[20201102]SSH2_MSG_UNIMPLEMENTED packet error with PuTTY.txt
--//上班登录服务器发现提示:Disconnected Server protocol vioalation :unexpected SSH2_MSG_UNIMPLEMENTED packet 。
--//这个问题以前就遇到过,链接:http://blog.itpub.net/267265/viewspace-2218327/,不过这次版本rh 6.5
--//不知道安全等保需求又改动了什么.
--//查看当前openssh_server允许的keyexchange方法可用 /usr/sbin/sshd -T |grep kexalgorithms:
# /usr/sbin/sshd -T |grep kexalgorithms | tr ',' '\n'
kexalgorithms curve25519-sha256
curve25519-sha256@libssh.org
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
diffie-hellman-group-exchange-sha256
diffie-hellman-group16-sha512
diffie-hellman-group18-sha512
diffie-hellman-group14-sha256
diffie-hellman-group14-sha1
# rpm -qa | grep ssh
openssh-clients-4.3p2-82.el5
openssh-server-4.3p2-82.el5
openssh-4.3p2-82.el5
--//奇怪在我的测试机器报错,sshd版本也一样,使用man sshd查询没有-T选项:
# /usr/sbin/sshd -T
sshd: illegal option -- T
OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008
usage: sshd [-46Ddeiqt] [-b bits] [-f config_file] [-g login_grace_time]
[-h host_key_file] [-k key_gen_time] [-o option] [-p port] [-u len]
# diff sshd_config20201001 sshd_config
44c44
< RSAAuthentication no
---
> #RSAAuthentication no
49c49
< RhostsRSAAuthentication no
---
> #RhostsRSAAuthentication no
53c53
< RhostsRSAAuthentication no
---
> #RhostsRSAAuthentication no
68c68
< KerberosAuthentication no
---
> #KerberosAuthentication no
75c75,76
< GSSAPIAuthentication no
---
> #GSSAPIAuthentication no
> #GSSAPICleanupCredentials yes
77d77
< GSSAPICleanupCredentials yes
88c88
< UsePAM yes
---
> #UsePAM yes
103,104c103,104
< UseLogin no
< UsePrivilegeSeparation yes
---
> #UseLogin no
> #UsePrivilegeSeparation yes
123c123,125
< Ciphers arcfour,aes128-ctr,aes192-ctr,aes256-ctr
---
> #Ciphers arcfour,aes128-ctr,aes192-ctr,aes256-ctr
> Ciphers aes256-ctr,aes192-ctr,aes128-ctr
> MACs hmac-sha2-512,hmac-sha2-256,hmac-sha1
--//不知道什么参数导致要这样设置,仅仅做一个记录。
--//感觉安全等保做的有点过,完全没有这个必要。我就害怕改变两台机器相互认证无需登录密码的情况,测试没有问题。
来自 “ ITPUB博客 ” ,链接:https://blog.itpub.net/267265/viewspace-2731752/ ,如需转载,请注明出处,否则将追究法律责任。