LMS 3.2 doesn't terminated SSH sessions on ACE

Hi all,
the customer has a problem with LMS 3.2. This software doesn't terminate ssh sessions created by LMS on ACE. All ssh sessions still exist on ACE, so no new ssh session can be created until the administrator manually clear these session on ACE. Thank you for your advice.
Roman

Hi Gaganjeet,
thank you very much for your reply. But I think, that this problem is with LMS, because I used some manually created SSH sessions on ACE an these sessions was terminated correctly. I'm sending you the output from one ACE module:
ace1/Admin# sho ssh session-info
Session ID     Remote Host         Active Time
789            10.210.40.41:24389   280: 2:14
3946           10.210.40.41:37910   160:47:13
7394           10.210.40.41:46981   256:46:54
11129          10.210.40.41:11010   136:46:43
11651          10.210.40.41:11295   136:40:53
14651          10.210.40.41:20522   232:46:45
15143          10.210.40.41:20759   232:42:26
18317          10.210.40.41:32636   112:47: 5
19061          10.210.40.41:35109   112: 2:25
19152          10.210.40.41:35240   112: 0:20
21886          10.210.40.41:42629   208:47: 1
22383          10.210.40.41:42839   208:43:14
25713          10.210.40.41:7305    88:47: 4
28996          10.210.40.41:48379   400:47: 8
29105          10.210.40.41:16016   184:47:16
29579          10.210.40.41:16193   184:44:15
You can see that there are a lot of ssh sessions from LMS (10.210.40.41) with the long active time.:-(
Best regards
Roman

Similar Messages

LMS SSH sessions on ACE

Hi All
I have an issue with LMS not terminating SSH sessions on the Cisco ACE, I have posted on the network management forum as I had thought maybe they would have seen this issue.
Link to other post: https://supportforums.cisco.com/thread/2210739?tstart=0
Cisco LMS 3.2
Cisco ACE A2(3.3)
Any help much appreciated
Regards Craig

Craig,
LMS 3.2 is End of Life Support.
http://www.cisco.com/en/US/prod/collateral/netmgtsw/ps6504/ps6528/ps2425/end_of_life_notice_c51-543581.html
I suggest you to upgrade to 4.2(3) where it says it has been fixed that and other similar bugs.
Jorge

Screen Sharing and SSH sessions freeze occasionally on multiple mac minis

I have 28 Mac Minis at work. With such a large number of minis, I obviously can't have a monitor attached to each of them so I've got them plugged into a network switch and access them via Screen Sharing (both via regular Screen Sharing and ARD) and SSH sessions.
A few of them seem to suffer from intermittent problems however. I'll be using Screen Sharing when the session freezes. It may unfreeze eventually, but I can also usually just quit out and re-connect and it will be unfrozen. The same thing happens when I'm connected via SSH, it will freeze and I won't be able to type in any more commands.
I need help troubleshooting (or if anyone knows what could be causing this, that'd be cool too).
I've tried connecting from both a Mac Pro on the wired network and a MacBook Pro on the wireless network. The freezing seems to only happen on certain Mac Minis as well.
I've tried switching network cables from a Mac Mini that doesn't suffer from this problem with one that does and nothing changed.
I also thought it might be a bandwidth issue at first, despite being a gigabit switch connected via cat6 to the rest of our gigabit network, but even when no significant bandwidth is being used, the freezing still occurs.
One more thing I want to test is the connection between the switch all these Mac Minis is plugged into and one of the other switches that all our other network traffic goes through. I didn't set it up myself so I fear that it might be an old, damaged cable or something. Failing that, I have no idea what the problem could be, which is why I'm posting here.
So, does anyone have any idea what the problem could be? Or any other ideas for troubleshooting the problem? Thanks.
(They're all running 10.6.8, and range from Mid-2007 to 2009 models).

It would be in the system log. However, the next step would be to safe-boot in order to eliminate third-party system modifications. That goes for both client and server. If you can reproduce the problem in safe mode, then you probably have a network issue. Take everything offline except one client and one server, and test.

Automatic login to virtual console doesn't create a 'session'

I'm running an instance of Arch inside an LXC container. It's basically being used as a lightweight virtualisation approach, and so I have a wrapper program that spins up the instance, configures it, and drops the user in. As such, the user should be automatically logged in on boot.
I'm following the method listed at https://wiki.archlinux.org/index.php/Au … al_console and it works fine; however, it doesn't register a 'session' (as I understand it): loginctl shows nothing. This means I can't shut down the machine as a regular user.
I was previously starting a getty on /dev/console instead of at /dev/tty1, and this was correctly registering a session, but would hang as soon as you ran 'vi'. If vi was killed, the terminal size would shrink to a fraction of its existing size until fixed with 'reset'.
Solving either of these problems would be great, if anybody has any ideas! I have polkit (1.09) installed.

