Connection establishes then closes

Discussion of Co:Z sftp, a port of OpenSSH sftp for z/OS
Post Reply
demyers1
Posts: 7
Joined: Thu Nov 04, 2021 10:18 pm

Connection establishes then closes

Post by demyers1 »

I had this sFTp working at my shop for some time. Broken now.

I only see this in the COZ LOG:
Co:Z SFTP Server version: 7.0.1 (8.4p1) 2021-10-14
Copyright (C) Dovetailed Technologies, LLC. 2008-2021. All rights reserved.
Ý17:36:02.77838¨ session opened for local user DSGDEM from Ý10.11.10.41¨
Connection established, local_addr=10.250.182.34 local_port=22 remote_addr=10.11.10.41 remote_port=46530
Ý17:36:02.93429¨ session closed for local user DSGDEM from Ý10.11.10.41¨

I see this in SYSLOG:
PRD1 sshdÝ131957¨: Connection from 10.11.10.41 port 46530 on 10.250.182.34 port 22
PRD1 sshdÝ131957¨: Port of Entry information retained for uid:0 pid:131957.
PRD1 sshdÝ131957¨: Accepted password for dsgdem from 10.11.10.41 port 46530 ssh2
PRD1 sshdÝ131957¨: Starting session: subsystem 'sftp' for DSGDEM from 10.11.10.41 port 46530 id 0
PRD1 sshdÝ131957¨: Received disconnect from 10.11.10.41 port 46530:11: disconnected by user
PRD1 sshdÝ131957¨: Disconnected from user dsgdem 10.11.10.41 port 46530

How can I gather more trace data on this ??

THanks,
Dave
demyers1
Posts: 7
Joined: Thu Nov 04, 2021 10:18 pm

Re: Connection establishes then closes

Post by demyers1 »

I found how to turn on DEBUG3. I see this error:


19:09:36 PRD1 sshdÝ50463536¨: Accepted password for TS6743 from 206.201.77.127 port 10400 ssh2
PRD1 sshdÝ50463536¨: User child is on pid 16909159
PRD1 sshdÝ16909159¨: debug1: permanently_set_uid: 9001/9999
19:09:36 PRD1 sshdÝ16909159¨: debug1: Entering interactive session for SSH2.
PRD1 sshdÝ16909159¨: debug3: zsshZertSetAttributes(2): SECATTR_IOCTL: 010202000000113c00000000147a9800c9c2d440d69785
PRD1 sshdÝ16909159¨: debug3: zsshZertSetAttributes(2): _SECATTR_SSH_SPEC: 0200c00000000000e2c6e3d7e24040400002000000
PRD1 sshdÝ16909159¨: debug3: zERT SIOCSECATTR failed: EDC5247I Operation not supported. (errno2=0x76647365)
dovetail
Site Admin
Posts: 2022
Joined: Thu Jul 29, 2004 12:12 pm

Re: Connection establishes then closes

Post by dovetail »

This message is from IBM z/OS OpenSSH, and means that the remote server disconnected the session:

Received disconnect from 10.11.10.41 port 46530:11: disconnected by user


You will need to check the remote server SSHD logs for the cause.

The DEBUG3 messages (zERT failed), are not a error. They only mean that zERT was not available.

Again, these are all messages from IBM z/OS OpenSSH. The Co:Z SFTP connection wasn't even started yet at this point.
Post Reply