QuickFix: SSH HMAC problems on ODA 19.22

Sven Illert -

Oracle lately introduced the Oracle Database Appliance Software Release 19.22 with the usual fixes and updates to all of it’s components. It also provides an eagerly awaited fix to the included ASR manager, so now you can use that again. But where’s light, there also may be some shadow. If you are using a newer version of PuTTY on Windows, a recent version of OpenSSH on macOS, you might get the following errors after patching the system to 19.22.

macOS

% ssh -l oracle odax7ha1
Corrupted MAC on input.
ssh_dispatch_run_fatal: Connection to 10.0.0.1 port 22: message authentication code incorrect

PuTTY

PuTTY error: Incorrect MAC received on packet

PuTTY error: Incorrect MAC received on packet

Changing encryption and key exchange algorithms may help, but to be successful that really depends on your version and type of client. For the macOS version I was not able to find any workaround. But there’s an easy way fix to fix that in general. Oracle has provided an hotfix for it’s Linux distribiution in release 8.9 for the installed openssh packages which you can safely download an install on your ODAs.

% wget https://public-yum.oracle.com/repo/OracleLinux/OL8/baseos/latest/x86_64/getPackage/openssh-server-8.0p1-19.0.1.el8_9.2.x86_64.rpm
% wget https://public-yum.oracle.com/repo/OracleLinux/OL8/baseos/latest/x86_64/getPackage/openssh-clients-8.0p1-19.0.1.el8_9.2.x86_64.rpm
% wget https://public-yum.oracle.com/repo/OracleLinux/OL8/baseos/latest/x86_64/getPackage/openssh-8.0p1-19.0.1.el8_9.2.x86_64.rpm
% rpm -Uvh openssh*.rpm

With that in place you may be able to connect via any compatible SSH client again.