp=878,payload=878] 1649199431.189954 [tmate] D [3] [ssh_packet_process] ssh_packet_process: Dispatching handler for packet type 20 1649199431.190001 [tmate] D [4] [ssh_list_kex] ssh_list_kex: kex algos: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 1649199431.190023 [tmate] D [4] [ssh_list_kex] ssh_list_kex: server host key algo: rsa-sha2-512,rsa-sha2-256,ssh-rsa 1649199431.190049 [tmate] D [4] [ssh_list_kex] ssh_list_kex: encryption client->server: aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc 1649199431.190074 [tmate] D [4] [ssh_list_kex] ssh_list_kex: encryption server->client: aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc 1649199431.190099 [tmate] D [4] [ssh_list_kex] ssh_list_kex: mac algo client->server: hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 1649199431.190153 [tmate] D [4] [ssh_list_kex] ssh_list_kex: mac algo server->client: hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 1649199431.190176 [tmate] D [4] [ssh_list_kex] ssh_list_kex: compression algo client->server: zlib@openssh.com,zlib 1649199431.190194 [tmate] D [4] [ssh_list_kex] ssh_list_kex: compression algo server->client: zlib@openssh.com,zlib 1649199431.190210 [tmate] D [4] [ssh_list_kex] ssh_list_kex: languages client->server: 1649199431.190226 [tmate] D [4] [ssh_list_kex] ssh_list_kex: languages server->client: 1649199431.206118 [tmate] D [3] [match_hashed_host] match_hashed_host: Matching a hashed host: x.x.x.x match=0 1649199431.206167 [tmate] D [3] [match_hashed_host] match_hashed_host: Matching a hashed host: [x.x.x.x]:2223 match=0 1649199431.215218 [tmate] D [4] [ssh_list_kex] ssh_list_kex: kex algos: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 1649199431.215249 [tmate] D [4] [ssh_list_kex] ssh_list_kex: server host key algo: ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-rsa,ssh-dss 1649199431.215268 [tmate] D [4] [ssh_list_kex] ssh_list_kex: encryption client->server: aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,blowfish-cbc,3des-cbc 1649199431.215285 [tmate] D [4] [ssh_list_kex] ssh_list_kex: encryption server->client: aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,blowfish-cbc,3des-cbc 1649199431.215301 [tmate] D [4] [ssh_list_kex] ssh_list_kex: mac algo client->server: hmac-sha2-256,hmac-sha2-512,hmac-sha1 1649199431.215316 [tmate] D [4] [ssh_list_kex] ssh_list_kex: mac algo server->client: hmac-sha2-256,hmac-sha2-512,hmac-sha1 1649199431.215330 [tmate] D [4] [ssh_list_kex] ssh_list_kex: compression algo client->server: zlib@openssh.com,zlib 1649199431.215344 [tmate] D [4] [ssh_list_kex] ssh_list_kex: compression algo server->client: zlib@openssh.com,zlib 1649199431.215358 [tmate] D [4] [ssh_list_kex] ssh_list_kex: languages client->server: 1649199431.215399 [tmate] D [4] [ssh_list_kex] ssh_list_kex: languages server->client: 1649199431.215528 [tmate] D [3] [ssh_socket_unbuffered_write] ssh_socket_unbuffered_write: Enabling POLLOUT for socket 1649199431.215552 [tmate] D [3] [packet_send2] packet_send2: packet: wrote [len=588,padding=8,comp=579,payload=579] 1649199431.222958 [tmate] D [3] [packet_send2] packet_send2: packet: wrote [len=44,padding=6,comp=37,payload=37] 1649199431.223018 [tmate] D [3] [ssh_socket_unbuffered_write] ssh_socket_unbuffered_write: Enabling POLLOUT for socket 1649199431.223031 [tmate] D [3] [ssh_connect] ssh_connect: current state : 6 1649199431.223047 @0 active pane not changed 1649199431.268502 [tmate] D [4] [ssh_socket_pollcallback] ssh_socket_pollcallback: Poll callback on socket 13 (POLLIN POLLOUT ), out buffer 0 1649199431.268601 [tmate] D [3] [ssh_packet_socket_callback] ssh_packet_socket_callback: packet: read type 31 [len=604,padding=8,comp=595,payload=595] 1649199431.268623 [tmate] D [3] [ssh_packet_process] ssh_packet_process: Dispatching handler for packet type 31 1649199431.268640 [tmate] D [2] [ssh_packet_dh_reply] ssh_packet_dh_reply: Received SSH_KEXDH_REPLY 1649199431.276498 [tmate] D [3] [packet_send2] packet_send2: packet: wrote [len=12,padding=10,comp=1,payload=1] 1649199431.276536 [tmate] D [2] [ssh_client_curve25519_reply] ssh_client_curve25519_reply: SSH_MSG_NEWKEYS sent 1649199431.276555 [tmate] D [3] [ssh_packet_socket_callback] ssh_packet_socket_callback: Processing 16 bytes left in socket buffer 1649199431.276576 [tmate] D [3] [ssh_packet_socket_callback] ssh_packet_socket_callback: packet: read type 21 [len=12,padding=10,comp=1,payload=1] 1649199431.276592 [tmate] D [3] [ssh_packet_process] ssh_packet_process: Dispatching handler for packet type 21 1649199431.276606 [tmate] D [2] [ssh_packet_newkeys] ssh_packet_newkeys: Received SSH_MSG_NEWKEYS 1649199431.276675 [tmate] D [3] [crypt_set_algorithms2] crypt_set_algorithms2: Set output algorithm to aes256-ctr 1649199431.276693 [tmate] D [3] [crypt_set_algorithms2] crypt_set_algorithms2: Set HMAC output algorithm to hmac-sha2-256 1649199431.276709 [tmate] D [3] [crypt_set_algorithms2] crypt_set_algorithms2: Set input algorithm to aes256-ctr 1649199431.276724 [tmate] D [3] [crypt_set_algorithms2] crypt_set_algorithms2: Set HMAC output algorithm to hmac-sha2-256 1649199431.276779 [tmate] D [4] [ssh_pki_signature_verify_blob] ssh_pki_signature_verify_blob: Going to verify a ssh-rsa type signature 1649199431.276972 [tmate] D [2] [ssh_packet_newkeys] ssh_packet_newkeys: Signature verified and valid 1649199431.277082 [tmate] D [3] [ssh_socket_unbuffered_write] ssh_socket_unbuffered_write: Enabling POLLOUT for socket 1649199431.277104 [tmate] D [3] [ssh_connect] ssh_connect: current state : 7 1649199431.277117 [tmate] D Establishing connection to x.x.x.x 1649199431.277160 [tmate] D Cannot authenticate server 1649199431.277195 [tmate] D SSH client killed (x.x.x.x) 1649199431.277316 [tmate] D Reconnecting... (Cannot authenticate server)