As I say, loginctl gives no results:
SESSION UID USER SEAT
0 sessions listed.
systemctl list-units | grep polkit
also returns nothing, which I wasn't expecting. Some more detail...
$ systemctl status polkit
polkit.service - Authorization Manager
Loaded: loaded (/usr/lib/systemd/system/polkit.service; static)
Active: inactive (dead)
Docs: man:polkit(8)
I can manually start polkit, and then get:
# systemctl status polkit
polkit.service - Authorization Manager
Loaded: loaded (/usr/lib/systemd/system/polkit.service; static)
Active: active (running) since Mon 2013-04-15 09:15:20 UTC; 6s ago
Docs: man:polkit(8)
Main PID: 98 (polkitd)
CGroup: name=systemd:/system/polkit.service
└─98 /usr/lib/polkit-1/polkitd --no-debug
Though I also get these errors in the journalctl log:
Apr 15 09:15:20 archibald polkitd[98]: Loading rules from directory /etc/polkit-1/rules.d
Apr 15 09:15:20 archibald polkitd[98]: Error opening rules directory: Error opening directory '/etc/polkit-1/rules.d': Permission denied (g-file-error-quark, 2)
Apr 15 09:15:20 archibald polkitd[98]: Loading rules from directory /usr/share/polkit-1/rules.d
Apr 15 09:15:20 archibald polkitd[98]: Error opening rules directory: Error opening directory '/usr/share/polkit-1/rules.d': Permission denied (g-file-error-quark, 2)
Last edited by osymandias (2013-04-15 09:18:11)

SSH sessions over Putty die unexpectedly & commandline entry is slow

I have a Sun Ultra-60 running Solaris 9 at patch level 118558-05. Users of this server report that their ssh sessions over Putty to this server die unexpectedly anywhere from one to two times per week. The users are usually in a vim session at the time editing php files for the website hosted on the system. Another problem reported is that the user's command line input slows dramatically and they must wait for the server to complete the line they were typing prior to proceeding.
I cannot find the source of this problem. To date, the following is what I have tried in my troubleshooting efforts.
1) ptdiag - reports no hardware failures
2) /var/adm/messages - reports no issues relating to the problem mentioned above.
3) swap -l - the server has plenty of swap and shows no need for additional swap space Here is the output from swap -l
swapfile dev swaplo blocks free
/dev/vx/dsk/swapvol 213,6 16 8389632 8358176
I should also mention that /tmp is not full and is currently only at 2% of it's capacity.
4) ndd shows that the link speed, duplex, etc. are correct at 100Mbps full-duplex.
5) System uptime is at 337 days and the uptime command currently shows the following load: load average: 0.12, 0.11, 0.09
6) vxdisk list shows the two internal mirrored disks as being online and no errors. iostat -En shows no soft or hard errors on the two disks
7) This server only has two users and the main applications in use are mysql and apache.
8) I have upgraded to the latest version of the vim editor and the problem still persists. I have also had the users upgrade to the latest version of Putty and to turn on the logging feature of Putty which hasn't revealed any information as to why the sessions are unexpectedly terminating.
9) I have checked the /etc/default/login setting for the "TIMEOUT" variable which is commented out. I also checked the users profiles and verified that there are no timeout variables defined.
10) Here is my netstat -i output:
Name Mtu Net/Dest Address Ipkts Ierrs Opkts Oerrs Collis Queue
lo0 8232 loopback localhost 52375982 0 52375982 0 0 0
qfe0 1500 servername servername 2319804623 29884 1493848177 0 0 0
qfe1 1500 servernamea servernamea 231550668 0 3694 0 0 0
qfe2 1500 servernameb servernameb 40944152 1 65630146 0 0 0
Some of these numbers look high, but I don't see any collisions.
Any help would be appreciated. If additional commands need to be run, please advise and I will gladly post.
Thanks much for any assistance.

Hi Darren,
The user's vim session dies when the users are actively typing.
As for there being a firewall or NAT device between the workstation and the server, yes, there is. The users are in one building and the server is housed in a datacenter in a separate building. The users do not have this issue with out other Solaris 8 and Solaris 10 servers...only this one particular server. A traceroute to the server takes only 5 hops and returns quickly.
As for the logs, I just checked /var/adm/messages and it is reporting the following types of messages over and over.:
[ID 317013 daemon.notice] bpcd[11746] from some IP
I think these messages are generated from Veritas Netbackup which is administered by a separate team than what I am on, but I can have them investigate.

