Help with OpenSSH -> SSH2 Server

From: Andrew n marshall (invysibleman_at_yahoo.com)
Date: 05/14/03

  • Next message: Shapiro, David: "RE: sftp on OS390 mainframe" 
    Date: Wed, 14 May 2003 11:02:51 -0700
To: secureshell@securityfocus.com

    Using an OpenSSH client, I am trying to log into a machine using SSH
    Secure Shell 2.4.0 server without success. I've tried the following
    client platform OpenSSH combinations:
       Mac OS X using OpenSSH_3.5p1 (from fink)
       Linux box using OpenSSH_3.4p1 Debian 1:3.4p1-1
       SGI using OpenSSH_3.5p1
    To prepare the key this is what I do:
       client:~/ > ssh-keygen -t dsa
       Generating public/private dsa key pair.
       Enter file in which to save the key (/Users/amarshal/.ssh/id_dsa):
       Enter passphrase (empty for no passphrase):
       Enter same passphrase again:
       Your identification has been saved in /Users/amarshal/.ssh/id_dsa.
       Your public key has been saved in /Users/amarshal/.ssh/id_dsa.pub.
       The key fingerprint is:
       6f:32:e8:3e:3f:e9:70:99:00:79:44:c9:5d:3d:5a:a1
    amarshal@Collimodel.local.
       client:~/ > ssh-keygen -e -f .ssh/id_dsa.pub > .ssh/client_dsa.pub.txt

    I then copy client_dsa.pub.txt to the server as ~/.ssh2/client.pub, and
    add the line
       Key client.pub
    to the file ~/.ssh2/authorization

    Despite doing this, I get the following from all three systems
       client:~/ > ssh server
       Permission denied (publickey).
       client:~/ > ssh -i .ssh/id_dsa server
       Permission denied (publickey).

    I had exactly the same results using rsa1 keys. Any and all help is
    appreciated.

    Anm

  • Next message: Shapiro, David: "RE: sftp on OS390 mainframe"

    Relevant Pages

    • SSH RSYNC and Syslog Authentication Errors
      ... I am using rsync over ssh to backup my web server. ... debug1: got SSH2_MSG_SERVICE_ACCEPT ... debug3: authmethod_lookup publickey ...
      (SSH)
    • Re: getting rid of apache passphrase
      ... > just want to ask if getting rid of the apache passphrase poses a ... Depends on how good your control of access to the server is. ... went out, to get things back up, so I got rid of the passphrase. ... But, if you have a lot of people running around, even if ignorant, ...
      (freebsd-questions)
    • Using PublicKey from a NATted client
      ... I'm trying to use Putty to connect to an OpenSSH server ... via publickey exchange (using a password to login works fine but I'm ... public key as one line into /root/.ssh/authorized_keys on the server. ...
      (comp.security.ssh)
    • Re: apache
      ... > i have a webserver that needs to run apache with SSL (httpd -SSL, ... > somebody doesn't enter the passphrase by hand... ... > server every time by entering the passphrase by hand is not what i am ... The solution that i opted for was to create a server on a secure network ...
      (FreeBSD-Security)
    • Re: Public key auth problems
      ... > other server, I somewhat disregarded it. ... It first tries to read the key with no passphrase, ... > found that if I do public key and provide the correct passphrase, ... I'm not sure why you think it's weird -- the client needs your passphrase ...
      (comp.security.ssh)