SUMMARY: Publickey authentication with ssh

Chris.Bryant_at_DTAG.Com
Date: 11/25/03

  • Next message: Oisin McGuinness: "SUMMARY: Sysconfig rt parameter aio-max-num: Where has it gone from Tru64 4.0x to 5.x??"
    Date: Tue, 25 Nov 2003 14:04:19 -0600
    To: tru64-unix-managers@ornl.gov
    
    

    Thanks to Jenny Butler, Paul Moore, Joe Senulis, and Alan Anderson for their
    responses. Basiclly to get public key authentication to work I had to copy
    my public key from my source node to my target node and add the entry into
    the identification file of my source node and an entry in the target nodes
    authenticaion file the entry was Key user-host.pub.

    Thanks again,

    Chris

    -----Original Message-----
    From: Chris Bryant
    Sent: Monday, November 24, 2003 2:01 PM
    To: tru64-unix-managers@ornl.gov
    Subject: Publickey authentication with ssh

    Admins,
            
            I am running tru64 5.1B and I am trying to setup publickey
    authentication with secure shell. In my /etc/ssh2/ssh2_config file I have
    AllowedAuthenication publickey,password and in /etc/ssh2/sshd_config file I
    have AllowedAuthenication publickey,password. Below is my output from ssh
    -v hostname. I get publickey disabled. Any Idea as to what could be
    causing this?

    TIA,
    Chris Bryant
    Unix Administrator
    Dollar Thrifty Automotive Group

    Script started on Mon Nov 24 13:55:21 2003
    $ ssh -v country
    debug: SshAppCommon/sshappcommon.c:185: Allocating global SshRegex context.
    debug: SshConfig/sshconfig.c:2786: Version not found on first line, assuming
    configuration to be old style.
    debug: SshConfig/sshconfig.c:640: Setting variable 'VerboseMode' to 'FALSE'.
    debug: SshConfig/sshconfig.c:2728: Unable to open
    /usr/users/cbryant/.ssh2/ssh2_config
    debug: Connecting to country, port 22... (SOCKS not used)
    debug: Ssh2/ssh2.c:2332: Entering event loop.
    debug: Ssh2Client/sshclient.c:1452: Creating transport protocol.
    debug: SshAuthMethodClient/sshauthmethodc.c:95: Added "publickey" to usable
    methods.
    debug: SshAuthMethodClient/sshauthmethodc.c:95: Added "password" to usable
    methods.
    debug: Ssh2Client/sshclient.c:1493: Creating userauth protocol.
    debug: client supports 2 auth methods: 'publickey,password'
    debug: SshUnixTcp/sshunixtcp.c:1227: using local hostname town
    debug: Ssh2Common/sshcommon.c:541: local ip = 158.146.77.17, local port =
    4558
    debug: Ssh2Common/sshcommon.c:543: remote ip = 158.146.77.18, remote port =
    22
    debug: SshConnection/sshconn.c:1957: Wrapping...
    debug: SshReadLine/sshreadline.c:3388: Initializing ReadLine...
    debug: Remote version: SSH-2.0-3.2.0 SSH Secure Shell Tru64 UNIX
    debug: Major: 3 Minor: 2 Revision: 0
    debug: Ssh2Transport/trcommon.c:1913: lang s to c: `', lang c to s: `'
    debug: Ssh2Transport/trcommon.c:1978: c_to_s: cipher aes128-cbc, mac
    hmac-sha1, compression none
    debug: Ssh2Transport/trcommon.c:1981: s_to_c: cipher aes128-cbc, mac
    hmac-sha1, compression none
    debug: Remote host key found from database.
    debug: Ssh2Common/sshcommon.c:342: Received SSH_CROSS_STARTUP packet from
    connection protocol.
    debug: Ssh2Common/sshcommon.c:392: Received SSH_CROSS_ALGORITHMS packet from
    connection protocol.
    debug: server offers auth methods 'publickey,password'.
    debug: Ssh2AuthPubKeyClient/authc-pubkey.c:1602: adding keyfile
    "/usr/users/cbryant/.ssh2/id_dsa_1024_a" to candidates
    debug: server offers auth methods 'publickey,password'.
    debug: Ssh2AuthClient/sshauthc.c:330: Method 'publickey' disabled.
    debug: server offers auth methods 'publickey,password'.
    debug: Ssh2AuthPasswdClient/authc-passwd.c:117: Starting password query...
    cbryant's password:
    debug: Ssh2Common/sshcommon.c:310: Received SSH_CROSS_AUTHENTICATED packet
    from connection protocol.
    debug: SshReadLine/sshreadline.c:3454: Uninitializing ReadLine...
    Authentication successful.
    debug: Ssh2Common/sshcommon.c:852: num_channels now 1
    warning: Cannot connect to DISPLAY; X11 forwarding disabled.
    Last successful login for cbryant: Mon Nov 24 12:41:37 CST 2003 from town
    Last unsuccessful login for cbryant: NEVER

