1
1
From server Y, user A tries to ssh to server X and gets Connection Refused. From server Y, user B tries to ssh to server X and is allowed through. From server Y, root tries to ssh and gets Connection Refused. The issue is 100% repeatable and 100% consistent.
The first two would suggest an issue with the ACL, but I'm told the settings are the same for both users although I don't have permission to view them. They have also been deleted and readded without success. However, root isn't affected by the ACL and also cannot connect.
There are two servers with this problem, and many other servers with identical settings in ifconfig (except IP addresses etc) and routing tables that do not suffer this issue.
A tcpdump on server X looking for connections from server Y shows nothing when user A tries to connect, but produces reams of information when user B tries to connect. This shows that server X is receiving nothing when user A is trying to ssh.
All servers are running RedHat
I'm assuming the problem is on server Y, but what should I look for? Could a username based connectivity issue appear in firewalls in between the servers, or are such firewalls not based on username?
Edit - Both users A and B can ssh from server Y to many other servers in the group. It is just server X that has the problem. Ssh-ing does not use RSA, although logging in to server Y in the first place does.
I'm guessing that since user B is "allowed through" that you're using RSA authentication, is that correct? – Ben Plont – 2014-07-10T20:15:34.940
mavdo and @Mavdo – if you are the same person, in the future please use your registered account (Mavdo) exclusively. That way you will be able to edit your own posts without needing to go through the review process. Also, when you ask a question and then provide additional, clarifying information that is legitimately part of the question, just go straight for the [Edit]. That sort of thing belongs in the question, not in a comment. – Scott – 2014-07-10T22:28:48.087
Apologies - I only created my account after I had posted. I had thought that I could link my post back to my account. But I will absolutely follow those guidelines in future, now I have an account. – mavdo – 2014-07-11T08:09:10.127