Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 20 May 2009 10:40:59 -0400
From:      Glen Barber <glen.j.barber@gmail.com>
To:        Dimitry Andric <dimitry@andric.com>
Cc:        hackers@freebsd.org, bug-followup@freebsd.org
Subject:   Re: bin/134694: gives false-positive when unable to obtain socket  [WAS: sshd(8) - alert user when fails to execute from rc.d]
Message-ID:  <4ad871310905200740n744f9b83j96db2a3c1a6bec43@mail.gmail.com>
In-Reply-To: <4A13E906.7020907@andric.com>
References:  <4ad871310905181949s2874795eoa5ddf425746310bf@mail.gmail.com> <Ef8BU7l8PyKhYzlJNCX2WAa41WY@cgr/Aoyjz11KtFDB23HMnFSn04s> <4A13E180.1040606@andric.com> <4A13E6F7.7070309@glocalnet.net> <4A13E906.7020907@andric.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi, Dimitry

On Wed, May 20, 2009 at 7:27 AM, Dimitry Andric <dimitry@andric.com> wrote:
> On 2009-05-20 13:18, Tobias Fendin wrote:
>> Does the child really die? I did a little test:
>>
>> # /etc/rc.d/sshd status
>> sshd is not running.
>> # nc -l 22 >/tmp/ssh_test &
>> [1] 1733
>> # /etc/rc.d/sshd start
>> Starting sshd.
>> # /etc/rc.d/sshd status
>> sshd is running as pid 1740.
>
> This is because sshd binds to both IPv4 and IPv6 ports. =A0The IPv4 bind
> fails, as you will see in syslog, while the IPv6 bind succeeds. =A0Thus
> sshd keeps on running.
>
> If you start two nc's (I don't know any way to do this with one
> instance), e.g.:
>
> nc -4 -l 22 > /tmp/ssh_test4 &
> nc -6 -l 22 > /tmp/ssh_test6 &
>
> and then try starting sshd, you should see it quit.
>

It's not an IPv4 versus IPv6 problem.  How I tested this, as I had
this problem in the past (which was a non-standard setup, but still a
problem):

sshd was listening on :25, both IPv4 and IPv6
sendmail was listening on :25 (because I had forgotten to disable it)

The system boots, and sendmail starts before sshd.  When sshd starts
(or tries to) there is no console output that it had failed.  The only
way you realize it is not running, is when you cannot remotely log in.

--=20
Glen Barber



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4ad871310905200740n744f9b83j96db2a3c1a6bec43>