    Your password will expire on Sat Nov 29 08:15:49 CST 2003

    Compaq Tru64 UNIX V5.1B (Rev. 2650); Tue Aug 12 05:56:24 CDT 2003 No mail.
    country> exit
    debug: Ssh2ChannelSession/sshchsession.c:1935: received exit status : 0
    debug: Ssh2Common/sshcommon.c:819: num_channels now 0
    debug: Got session close with exit_status=0
    debug: destroying client struct...
    debug: Ssh2Client/sshclient.c:1528: Destroying client.
    debug: SshConfig/sshconfig.c:2330: Freeing pki. (host_pki != NULL, user_pki
    = NULL)
    debug: SshConnection/sshconn.c:2009: Destroying SshConn object. Connection
    to country closed.
    debug: Ssh2Client/sshclient.c:1596: Destroying client completed.
    debug: SshAuthMethodClient/sshauthmethodc.c:100: Destroying authentication
    method array.
    debug: SshAppCommon/sshappcommon.c:198: Freeing global SshRegex context.
    debug: SshConfig/sshconfig.c:2330: Freeing pki. (host_pki = NULL, user_pki =
    NULL) $ exit

    script done on Mon Nov 24 13:55:34 2003


  • Next message: Oisin McGuinness: "SUMMARY: Sysconfig rt parameter aio-max-num: Where has it gone from Tru64 4.0x to 5.x??"

    Relevant Pages

    • Re: two SSH compatibility scenarios: can it work?
      ... I want to be able to connect either from home to my lab or the other way ... Here part of the debug output when I try from the lab to my machine at home ... server offers auth methods 'publickey,password,keyboard-interactive'. ... debug: Ssh2AuthClient/sshauthc.c:315: Method 'publickey' disabled. ...
      (comp.security.ssh)
    • NTLM authentifizierung und fremde Browser
      ... [DEBUG] ... authentication realm: username:rootadmin password:afis- ... HttpMethodBase - -Adding Host request header ... HttpMethodBase - -Should close connection in ...
      (microsoft.public.de.inetserver.iis)
    • SSH AIX 4.3.3 Problem
      ... I have this problem with SSH 3.2.0, it seems that I can not login to ... Note that the host specific files ...
      (SSH)
    • Re: Problems with scp and cron
      ... > debug trace also shows you have an ssh.com server). ... debug1: Reading configuration data /etc/ssh/ssh_config ... Rhosts Authentication disabled, ... server offers auth methods 'publickey,password'. ...
      (comp.security.ssh)
    • JavaMail und SASL
      ... ich versuche ein Servlet zu schreiben, dass mir u.a. eine Mail per JavaMail verschicken soll. ... DEBUG: setDebug: JavaMail version 1.3.1 ... DEBUG DIGEST-MD5: Begin authentication ... ... DEBUG SMTP: trying to connect to host "der.smtp.server", ...
      (de.comp.lang.java)