LMS 4.2 is not releasing SSH connections of the devices

Hello!
We have LMS opens SSH sessions to Nexus 5000 devices as part of some jobs.
These SSH connections are not being released by LMS as soon as jobs are completed, which leads the N5K devices to hang without any way of managing them remotely.
We see these connections as idle on the nexus devices (which also should kill these sessions, but this is not the issue).
We have found a known bug:
CSCty90928
LMS Pari jobs are not releasing SSH,telnet connections of the devices
Symptom:
Telnet/SSH connections are not released by LMS
Conditions:
Pari collections jobs are not releasing the connections after the Job completed
Workaround:
None
This bug is categorized as "2 – severe" and is in "Open (Postponed)" status.
I have a few questions, if anyone can assist:
1.) What is the ETA to fix this bug?
2.) Are there any other known bugs matching what we see (documented public bugs, with bug ID's, internal bugs or even undocumented bugs).
3.) Is there any released or unreleased (even yet to be tested by TAC) patch we can use that should fix the issue?
4.) Is there any way to adjust LMS idle timeout of SSH/Telnet sessions (I couldn't find it in the GUI, but maybe there is a way to change this parameter using a perl script or modifying one of LMS properties files)?
Thanking in advance, Udi Dahan.

Hello Ehud
From N5k side we have submitted bug CSCty00044
Currently there is no fix for it and our debelopment team is catively working on it and investigating the issue in the lab.
To get ETA for the release I would suggest you reach your account team and check with them how fast fixed release will be available.
HTH,
Alex

Can't logout ssh-session

Sometimes when I do "exit" when sshed to another PC in LAN, ssh session will not exit. The cursor just goes next line and nothing happens. I have to press Ctrl+C. This doesn't happen always - from time to time and there doesn't seem to be any definite reason for this. Help me to fix it please.

skunktrader wrote:
man ssh
contains this
The supported escapes (assuming the default `~' ) are:
~. Disconnect.
What if I entered "~" twice and ssh doesn't accept this combination any more?

Running `locale-gen` closes ssh session

I am trying to regenerate locales on a remote server running Archlinux. However, running `locale-gen` disconnects me, and I do not believe the job completes. I had the same problem on both Putty and the terminal (ssh from local box).
The locales that are uncommented are `en_US.UTF-8` and `en_US`. However, this problem only occurs if en_US.UTF-8 is uncommented. There is no problem when I am only generating the `en_US` locale.
This happens whether or not I have root privileges.
Does anyone have an idea as to why this happens? Thanks for any help!

The remote system could be using the locale you are trying to regenerate. I don't know exactly why it kicks you, my best guess is that you're session is running that locale and regenerating kind of restarts the whole session thing. MY BEST GUESS.
You could setup a bash script, with some delay.
sleep 40
locale-gen >> check.txt
and login after 1 min and check the check.txt file for the locale-gen output command to see if everything went fine.
Last edited by Ekimino (2010-05-21 04:30:39)

Printing to a Deskjet 1000 from a terminal services session (2003) on my XP laptop.

The printer is a CH340-64001 and it works fine on an XP laptop. When an attempt is made to use it during a terminal services session it fails because Server 2003 does not have the drivers for the printer.
When I try to run the installation from the CD I get a message that the operating system is not compatible.
Is there any way to install the XP drivers to Server 2003 or does the printer need to be replaced with another model?

There isn't a way, that I know of, to get the printer's XP drivers to work with Server 2008. However, there is an alternate driver that you can try using. It's the Deskjet 990c driver. It's a generic inkjet driver that works with most inkjet printers. It should work with the printer you're using. That's really the only thing I can think of that might work.
-------------How do I give Kudos? | How do I mark a post as Solved? --------------------------------------------------------

ACE 4710. Unable to clear ssh sessions

Hi.
Once in the CLI of an ACE 4710, using the command "clear ssh session id" I am unable to clear/kill any of the remote ssh sessions established.
According to the administration guide, the "clear ssh .." command must clear the sessions, but it does not, or maybe I am missing something?
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA1_7_/configuration/administration/guide/access.html#wp1050335
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;}
ACE/CONTEXTO_A# show ssh session-info
Session ID     Remote Host         Active Time
13728          222.98.54.158:50556   67:43:38
13732          200.44.158.70:46172   67:43:36
13735          200.44.158.70:46174   67:43:36
13737          200.44.158.70:46177   67:43:36
ACE/CONTEXTO_A#
ACE/CONTEXTO_A# clear ssh 13728
ACE/CONTEXTO_A# clear ssh 13732
ACE/CONTEXTO_A# clear ssh 13735
ACE/CONTEXTO_A# clear ssh 13737
ACE/CONTEXTO_A# show ssh session-info
Session ID     Remote Host         Active Time
13728          222.98.54.158:50556   67:43:54
13732          200.44.158.70:46172   67:43:52
13735          200.44.158.70:46174   67:43:52
13737          200.44.158.70:46177   67:43:52

