| All Forums |
Register |
Login |
Search |
Subscriptions |
My Profile |
Inbox |
| Tool Warehouse |
FAQs |
Resources |
Help |
Member List |
Address Book |
Logout |
|
|
After OpenSSH 4.3, event ID 1006 errors on login
|
Logged in as: Guest |
| Users viewing this topic: none |
|
Login  |
|
|
 After OpenSSH 4.3, event ID 1006 errors on login - Apr. 10, '06, 10:53:10 AM
|
|
|
breiter
Posts: 343
Joined: Jun. 14, '04,
From: Washington, DC
Status: offline
|
I am seeing two (2) event ID 1006 errors for every SSH login on a my server that I just upgraded to OpenSSH 4.3. The server is configured as stand-alone in a datacenter and is *not* a member of a domain. It is Win2k3 SP1 (not R2) fully patched with Interix 3.5 installed.
quote:
Event Type: Error
Event Source: Interix
Event Category: None
Event ID: 1006
Date: 4/10/2006
Time: 10:46:15 AM
User: N/A
Computer: RA
Description:
A user or group id with a value too large to make into a uid_t has been encountered, and converted into a reserved UID value. See Knowledge Base article Q306552 for more information. The internal UID is 0x091ab8d3f.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Here's the (dated looking) KB article referenced: http://support.microsoft.com/kb/306552.
Here's what happens when I run psxopffset. It's none too helpful.
% psxoffset -uid 091ab8d3f
Get Any failed with NStatus 1717
Get Any failed with NStatus 1717
Could not get Policy Handle; exiting
% psxoffset -uid 0x091ab8d3f
Get Any failed with NStatus 1717
Get Any failed with NStatus 1717
Could not get Policy Handle; exiting
|
|
|
|
|
RE: After OpenSSH 4.3, event ID 1006 errors on login - Apr. 10, '06, 10:58:05 AM
|
|
|
breiter
Posts: 343
Joined: Jun. 14, '04,
From: Washington, DC
Status: offline
|
One more bit of info is that I'm using rsa keys to log in.
|
|
|
|
|
RE: After OpenSSH 4.3, event ID 1006 errors on login - Apr. 10, '06, 11:06:42 AM
|
|
|
breiter
Posts: 343
Joined: Jun. 14, '04,
From: Washington, DC
Status: offline
|
Removing the /var/adm/SystemWarning file does not help. It gets regenerated with every logon via ssh.
Interestingly, the /var/adm/SystemWarning file does not get regenerated if I start shell locally (via terminal services: Start | All Programs Windows Services for UNIX | C Shell).
|
|
|
|
|
RE: After OpenSSH 4.3, event ID 1006 errors on login - Apr. 10, '06, 1:40:40 PM
|
|
|
Rodney
Posts: 3695
Joined: Jul. 9, '02,
From: /Tools lab
Status: offline
|
Are you successfully logging in with this event error being generated?
When you write that you are using "rsa keys", I'll assume you are doing a passwordless login, yes?
|
|
|
|
|
RE: After OpenSSH 4.3, event ID 1006 errors on login - Apr. 10, '06, 1:48:39 PM
|
|
|
breiter
Posts: 343
Joined: Jun. 14, '04,
From: Washington, DC
Status: offline
|
Yes. Passwordless login. I am actually able to log in. Everything seems fine except for the big fat warning message:
=============================================================
WARNING: One or more events have been logged in the Event Log
that the system administrator should investigate.
=============================================================
The weird thing is that this is only affecting one of two servers similarly configured that I have tried it on. The only obvious difference between the two boxes is that the one with a problem is a dual XEON box with 4 GB of RAM and the one without a problem is a Pentium II-generation with a small RAM footprint.
I don't see this issue on my SUA case, either. I'm stumped.
|
|
|
|
|
RE: After OpenSSH 4.3, event ID 1006 errors on login - Apr. 10, '06, 4:41:56 PM
|
|
|
woehlkmp
Posts: 102
Status: offline
|
Hi, Breiter,
Off-topic: is your SUA box also dual Xeon? If so, have you ever had this happen? I've tried 2003 Enterprise (x86) on two different boxes, as well as 2003 R2 Enterprise x64 (on one box), and in all three instances, I found it to be completely unreliable. I finally got so fed up that I dropped 2000 Pro SP4 on a box with SFU 3.5, and so far that's run just fine.
|
|
|
|
|
RE: After OpenSSH 4.3, event ID 1006 errors on login - Apr. 10, '06, 4:47:47 PM
|
|
|
breiter
Posts: 343
Joined: Jun. 14, '04,
From: Washington, DC
Status: offline
|
No. My SUA situation issues are all just self-inflicted on my own day-to-day machine. I'm not ready to put SUA into production until I see some hotfixes for at least the outstanding issue in this thread. Your thread gives me a little pause, though.
|
|
|
|
|
RE: After OpenSSH 4.3, event ID 1006 errors on login - Apr. 17, '06, 5:55:32 AM
|
|
|
breiter
Posts: 343
Joined: Jun. 14, '04,
From: Washington, DC
Status: offline
|
I have no idea what was causing the issue described above, but it never actually stopped anything from working. It went away after deleting /var/adm/SystemWarning, applying the April security updates and rebooting.
I suspect that removing /var/adm/SystemWarning and rebooting were the key operations because none of the security updates applied to Interix.
|
|
|
|
|
RE: After OpenSSH 4.3, event ID 1006 errors on login - Sep. 20, '06, 12:00:35 PM
|
|
|
breiter
Posts: 343
Joined: Jun. 14, '04,
From: Washington, DC
Status: offline
|
FYI. The SystemWarning came back when I updated OpenSSH again. I hope it goes away with the next reboot. We'll see.
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
|
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
|
Printable Version
