SSH access to SVM and XenServer of SDX is getting failed.

SSH access to SVM and XenServer of SDX is getting failed.

book

Article ID: CTX286087

calendar_today

Updated On:

Description

After upgrading to 12.1 build 57.18,  SSH access to SVM and XenServer is getting failed

Resolution

 To resolve the SSH access issue, remove the deprecated HMAC "hmac-ripemd160 " from /etc/sshd_config and restart sshd process as stated below as stated below:

1) Login to SDX GUI via Web browser.

2) Go to Configuration > Console > Click Management Service

3) In the Console screen, perform the following;

> shell

# cd /etc

# vi sshd_config and delete "hmac-ripemd160" and save the sshd_config file

4) Restart the sshd process by executing the below command from the shell


# /usr/sbin/sshd -f /etc/sshd_config

Problem Cause

HMAC (hmac-ripemd160 ) is deprecated from Open SSH 7..

To find the OpenSSH version, execute the following command.

root@ns# ssh -V

OpenSSH_8.0p1-FIPS, OpenSSL 1.0.2r-fips 26 Feb 2019

To find the supported HMAC,  execute the following command.

root@ns# ssh -Q mac
hmac-sha1
hmac-sha1-96
hmac-sha2-256
hmac-sha2-512
hmac-md5
hmac-md5-96
umac-64@openssh.com
umac-128@openssh.com
hmac-sha1-etm@openssh.com
hmac-sha1-96-etm@openssh.com
hmac-sha2-256-etm@openssh.com
hmac-sha2-512-etm@openssh.com
hmac-md5-etm@openssh.com
hmac-md5-96-etm@openssh.com
umac-64-etm@openssh.com
umac-128-etm@openssh.com