RE: ssh configuration problem

• Previous message: mehul choube: "ssh configuration problem"
• In reply to: mehul choube: "ssh configuration problem"
• Next in thread: Greg Wooledge: "Re: ssh configuration problem"
• Reply: Greg Wooledge: "Re: ssh configuration problem"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

To: <secureshell@securityfocus.com>
Date: Wed, 23 Jul 2003 12:01:40 -0400

I would recommend that you go through dmesg to find the problem with why
it's not starting.

# dmesg > /tmp/a

# vi /tmp/a

inside of vi ->
/ssh

and see what message you are getting.

Your config file seemingly looks fine, make sure the directory
/usr/local/etc/ exists.

I would also recommend setting Protocol to 1,2 instead of 2, this will let
you connect with older client versions.

Set strictmodes to no. A few people will disagree with this, but it means
less administration on your part dealing with end users. Instead, set up a
root cron job that will run the find command from /home/ up and chmod all
.ssh directories to the right permissions, something like 700.

Hope this helps.
Dan

-----Original Message-----
From: mehul choube [mailto:mrc_sshdis@rediffmail.com]
Sent: Wednesday, July 23, 2003 5:29 AM
To: secureshell@securityfocus.com
Subject: ssh configuration problem

i am having linux box with RedHat 7.2 OS. i downloaded
openssh-3.6p1
source, compiled it and installed it. then i changed the
sshd_config file
after this when i tried to restart the sshd service it fails
when
starting sshd service.

     waiting for reply.

mehul.

     the contents of the sshd_config files are as follows :-

# $OpenBSD: sshd_config,v 1.59 2002/09/25 11:17:16 markus Exp $

# This is the sshd server system-wide configuration file. See
# sshd_config(5) for more information.

# This sshd was compiled with
PATH=/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin

# The strategy used for options in the default sshd_config shipped
with
# OpenSSH is to specify options with their default value where
# possible, but leave them commented. Uncommented options change
a
# default value.

Port 22
#Protocol 2,1
Protocol 2
#ListenAddress 0.0.0.0
#ListenAddress ::

# HostKey for protocol version 1
#HostKey /usr/local/etc/ssh_host_key
# HostKeys for protocol version 2
HostKey /usr/local/etc/ssh_host_rsa_key
HostKey /usr/local/etc/ssh_host_dsa_key

# Lifetime and size of ephemeral version 1 server key
KeyRegenerationInterval 3600
ServerKeyBits 768

# Logging
#obsoletes QuietMode and FascistLogging
SyslogFacility AUTH
LogLevel INFO

# Authentication:

LoginGraceTime 120
PermitRootLogin no
StrictModes yes

RSAAuthentication yes
PubkeyAuthentication yes
AuthorizedKeysFile .ssh/authorized_keys

# rhosts authentication should not be used
RhostsAuthentication no
# Don't read the user's ~/.rhosts and ~/.shosts files
#IgnoreRhosts yes
# For this to work you will also need host keys in
/usr/local/etc/ssh_known_hosts
#RhostsRSAAuthentication no
# similar for protocol version 2
#HostbasedAuthentication no
# Change to yes if you don't trust ~/.ssh/known_hosts for
# RhostsRSAAuthentication and HostbasedAuthentication
#IgnoreUserKnownHosts no

# To disable tunneled clear text passwords, change to no here!
PasswordAuthentication no
#PermitEmptyPasswords no

# Change to no to disable s/key passwords
ChallengeResponseAuthentication yes

# Kerberos options
#KerberosAuthentication no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes

#AFSTokenPassing no

# Kerberos TGT Passing only works with the AFS kaserver
#KerberosTgtPassing no

# Set this to 'yes' to enable PAM keyboard-interactive
authentication
# Warning: enabling this may bypass the setting of
'PasswordAuthentication'
#PAMAuthenticationViaKbdInt no

#X11Forwarding no
#X11DisplayOffset 10
#X11UseLocalhost yes
#PrintMotd yes
#PrintLastLog yes
#KeepAlive yes
#UseLogin no
#UsePrivilegeSeparation yes
#PermitUserEnvironment no
Compression yes

#MaxStartups 10
# no default banner path
#Banner /some/path
#VerifyReverseMapping no

# override default of no subsystems
Subsystem sftp /usr/local/libexec/sftp-server

___________________________________________________
Download the hottest & happening ringtones here!
OR SMS: Top tone to 7333
Click here now:
http://sms.rediff.com/cgi-bin/ringtone/ringhome.pl

• Previous message: mehul choube: "ssh configuration problem"
• In reply to: mehul choube: "ssh configuration problem"
• Next in thread: Greg Wooledge: "Re: ssh configuration problem"
• Reply: Greg Wooledge: "Re: ssh configuration problem"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]