Re: SSH mysteriously stops working

On Thu, 19 May 2011 11:31:03 +0200, Paul Sture wrote:

In article <93k0lsFc1cU4@xxxxxxxxxxxxxxxxxx>,
Bob Eager <rde42@xxxxxxxxxxx> wrote:

On Thu, 19 May 2011 05:53:31 +0000, Phillip Helbig---undress to reply
wrote:

In article <93jpfhFc1cU1@xxxxxxxxxxxxxxxxxx>, Bob Eager
<rde42@xxxxxxxxxxx> writes:

What OS is running on the other system?

Linux.

Have you upgraded anything on Linux recently? I ask because I had
exactly this problem on my BSD systems, and it turned out that the
default key type had changed from DSA to RSA.

That fits with the way that SSH works. If the first connection method
it tries (keys in this case) fails, it tries the next method (password
in this case).

Yes. In my case, all the hosts held public DSA keys, and all the clients
were trying DSA first.

When I upgraded a client, it started trying RSA first, so complained
about the fingerprint and dropped back to passwords.

Easy to fix; I just issued RSA public keys.



--
Use the BIG mirror service in the UK:
http://www.mirrorservice.org

*lightning protection* - a w_tom conductor
.

Relevant Pages

  • Re: SSH keys: RSA vs DSA
    ... >> Ssh protocol version 2 can use RSA as well as DSA keys. ... > DSA is an old and fairly weak encryption, ...
    (comp.os.linux.security)
  • Re: ssh / scp / batch mode
    ... I thought most places used DSA, ... by (RSA1, RSA, DSA) ... Here, ssh checks for RSA keys, DSA ... and offers the DSA public key to the server. ...
    (comp.os.linux.misc)
  • Re: SSH oddness with 8.0-STABLE
    ... FreeBSD's version of OpenSSH preferred DSA ... over RSA for host and user authentication keys. ... host keys even for previously known hosts. ...
    (freebsd-stable)
  • Re: SSH oddness with 8.0-STABLE
    ... FreeBSD's version of OpenSSH preferred DSA ... over RSA for host and user authentication keys. ... host keys even for previously known hosts. ...
    (freebsd-stable)
  • Re: Multiple keys in .ssh/authorized_keys file?
    ... It's not necessary but may be useful depending on your configuration. ... provided you have your ssh2 private keys on the nodes you expect to ... DSA is mandatory in the spec while RSA is recommended. ...
    (comp.security.ssh)