<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="IncrediMail 1.0" name=GENERATOR>
<STYLE>v\:* {
BEHAVIOR: url (#default#vml)
}
</STYLE>
<style>v\:* {
BEHAVIOR: url (#default#vml)
}
</style>
<!--IncrdiXMLRemarkStart>
<IncrdiX-Info>
<X-FID>79F8FDE2-E90C-4120-9A2C-E484CCFAA091</X-FID>
<X-FVER>4.000000</X-FVER>
<X-FIT>Letter</X-FIT>
<X-FILE>Letter\light_grain.imf</X-FILE>
<X-FCOL>Elegant</X-FCOL>
<X-FCAT>Stationary</X-FCAT>
<X-FDIS>Light Grain</X-FDIS>
<X-Extensions>SU1CTDEsNDYsgUmBSZ3FOME4KCyRTSzFgTRNiYWRgU3FJJE0TSyJwYk0NDgkJIHFhUmBSYFJgSxJTUJMMiwwLCxJTUJMMywwLCw=</X-Extensions>
<X-BG>cid:8311DD41-73A0-4054-8B96-F04A083E17F8</X-BG>
<X-BGT>repeat</X-BGT>
<X-BGC>#f3eded</X-BGC>
<X-BGPX>left</X-BGPX>
<X-BGPY>top</X-BGPY>
<X-ASN></X-ASN>
<X-ASNF></X-ASNF>
<X-ASH></X-ASH>
<X-ASHF></X-ASHF>
<X-AN></X-AN>
<X-ANF></X-ANF>
<X-AP></X-AP>
<X-APF></X-APF>
<X-AD></X-AD>
<X-ADF></X-ADF>
<X-AUTO>X-ASN,X-ASH,X-AN,X-AP,X-AD</X-AUTO>
<X-CNT>;</X-CNT>
</IncrdiX-Info>
<IncrdiXMLRemarkEnd-->
</HEAD>
<BODY style="BACKGROUND-POSITION: left top; SCROLLBAR-FACE-COLOR: #c6d7ff; FONT-SIZE: 12pt; MARGIN: 0px 10px 10px; SCROLLBAR-HIGHLIGHT-COLOR: #ffffff; SCROLLBAR-SHADOW-COLOR: #ffffff; COLOR: #010158; SCROLLBAR-3DLIGHT-COLOR: #7b9ed6; SCROLLBAR-ARROW-COLOR: #4a6184; BACKGROUND-REPEAT: repeat; FONT-FAMILY: Arial; SCROLLBAR-DARKSHADOW-COLOR: #bebebe" text=#010158 vLink=#0000ff aLink=#0000ff link=#0000ff bgColor=#f3eded background=cid:8311DD41-73A0-4054-8B96-F04A083E17F8 scroll=yes SIGCOLOR="11031552">
<TABLE id=INCREDIMAINTABLE cellSpacing=0 cellPadding=2 width="100%" border=0>
<TBODY>
<TR>
<TD id=INCREDITEXTREGION dir=ltr style="FONT-SIZE: 12pt; DIRECTION: ltr" vAlign=top width="100%">
<DIV>As some may remember from my ldap question (never worked btw - reverted back to htaccess until I can get more time to work on it) I have a RHEL 5.2 server with Xymon 4.3.2 server/client installed.</DIV>
<DIV> </DIV>
<DIV>The server has openssh v 4.3p2 (part of the security app, not separate install).</DIV>
<DIV> </DIV>
<DIV>The problem is the ssh test - when run - it causes a log entry in /var/log/messages on exit:<BR><BR>sshd[#####]: Connection closed by unknown</DIV>
<DIV> </DIV>
<DIV>Did some playing around with the services conf and adding --DNS="IP" in the hobbitserver.conf for the bbtest-net call</DIV>
<DIV> </DIV>
<DIV>Ran the test strings by hand via telnet FQN 22. Pasted the send string in and it sent back all the encryption it can support </DIV>
<DIV> </DIV>
<DIV>As this is testing the ssh, why not specify that the hobbit account should have ssh set up to each client and the server, then test with an actual ssh call: </DIV>
<DIV> </DIV>
<DIV>ssh <server> cat <some known file> </DIV>
<DIV> </DIV>
<DIV>Or just send an ssh -V and parse the string for what you need. (this is known as an ssh exec in the security world) Seems to me that if a server responds to an ssh request properly, then the sshd is running. You could even send ps -ef | grep sshd to see if its running. </DIV>
<DIV> </DIV>
<DIV>To test this way ensures that the protocol is actually usable, not just running. (A really HUGE difference!!!)</DIV>
<DIV> </DIV>
<DIV>Lastly, and best of all - this won't create weird error messages.</DIV>
<DIV> </DIV>
<DIV>In the meantime - any ideas on how to get rid of this error when running the ssh test? </DIV>
<DIV> </DIV>
<DIV>Thanks</DIV>
<DIV> </DIV>
<DIV>Brian </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV id=INCREDISIGNATUREID>
<DIV>lurch@inorbit.com</DIV></DIV></TD></TR>
<TR>
<TD id=INCREDIFOOTER width="100%">
<TABLE cellSpacing=0 cellPadding=0 width="100%">
<TBODY>
<TR>
<TD width="100%"></TD>
<TD id=INCREDISOUND vAlign=bottom align=middle></TD>
<TD id=INCREDIANIM vAlign=bottom align=middle></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></BODY></HTML>