OpenSSH 3.6.1p2 Inoperability Issue

From: David Shaw (dave_at_shawr.demon.co.uk)
Date: 06/06/03

  • Next message: Ben Lindstrom: "Re: OpenSSH 3.6.1p2 Inoperability Issue" 
    Date: Thu, 5 Jun 2003 23:08:18 +0100 (GMT-1)
To: secureshell@securityfocus.com

    Hi,

    I am running a Linux Debian server at home, and recently upgraded from the
    default version of OpenSSH 3.4.1p1 (for Debian) to 3.6.1p2 and now the
    sshd will not accept connections. I set up the sshd_config to the best of
    my abilties and although it all works, it doesn't actually accept the
    passwords, even if it is correct, is just says access denied. I checked
    on the OpenSSH website and it said to mail here... so I did, does anyone
    know how to fix this problem?

    I am running Debian 3.0r1 with the 2.5.70 kernel, here it an enclosed copy
    of my sshd_config:

    # This is the sshd server system-wide configuration file. See
    # sshd_config(5) for more information.

    # This sshd was compiled with
    PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin

    # The strategy used for options in the default sshd_config shipped with
    # OpenSSH is to specify options with their default value where
    # possible, but leave them commented. Uncommented options change a
    # default value.

    Port 26
    Protocol 2
    #ListenAddress 0.0.0.0
    #ListenAddress ::

    # HostKey for protocol version 1
    #HostKey /usr/local/etc/ssh_host_key
    # HostKeys for protocol version 2
    HostKey /usr/local/etc/ssh_host_rsa_key
    HostKey /usr/local/etc/ssh_host_dsa_key

    # Lifetime and size of ephemeral version 1 server key
    KeyRegenerationInterval 3600
    ServerKeyBits 768

    # Logging
    #obsoletes QuietMode and FascistLogging
    SyslogFacility AUTH
    LogLevel INFO

    # Authentication:

    LoginGraceTime 60
    PermitRootLogin no
    StrictModes yes

    #RSAAuthentication yes
    #PubkeyAuthentication yes
    #AuthorizedKeysFile .ssh/authorized_keys

    # rhosts authentication should not be used
    RhostsAuthentication no
    # Don't read the user's ~/.rhosts and ~/.shosts files
    IgnoreRhosts yes
    # For this to work you will also need host keys in
    /usr/local/etc/ssh_known_hosts
    RhostsRSAAuthentication no
    # similar for protocol version 2
    HostbasedAuthentication no
    # Change to yes if you don't trust ~/.ssh/known_hosts for
    # RhostsRSAAuthentication and HostbasedAuthentication
    #IgnoreUserKnownHosts no

    # To disable tunneled clear text passwords, change to no here!
    PasswordAuthentication yes
    PermitEmptyPasswords no

    # Change to no to disable s/key passwords
    #ChallengeResponseAuthentication yes

    # Kerberos options
    #KerberosAuthentication no
    #KerberosOrLocalPasswd yes
    #KerberosTicketCleanup yes

    #AFSTokenPassing no

    # Kerberos TGT Passing only works with the AFS kaserver
    #KerberosTgtPassing no

    # Set this to 'yes' to enable PAM keyboard-interactive authentication
    # Warning: enabling this may bypass the setting of
    'PasswordAuthentication'
    #PAMAuthenticationViaKbdInt no

    X11Forwarding no
    X11DisplayOffset 10
    X11UseLocalhost yes
    PrintMotd yes
    PrintLastLog yes
    KeepAlive yes
    UseLogin no
    UsePrivilegeSeparation no
    PermitUserEnvironment yes
    Compression yes

    #MaxStartups 10
    # no default banner path
    Banner /etc/issue.net
    #VerifyReverseMapping no

    # override default of no subsystems
    #Subsystem sftp /usr/local/libexec/sftp-server

    Cheers,
    Dave

  • Next message: Ben Lindstrom: "Re: OpenSSH 3.6.1p2 Inoperability Issue"

    Relevant Pages

    • Re: Attempting my first port forwarding through SSH
      ... you're surfing via the remote system with no software on the remote server other than sshd. ... I have changed some settings in the Firefox network set up to see if the problem solved, I changed socks5 for socks4 but nothing, and deleted the "No proxy for:localhost" to see if anything worked, but basically the browser still does nothing, I think my Firefox settings are correct. ... # To enable empty passwords, ... # Kerberos options ...
      (comp.security.ssh)
    • sshd and IPv4 forwarding no longer working
      ... I performed a recent upgrade and possibly openssh got upgraded as well. ... but not from another server. ... # To enable empty passwords, ... # Kerberos options ...
      (Ubuntu)
    • OpenSSH Assistance - New Admin
      ... The first thing I was told was to upgrade our SSH server. ... # HostKeys for protocol version 2 ... # To enable empty passwords, ... # Kerberos TGT Passing does only work with the AFS kaserver ...
      (comp.os.linux.networking)
    • sshd login problems on mandrake
      ... Everything is fine, iptables working fine, sshd running, client running. ... # HostKey for protocol version 1 ... # To disable tunneled clear text passwords, ... # Kerberos TGT Passing only works with the AFS kaserver ...
      (comp.security.ssh)
    • Re: Cygwin and SSH
      ... # This is the sshd server system-wide configuration file. ... # To disable tunneled clear text passwords, ... # Kerberos TGT Passing only works with the AFS kaserver ...
      (SSH)