SSHD broken in Zabbix 2.0.4 Appliance?

[joel_leonhardt]

Hi,

I believe SSHD is broken (refuses all connections) in the Zabbix 2.0.4 Appliance.

Symptoms:
- Zabbix Appliance 2.0.4 refuss all SSH connection attempts.
- Command "dmesg" shows that the firewall accepts these connections ("SFW2-INext-ACC-TCP").
- Command "netstat -l" shows that SSH is not listening on its standard (tcp/22) port.
- Commands "rcsshd restart", "systemctl status sshd.service" and "/etc/init.d/sshd start" show that SSHD cannot be started.
- File "/var/log/messages" shows "Starting SSH daemon OpenSSL version mismatch. Built against 1000005f, you have 1000103f".

Workaround applied:
- yast => Software => Software Management => search:SSL => updated (">") the 3 installed SSL-related packages
- yast => Software => Software Management => search:SSH => updated (">") the 3 installed SSH-related packages
- After this, SSHD worked as expected.

Notes:
- Of those 6 SSH/SSL package updates, probably only one or two were needed.
- This issue was verified on appliance: Zabbix_2.0_x86.i686-2.0.4.vmx.tar.gz
- This issue is possibly related to:

o https://bugzilla.novell.com/show_bug.cgi?id=780979
o http://openssl.6102.n7.nabble.com/Op...02.html#a31414
o https://bugzilla.mindrot.org/show_bug.cgi?id=1991

Regards,
Joel

[DamNet]

confirm, got the same issue

[Michael0]

Yes, same here!
Would be nice if someone could check this and upload the appliance package again

[richlv]

thanks for the info. unfortunately, rebuild does not help - sshd is still broken :/
i've notified suse studio team, hopefully this will be resolved

[maplesyrupghost]

man, took me like 20 mins of searching to finally find this thread. YUP! it's broken. I was trying to figure out where I went wrong in setting this up, glad to hear it wasn't me! Now I have to like, start over again, at least I only added one host to it!

[grandy]

You can use this command to update the libopenssl

zypper install -f libopenssl1_0_0=1.0.0e-34.17.1

[maplesyrupghost]

You can use this command to update the libopenssl

zypper install -f libopenssl1_0_0=1.0.0e-34.17.1

very helpful I'll give it a shot!

[richlv]

apparently, this was caused by partial system update inside studio.

i've regenerated the images with opensuse 12.2, and they should be uploaded to sourceforge as well.

feedback on sshd status (or any other problems) would be appreciated

[deneb829]

Worked!

That did it!

For people who may not be familiar with yast. Once you have navigated to the software management screen, your cursor should already be in the "Search Phrase" field. Enter SSL or SSH here. Once you hit enter, on the right side you'll see "i" next to the programs/modules that Joel is talking about.

Use the down arrow to highlight the line with the "i" and hit the space bar and it should change to a ">". When you've done this to the three, tab to "Accept" and hit enter. You'll need to follow the same process for SSH.

Once you have made the changes you may need to run:
systemctl --system daemon-reload

I needed it to SFTP my backups. It's working great now. Thanks Joel!

- deneb