RE: Help with OpenSSH -> SSH2 Server

From: Andrew n marshall (invysibleman_at_yahoo.com)
Date: 05/19/03

  • Next message: wjnorth: "RE: Help with OpenSSH -> SSH2 Server" 
    Date: Mon, 19 May 2003 12:33:13 -0700 (PDT)
To: secureshell <secureshell@securityfocus.com>

    I'm still having the previously mentioned problems. But here is a new
    data point... the verbose log.
    The only thing strange I see is near the bottom:
      debug1: next auth method to try is publickey
      debug1: try privkey: /Users/user/.ssh/id_rsa
      debug1: try pubkey: /Users/user/.ssh/id_dsa

    ~/.ssh/id_dsa is a PRIVATE key (the public key would be id_dsa.pub).
    Why is it reading it as a pubkey?

    I also glanced at the file permissions, and they match my expectations
    (600 for private, and 644 for public).

    Anm

    ===================================================

    user@client:~/ > ssh -v server
    OpenSSH_3.5p1, SSH protocols 1.5/2.0, OpenSSL 0x0090701f
    debug1: Reading configuration data /Users/user/.ssh/config
    debug1: Reading configuration data /sw/etc/ssh/ssh_config
    debug1: Rhosts Authentication disabled, originating port will not be
    trusted.
    debug1: ssh_connect: needpriv 0
    debug1: Connecting to server [192.168.208.207] port 22.
    debug1: Connection established.
    debug1: identity file /Users/amarshal/.ssh/identity type 0
    debug1: identity file /Users/amarshal/.ssh/id_rsa type -1
    debug1: identity file /Users/amarshal/.ssh/id_dsa type 2
    debug1: Remote protocol version 1.99, remote software version 2.4.0 SSH
    Secure Shell (non-commercial)
    debug1: match: 2.4.0 SSH Secure Shell (non-commercial) pat 2.*
    debug1: Enabling compatibility mode for protocol 2.0
    debug1: Local version string SSH-2.0-OpenSSH_3.5p1
    debug1: SSH2_MSG_KEXINIT sent
    debug1: SSH2_MSG_KEXINIT received
    debug1: kex: server->client 3des-cbc hmac-md5 none
    debug1: kex: client->server 3des-cbc hmac-md5 none
    debug1: dh_gen_key: priv key bits set: 186/384
    debug1: bits set: 526/1024
    debug1: sending SSH2_MSG_KEXDH_INIT
    debug1: expecting SSH2_MSG_KEXDH_REPLY
    debug1: Host 'nitro' is known and matches the DSA host key.
    debug1: Found key in /Users/user/.ssh/known_hosts:1
    debug1: bits set: 506/1024
    debug1: ssh_dss_verify: signature correct
    debug1: kex_derive_keys
    debug1: newkeys: mode 1
    debug1: SSH2_MSG_NEWKEYS sent
    debug1: waiting for SSH2_MSG_NEWKEYS
    debug1: newkeys: mode 0
    debug1: SSH2_MSG_NEWKEYS received
    debug1: done: ssh_kex2.
    debug1: send SSH2_MSG_SERVICE_REQUEST
    debug1: service_accept: ssh-userauth
    debug1: got SSH2_MSG_SERVICE_ACCEPT
    debug1: authentications that can continue: publickey
    debug1: next auth method to try is publickey
    debug1: try privkey: /Users/user/.ssh/id_rsa
    debug1: try pubkey: /Users/user/.ssh/id_dsa
    debug1: authentications that can continue: publickey
    debug1: no more auth methods to try
    Permission denied (publickey).
    debug1: Calling cleanup 0x17770(0x0)

    __________________________________
    Do you Yahoo!?
    The New Yahoo! Search - Faster. Easier. Bingo.
    http://search.yahoo.com

  • Next message: wjnorth: "RE: Help with OpenSSH -> SSH2 Server"

    Relevant Pages

    • no publickey auth with OpenSSH_3.7.1p2 and HPUX11i
      ... debug1: Host 'XXXX' is known and matches the RSA host key. ... debug2: bits set: 1609/3191 ... debug3: start over, passed a different list publickey,password ... debug3: authmethod_is_enabled publickey ...
      (comp.security.ssh)
    • Re: SSH publickey auth
      ... Notice how it trys publickey auth and then it fails, ... debug2: set_newkeys: mode 1 ... debug1: expecting SSH2_MSG_NEWKEYS ... debug3: preferred publickey,keyboard-interactive,password ...
      (Fedora)
    • public key problems OpenSSH3.8.1p1 to Sun_SSH_1.1
      ... (incidentally I use the same method to connect this Debian server ... Failed publickey for test from 192.168.2.67 port 42619 ssh2 ... debug1: Connection established. ... Remote protocol version 2.0, ...
      (comp.security.ssh)
    • RE: Ssh with public key authentication
      ... Ssh with public key authentication ... debug1: Host 'machine1' is known and matches the RSA host key. ... debug3: preferred publickey,keyboard-interactive,password ... debug3: authmethod_is_enabled publickey ...
      (RedHat)
    • no (ssh-)login possible, pam-problem?
      ... # HostKeys for protocol version 1 ... debug1: Reading configuration data /etc/ssh/ssh_config ... debug1: authentications that can continue: ... next auth method to try is keyboard-interactive ...
      (comp.security.ssh)