Return
-
Title
Error: "no matching mac found:" when Testing a Linux / Unix system -
Description
"Check Password", "Test System" or "Reset Password" fails with a "no matching mac found:" error:"[MM/DD/YYYY HH:MM:SS] no matching mac found: client hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96 server hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512"or
"[MM/DD/YYYY HH:MM:SS] Unable to negotiate with 192.168.0.1 port 22: no matching MAC found. Their offer: hmac-md5"
When using SSH what MAC (Message Authentication Codes) does TPAM support? -
Cause
This occurs when the target system uses MAC (Message Authentication Codes) that TPAM does not support -
Resolution
Configure SSHD on the target to add support for one of the MACs that TPAM supports. Consult vendor documentation for more information. Supported MACs:
2.5.915 and belowPSM:hmac-md5hmac-sha1hmac-sha1-96
PPM:hmac-md5hmac-md5-96hmac-ripemd160hmac-ripemd160@openssh.comhmac-sha1hmac-sha1-96umac-64@openssh.com
2.5.916 and abovePPM:hmac-sha1hmac-sha1-96-etm@openssh.comhmac-sha2-256hmac-sha2-256-etm@openssh.comhmac-sha2-512hmac-sha2-512-etm@openssh.comumac-128-etm@openssh.comumac-128@openssh.comumac-64-etm@openssh.comumac-64@openssh.com
poly1305 -
Change Request
BFER 7737, BFER 7914