Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

ssh failure with MACOS High Sierra

Hello apple users/experts

Since upgrading our laboratory MacBook Pro laptops OS to high Sierra almost all of our computers fail to connect to the remote servers using our laboratory intranet cable with the embedded errors :

I thought some of the experts here might be able to give some advice.

surprisingly it works fine with WIFI and older OS. No firewall/ blocking issue was identified.

We will deeply appreciate your helps.


Arsalans-MacBook-Pro:~ arsalan$ ssh -v foo@foo.com

OpenSSH_7.6p1, LibreSSL 2.6.2

debug1: Reading configuration data /etc/ssh/ssh_config

debug1: /etc/ssh/ssh_config line 48: Applying options for *

debug1: Connecting to lengau.chpc.ac.za port 22.

debug1: Connection established.

debug1: key_load_public: No such file or directory

debug1: identity file /Users/arsalan/.ssh/id_rsa type -1

debug1: key_load_public: No such file or directory

debug1: identity file /Users/arsalan/.ssh/id_rsa-cert type -1

debug1: key_load_public: No such file or directory

debug1: identity file /Users/arsalan/.ssh/id_dsa type -1

debug1: key_load_public: No such file or directory

debug1: identity file /Users/arsalan/.ssh/id_dsa-cert type -1

debug1: key_load_public: No such file or directory

debug1: identity file /Users/arsalan/.ssh/id_ecdsa type -1

debug1: key_load_public: No such file or directory

debug1: identity file /Users/arsalan/.ssh/id_ecdsa-cert type -1

debug1: key_load_public: No such file or directory

debug1: identity file /Users/arsalan/.ssh/id_ed25519 type -1

debug1: key_load_public: No such file or directory

debug1: identity file /Users/arsalan/.ssh/id_ed25519-cert type -1

debug1: Local version string SSH-2.0-OpenSSH_7.6

debug1: Remote protocol version 2.0, remote software version xxxxxxx

debug1: no match: xxxxxxx

debug1: Authenticating to foo :22 as 'foo'

debug1: SSH2_MSG_KEXINIT sent

Connection closed by *.*.*.* port 22

Posted on Dec 15, 2017 5:57 AM

Reply
Question marked as Best reply

Posted on Dec 15, 2017 10:25 PM

I'm no network expert and this maybe a totally different issue, but I just helped a friend over the phone with what sounds like the same or similar problem. We struggling over the phone for about 15min. (dumb helping dumber) until I had him open and explain what he was seeing in the Network Preference Panel.


What happened to him was that the service order had switch from Ethernet to Wi-Fi when he disconnected the Ethernet cable to paint... Which make sense because both Services were turned ON.. The problem was, that for some reason it did not switch the Service Order back to Ethernet once the Ethernet connection was restored.


Long story short, go to your: Apple > System Preferences > Network setting and check to see if the Ethernet Service is connected and set as first in the Service order list.

User uploaded file

If it is not,

click the cog on the Network preference panel > select "Set Service Order" and move Ethernet to the top.

or.... optionally if Wi Fi is not needed, turn it off which should force it back onto the Ethernet connection.

5 replies
Question marked as Best reply

Dec 15, 2017 10:25 PM in response to arsalane

I'm no network expert and this maybe a totally different issue, but I just helped a friend over the phone with what sounds like the same or similar problem. We struggling over the phone for about 15min. (dumb helping dumber) until I had him open and explain what he was seeing in the Network Preference Panel.


What happened to him was that the service order had switch from Ethernet to Wi-Fi when he disconnected the Ethernet cable to paint... Which make sense because both Services were turned ON.. The problem was, that for some reason it did not switch the Service Order back to Ethernet once the Ethernet connection was restored.


Long story short, go to your: Apple > System Preferences > Network setting and check to see if the Ethernet Service is connected and set as first in the Service order list.

User uploaded file

If it is not,

click the cog on the Network preference panel > select "Set Service Order" and move Ethernet to the top.

or.... optionally if Wi Fi is not needed, turn it off which should force it back onto the Ethernet connection.

Jan 20, 2018 10:56 PM in response to arsalane

I also have this type of issue where i cannot access my switches on site but one access granted on some and not all remotely, this all started late last year, before this i could remote into any switch on or off site, teaks to add

  1. HostkeyAlgorithms ssh-dss,ssh-rsa
  2. KexAlgorithms +diffie-hellman-group1-sha1


# $OpenBSD: ssh_config,v 1.33 2017/05/07 23:12:57 djm Exp $


# This is the ssh client system-wide configuration file. See

# ssh_config(5) for more information. This file provides defaults for

# users, and the values can be changed in per-user configuration files

# or on the command line.


# Configuration data is parsed as follows:

# 1. command line options

# 2. user-specific file

# 3. system-wide file

# Any configuration value is only changed the first time it is set.

# Thus, host-specific definitions should be at the beginning of the

# configuration file, and defaults at the end.


# Site-wide defaults for some commonly used options. For a comprehensive

# list of available options, their meanings and defaults, please see the

# ssh_config(5) man page.


# Host *

# ForwardAgent no

# ForwardX11 no

# RhostsRSAAuthentication no

# RSAAuthentication yes

# PasswordAuthentication yes

# HostbasedAuthentication no

# GSSAPIAuthentication no

# GSSAPIDelegateCredentials no

# BatchMode no

# CheckHostIP yes

# AddressFamily any

# ConnectTimeout 0

# StrictHostKeyChecking ask

# IdentityFile ~/.ssh/identity

# IdentityFile ~/.ssh/id_rsa

# IdentityFile ~/.ssh/id_dsa

# IdentityFile ~/.ssh/id_ecdsa

# IdentityFile ~/.ssh/id_ed25519

# Port 22

# Protocol 2

# Cipher 3des

# Ciphers aes128-cbc,3des-cbc,blowfish-cbc

# Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,aes192-cbc,aes256-cbc

# MACs hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com

# EscapeChar ~

# Tunnel no

# TunnelDevice any:any

# PermitLocalCommand no

# VisualHostKey no

# ProxyCommand ssh -q -W %h:%p gateway.example.com

# RekeyLimit 1G 1h

HostkeyAlgorithms ssh-dss,ssh-rsa

KexAlgorithms +diffie-hellman-group1-sha1



^G Get Help ^O WriteOut ^R Read File ^Y Prev Page ^K Cut Text ^C Cur Pos

^X Exit ^J Justify ^W Where Is ^V Next Page ^U UnCut Text ^T To Spell



Does not help, this worked perfeearly last year, Apple or anybody please guide me into resolving this issue.

Please note i am a newbie when it comes to MACOS


Kind regards

Phantumph

Dec 15, 2017 10:30 PM in response to arsalane

ssh connection requires advance configuration with System Preferences > Sharing > Remote login or your server-equivalent software.


There have been changes to the communication software in High Sierra and sharing by AFP is no longer supported, only SMB. There may be other unintended consequences as well.


Consider posting again on the MacOS server section of the forums.

ssh failure with MACOS High Sierra

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.