OpenSSH sftp on netware 6.5 sp2

Hi,
I have a netware 65sp2 server build with amp package and openssh 3.7.1p2 . I
cannot open sftp session. I always get the folloing entries in sshd log :
<4> : Accepted password for 020ri007 from 10.20.200.173 port 1412 ssh2
<4> : subsystem request for sftp
<0> error: Failed to create identity for
cn=020ri007.ou=RI.ou=020.ou=D020.o=css on local server. rc: 83, errno 7,
h_errno: 997, clienterrno: 0
14

someone have an idea ?

Thank
Martin

Hi Martin,
please download http://www.gknw.com/test/tstrand.zip
and run it; then report back please...

Guenter.

"Martin Liard" <martin.liard@cssamares.qc.ca> wrote in
news:0UeJc.2396$gg.1667@prv-forum2.provo.novell.com: 

> Hi,
> I have a netware 65sp2 server build with amp package and openssh
> 3.7.1p2 . I cannot open sftp session. I always get the folloing
> entries in sshd log : <4> : Accepted password for 020ri007 from
> 10.20.200.173 port 1412 ssh2 <4> : subsystem request for sftp
> <0> error: Failed to create identity for
> cn=020ri007.ou=RI.ou=020.ou=D020.o=css on local server. rc: 83, errno
> 7, h_errno: 997, clienterrno: 0
> 14
> 
> someone have an idea ?
> 
> Thank
> Martin
> 
> 
> 

Guenter,

What is the expected output of this tool?
I tried your tool on NW51, NW6 and N65. I run SSH & SFTP successfully
on all of them. Tstrand returned the following on all of them:

NXSeedRandom() returned:  79
The host hardware does not implement this functionality,
and the underlying chipset does not respond as supporting it.

 --- Jan

"Guenter Knauf, DevNet SysOp 32" wrote:
> 
> Hi Martin,
> please download http://www.gknw.com/test/tstrand.zip
> and run it; then report back please...
> 
> Guenter.
> 
> "Martin Liard" <martin.liard@cssamares.qc.ca> wrote in
> news:0UeJc.2396$gg.1667@prv-forum2.provo.novell.com:
> 
> > Hi,
> > I have a netware 65sp2 server build with amp package and openssh
> > 3.7.1p2 . I cannot open sftp session. I always get the folloing
> > entries in sshd log : <4> : Accepted password for 020ri007 from
> > 10.20.200.173 port 1412 ssh2 <4> : subsystem request for sftp
> > <0> error: Failed to create identity for
> > cn=020ri007.ou=RI.ou=020.ou=D020.o=css on local server. rc: 83, errno
> > 7, h_errno: 997, clienterrno: 0
> > 14
> >
> > someone have an idea ?
> >
> > Thank
> > Martin
> >
> >

Hi Jan,
Jan Patera <patera@anchora.cz> wrote in news:40F64C7D.33EAAE12
@anchora.cz:

> Guenter,
> 
> What is the expected output of this tool?
> I tried your tool on NW51, NW6 and N65. I run SSH & SFTP successfully
> on all of them. Tstrand returned the following on all of them:
> 
> NXSeedRandom() returned:  79
> The host hardware does not implement this functionality,
> and the underlying chipset does not respond as supporting it.
should return 0; but if your servers return 79 _and_ nevertheless SSH 
runs on these servers fine that isnt the problem here, and no need for 
Martin to test that; it was just a shot in the dark because the issue 
sounded so known to me.
The problem with NXSeedRandom() is this:
half a year ago I found by accident that NXSeedRandom() depends on 
hardware crypto-chips. My simple test program showed that perhaps only 
15-25% of all NetWare server hardware is supported by the implementation 
of this function. So I suggested to make a software-fallback inside the 
function so that it works on every platform. Unfortunately it seems that 
Novell internal forks mis-use this function to detect the cryto chips and 
rely on the returned error code, while my implementation would never 
fail....
so all I could do was changing the docs so that it is mentioned that only 
few hardware is supported at this time....
But I guess you program too, so you know _when_ developers look into the 
API docs........

BTW: if you need somthing like NXSeedRandom(), look at the Apache2 code 
where we added then the software fallback....

Guenter.

Martin,

rc 83 might be "No route to host" and errno 7 might be "File
exists".
Both cases are very strange. 997 has been reported only from eDir for
Windows.
Is your eDir healthy? What eDir & SP version? (please note that eDIR
SP's are
independent of OS SP's).
Is this problem related only to this specific user or all users? Can
020ri007 login via SSH
(needs admin rights to the server object)?

What is "amp package"?

BTW, we should move to novell.forge.openssh.help news group.

 --- Jan

Martin Liard wrote:
> 
> Hi,
> I have a netware 65sp2 server build with amp package and openssh 3.7.1p2 .
I
> cannot open sftp session. I always get the folloing entries in sshd log :
> <4> : Accepted password for 020ri007 from 10.20.200.173 port 1412
ssh2
> <4> : subsystem request for sftp
> <0> error: Failed to create identity for
> cn=020ri007.ou=RI.ou=020.ou=D020.o=css on local server. rc: 83, errno 7,
> h_errno: 997, clienterrno: 0
> 14
> 
> someone have an idea ?
> 
> Thank