IBM Support

SSH_ASKPASS Errors Being Generated on Secure Shell (SSH), Secure File Transfer
Protocol (SFTP), and Secure Copy (SCP) Connections Initiated on the IBM i

Troubleshooting


Problem

SSH_ASKPASS errors being generated on SSH, SFTP, and SCP connections initiated on the System i.

Resolving The Problem

Users trying to initiate SSH, SFTP, and SCP connections on the System i receive the ssh_askpass error listed below:

ssh_askpass: exec(/QOpenSys/QIBM/ProdData/SC1/OpenSSH/openssh_version/libexec/ssh-askpass): A file or directory in the path name does not exist.

If the DISPLAY environment variable within the user's QSHELL or QP2TERM session is set to some value, SSH is designed to check for the ssh_askpass program on any ssh, sftp, or scp call from a pseudoterminal device. Becausee QSHELL & QP2TERM are not true pseudoterminal devices and the DISPLAY environment variable was set for the user's session, the ssh_askpass error was generated. Displaying the environment variables within a QSHELL or QP2TERM session can be accomplished by typing env and pressing Enter. Listed below is a portion of the environment variables from a user's session showing that the DISPLAY environment variable is set LAWPRD:

_=/QOpenSys/usr/bin/env
LANG=en_US
PASE_LANG=en_US
QIBM_PASE_DESCRIPTOR_STDIO=T
PATH=/QOpenSys/usr/bin:/usr/ccs/bin:/QOpenSys/usr/bin/X11:/usr/sbin:.:/usr/bin
                           
ROWS=14
QIBM_DESCRIPTOR_STDIN=CRLN=Y
COLUMNS=77
PASE_PATH=/QOpenSys/usr/bin:/usr/ccs/bin:/QOpenSys/usr/bin/X11:/usr/sbin:.:/usr/bin
   
LAW_JAVA_HOME=/QIBM/ProdData/Java400/jdk14
LC__FASTMSG=true
CLASSPATH=/QIBM/ProdData/OS400/jt400/lib/jt400Native.jar:/QIBM/ProdData/OS400/jt400/lib/jt400Native11x.jar:/QIBM/ProdData/OS400/jt400/MRI2924/jt400Mri.jar
:.

LOGNAME=LAWSFTP
LOCPATH=/usr/lib/nls/loc
PASE_LC__FASTMSG=true
QIBM_IFS_OPEN_MAX=66000
QIBM_USE_DESCRIPTOR_STDIO=I
QIBM_PASE_CCSID=819
PASE_SHELL=/QOpenSys/usr/bin/sh
DISPLAY=LAWPRD:0

Remove the DISPLAY environment variable from a user's QSHELL or QP2TERM session by typing unset
DISPLAY and pressing Enter. Without the DISPLAY environment set, calling the SSH, SFTP, or SCP clients
should not result in the generation of the ssk_askpass error.

Note: QSHELL and QP2TERM sessions can inherit a portion of their environment variables from the
system or job level. Make sure that the DISPLAY environment variable has not been set in those
locations.

[{"Product":{"code":"SWG60","label":"IBM i"},"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Component":"Communications-TCP","Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.2;7.1.0;7.1;6.1.1;6.1.0;6.1;5.4.5;5.4.0","Edition":""},{"Product":{"code":"SSC5L9","label":"IBM i 7.2"},"Business Unit":{"code":"BU009","label":"Systems - Cognitive"},"Component":" ","Platform":[{"code":"","label":null}],"Version":"","Edition":""},{"Product":{"code":"SSC52E","label":"IBM i 7.1"},"Business Unit":{"code":"BU009","label":"Systems - Cognitive"},"Component":" ","Platform":[{"code":"","label":null}],"Version":"","Edition":""},{"Product":{"code":"SSC3X7","label":"IBM i 6.1"},"Business Unit":{"code":"BU009","label":"Systems - Cognitive"},"Component":" ","Platform":[{"code":"","label":null}],"Version":"","Edition":""}]

Historical Number

527853521

Document Information

Modified date:
11 November 2019

UID

nas8N1012871