Hello,
Seems to be working for me in my tests. Works in the Admin context and a user context, and when clearing connections from console connection or one of the SSH sessions.
ace-appliance-15/CTX1# sho ssh sess
Session ID     Remote Host         Active Time
24705          161.44.77.245:1586     0: 1:42
25100          161.44.77.245:1589     0: 0:27
25116          161.44.77.245:1590     0: 0:16
ace-appliance-15/CTX1# clear ssh 25116
ace-appliance-15/CTX1#
ace-appliance-15/CTX1# sho ssh sess
Session ID     Remote Host         Active Time
24705          161.44.77.245:1586     0: 2: 5
25100          161.44.77.245:1589     0: 0:50
What version of software are you running on your 4710? I am running the latest A3(2.4). Can you try this version?
Thanks,
Sean

When launch w/ Seamless windows, doesn't effectively end session

To replicate, we are doing the following:
1) Have users launch MS Visio by clicking a link on our site as follows:
https://servername.com/sgd/launcher.jsp?o=Write&e=false
2) And Visio is running as a "Seamless Window"
The result: when a user closes Visio (clicks the "X" or file>exit application), the windows app server effectively logs out of that terminal services session, but SGD's object manager still shows that the session has been "suspended." Additionally, the taskbar tcc.exe icon is still present. Users then have trouble logging in again, get errors, etc.
But when we have visio launch in an independent window, and the user closes the app, everything works fine (the taskbar icon goes away and object manager shows that the session has actually closed).
This means we cannot use seamless windows in this way. Can Sun replicate this, and is there a workaround or a fix planned?
Thank you

Had a very similar issue with Linux KDE applications. Appears, we have corrected the issues � the issue was � the parent process forked a process, elevating the child to it's own parent disassociating the forked process, (child) from the parent. When the application was closed with �File close� all was fine, when the applications was closed with the �X� we saw the issue. To correct the issue � we changed the options in the ARRAY relative to �what to due� when the application exits and leveraged a no fork option available within the application. I realize this may not or will not help. But, we started looking at unconventional way's to launch applications and dug very deeply into the options as to how applications can be executed/launched, the options were relative to the application not SGD.

ACE 4710 fills up with unexplained 127.0.0.1 SSH sessions

What could be the cause of such SSH management sessions:
ACE/Admin# sh ssh session-info
Session ID Remote Host Active Time
21763 127.0.0.1 :11034 -347:-22: 9
Such 127.0.0.1 originated SSH sessions are constantly filling the maximum amount of SSH management sessions (16), and block out actual remote management!

Hello, Timo Miiluvaara,
What is the software version ?
If it is A3.(2.3) or earier release, and you are using SSL feature also managing the appliance via DM,
you might hit a bug below.
CSCtc13377
http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtc13377
Regards,
Kim

Capture ssh sessions in the background

Hi together,
i would like to capture all ssh-session (hidden in the background) on a solaris 10 server.
I hade some tries with /usr/bin/script -a <somewhere> in the .bash_profile but this is not what i need. e.g. "exit" exits the script and not the session.
do you have some clever idea how to solve the issue?
i can�t find any helpful tool.
chears, claudius

No, i have a System where some users get the possibility to access the server by ssh. To have a control, what the user did - and do have a verification when he did something wrong - i would like to have a possibility to see what he did within the session (e.g. editing a configfile) I had some tries with "script" and other little OS-tools but, i was�nt able to find a perfect sollution.
Perfect meens - it�works and it is not vissible for the user.

How to reconnect to a disconnected remote ssh session on solaris 10

hi all
How to reconnect to a disconnected remote ssh session on solaris 10
is there a way to accomplish this

No, there's not.
A common solution for this is to get a copy of 'screen'. After connecting via ssh (or any other protocol), you can start a "screen" session. If you get disconnected (or disconnect intentionally), you can later come back on the machine and bring your existing "screen" session back.
Darren

Terminal Server Session Management: why do we need a rdp session to take control of a terminal session?

Hi all,
As title, I have this question: why do we need a rdp session to take remote control of a terminal server session?
I copied tsadmin and related file to a windows 8.1 pc and I'm able to see for every terminal server the list of users logged in, but the option "take control" is greyed out... why? is not possible to avoid this block?
Thanks in advance
Davide

Hello, Davide_ita.
Also tried to use RDSM to "Remote Control" user's sessions, but in this thread
Remote Control
with Remote Desktop Services Manager - error Access is denied (Windows Server 2012 R2)
I get the recommendation to use RDP or Remote Assistance.
The quote of
TP []:
Hi,
You cannot remote control a session on a 2012 R2 RDSH server using Remote Desktop Services Manager. You need to use the RDP 8.1 mstsc.exe or the RDS gui in Server Manager on 2012 R2. The command you would use with the RDP 8.1 client would be
this:
mstsc /shadow:<sessionid> /control
-TP

LMS 3.2 doesn't terminated SSH sessions on ACE

Similar Messages

Maybe you are looking for