topic Why is ExtremeXOS ssh exit status 255 when no error occurs? in ExtremeSwitching (EXOS/Switch Engine)

Why is ExtremeXOS ssh exit status 255 when no error occurs?

Heitor_Moraes — Sat, 14 Nov 2015 22:44:00 GMT

Hi,

I'm trying to create some scripts to execute commands on Summit boxes using SSH but, even though the commands execute correctly, I always get 255 (-1) as the exit code. From OpenSSH man page I saw that 255 is expected to indicate errors like a connection failure, which clearly is not the case. Isn't EXOS supposed to return 0 when everything works correctly?

Example:
#> ssh user1@summitBox "show version | include Extreme"
Keyboard-interactive authentication
Enter password for user1:
Image : ExtremeXOS version 16.1.2.14 by release-manager

#> echo $?
255
#>
Am I doing something wrong?

From ssh man page:

ssh exits with the exit status of the remote command or with 255 if an error occurred.

The problem with this behavior is that it breaks any automation script that expects a value between 0 and 254 as the return code when no error occurs with the ssh client itself.

Thanks for any tips!
H.

RE: Why is ExtremeXOS ssh exit status 255 when no error occurs?

Frank — Tue, 17 Nov 2015 17:24:00 GMT

I see the same with 15.4.3 p1-10 and 15.5.1.6
The command looks fine - I was wondering if it didn't like closing without "exit", so I did:
ssh -v user@switch "exit"but that, too, gave me a "-1", i.e. "255"

Heck, even on an interactive ssh session, once you type "exit", the return code is -1/255

Do we need to open a case?

RE: Why is ExtremeXOS ssh exit status 255 when no error occurs?

Drew_C — Tue, 17 Nov 2015 21:58:00 GMT

Interesting. Definitely sounds like it is worthy of opening a case to track.
I'll let you two flip a coin 🙂

-Drew

RE: Why is ExtremeXOS ssh exit status 255 when no error occurs?

Frank — Tue, 17 Nov 2015 21:58:00 GMT

OK, I'll open one 🙂

RE: Why is ExtremeXOS ssh exit status 255 when no error occurs?

Heitor_Moraes — Tue, 17 Nov 2015 21:58:00 GMT

I did it already! I was just waiting for the first response from support before posting here.

RE: Why is ExtremeXOS ssh exit status 255 when no error occurs?

Leandro_Brito — Tue, 17 Nov 2015 21:58:00 GMT

I got a different result here:

lbrito@LW540 ~ $ ssh admin@10.43.2.42 "show version"Keyboard-interactive authentication
Enter password for admin:
Keyboard-interactive authentication
Enter password for admin:
Switch : 800472-00-08 1246G-01386 Rev 8.0 BootROM: 2.0.1.7 IMG: 15.7.1.4
PSU-1 : Internal Power Supply
PSU-2 :

Image : ExtremeXOS version 15.7.1.4 v1571b4-patch1-2 by release-manager
on Fri May 1 15:16:42 EDT 2015
BootROM : 2.0.1.7
Diagnostics : 6.3

lbrito@LW540 ~ $

I'll try with 15.4.3 p1-10, 15.5.1.6 and 16.1.2.14 and will share the results this afternoon with you.

RE: Why is ExtremeXOS ssh exit status 255 when no error occurs?

SchmuFoo — Tue, 17 Nov 2015 21:58:00 GMT

Thx Leandro, but I miss the "echo $?" in your bash output 😉

RE: Why is ExtremeXOS ssh exit status 255 when no error occurs?

Leandro_Brito — Mon, 21 Dec 2015 19:03:00 GMT

On further investigation by the developer , It seems like client sends disconnect message when it is done with remote command execution, ssh-toolkit server is not able to decode this message properly, and kills the session with SIGTERM.

That's why client doesn't receive any exit status and it shows status as 255 or -1(error case).

A CR xos0063330 was created to solve that.

I'll keep you guys updated.

RE: Why is ExtremeXOS ssh exit status 255 when no error occurs?

Henrique — Sat, 30 Jul 2016 00:46:00 GMT

Hi,

Regarding CR xos0063330, the development team has further investigated the problem and have found that this issue appears only in our older SSH Server, which is a SSH-toolkit implementation. From EXOS 16.2 and above releases, we are using OpenSSH for SSH server and this issue is not observed.

SSH-Toolkit Server supports only the below listed SSH-request types. Here "exec" is used for remote command execution, which works fine. But after the command is executed the client will request for a "exit-status" from the server. In SSH-Toolkit server, this message type is not supported. So, for "exit-status" request, Server replies with an error message. This is because it cannot process the request.

The valid channel requests in SSH-Toolkit and their actions are:

"pty-req" -- setup pty
"shell" -- start user shell
"exec" -- execute a command
"subsystem" -- handle subsystem calls (not implemented yet)
"env" -- determine if ENV variable is OK to be set, then set
"signal" -- if we have signals, send this signal to the process
"exit-status" -- send exit status to client, close connection (not supported - ignored)
"window-change" -- change terminal window size values
"xon-xoff" -- handle flow control (not supported - ignored)
"x11-req" -- channel request failure (not supported - ignored)

In EXOS 16.2 and 21.1 releases this issue (CR xos0063330) would not exist as we have upgraded the SSH server to OPENSSH instead of SSH-Toolkit. However for EXOS releases lower than 16.2, this limitation would continue to exist.