Remote connectivity via ssh no longer works on SiteScope 11.32

Hello Experts,

We have an open case regarding ssh connectivity issue on remote windows server using SiteScope 11.32. The same servers are currently being monitored on our 11.24 version without any issues. I would like to know more if there are major changes in the 11.32 architecture on how it handle ssh as compared to the 11.2x version.

Tags:

  • There was a major change between 11.2X and 11.32. 11.32 includes a new Mindterm java client for SSH. We were waiting on this to resolve numerous problems we had with SSH to Windows servers (We run OpenSSH on our windows servers). While it resolved some Key Exchange algorithm deficencies, we are still seeing SiS struggle to manage SSH connections to Windows hosts. We also have several hundred Unix servers managed via SSH, and have zero problems with those.

  • Hi Brett,

    Thank you for the prompt response. These servers that we are having issues with are web servers on the DMZ. Even deploying new RemoteNTSSH.zip from the 11.32 version does not resolve the issue. Do we have recommendations at this point?

  • Sorry mate, no. We've never used the SiS included RemoteNTSSH server.. our Ops teams already run their preferred versions of SSH servers on the managed nodes.

    I can only suggest doing what we had to do when trying to diagnose issues.. Enable a separate trace file in debug mode for one of the failing monitors, and trawl that and the SSH server logs for hints.. and of course.. a case with HP :)

  • SiteScope is relying on mindterm.jar library to handle overall SSH connections and SiteScope 11.32 bundles the newer version of it to cover more secure connection options that work with many SSH servers today.

    If your 11.24 is still able to connect to your SSH server but SiteScope 11.32 is failing, then there might be a chance that your target SSH server/configuration is somehow not able to work well with SiteScope 11.32 mindterm.jar new default options?

    Perhaps you can test the SSH connection from GUI version of mindterm.jar on both 11.24 and 11.32 hosts to see if you can find out specific options that still allows you to login to your very same target SSH server. We can launch MindTerm console from command prompt as below. After accepting default pop-up questions for a couple of times, you can choose [File] > [Connect]  and you can test various combinations of options here, including [Security] options.

    C:\Users\Administrator>%SITESCOPE_HOME%\java\bin\java -jar %SITESCOPE_HOME%\WEB-INF\lib\mindterm.jar



    Perhaps you first want to find out some explicit combinations of working options esp. around [Security] tab from SiteScope 11.24 host, then try the same from SiteScope 11.32 host.

    It is additionally recommended for you to enable DEBUG/TRACE at your SSH server side for further clues. Please check with your remote server admin/vendor for details on this setting.

    Regards,

  • Hi Nyanko,

    Thank you for pointing out to test using mindterm. Interestingly the test connectivity to the remote server looks good including when performing test connectivity in the SiteScope Remote Servers Tab. The issue is when you create monitor for the remote server. It is not able to pull any monitor to add like windows service, resource monitor, etc...

  • So how stable your connection test results as of now? e.g. if you test connection 10 times, do you see successful results for all attempts? If you are facing some failures/long-holding, perhaps you again want to run GUI mindterm.jar in parallel to test it again?

    Regards,

  • Multiple connectivity test are successful. I have yet to receive update to this case from HPE :-(...

    HPE CASE: 5308829071

     

  • Multiple connectivity test are successful. I have yet to receive update to this case from HPE :-(...

    HPE CASE: 5308829071