Not recognizing public key

From: Crypix (crypix_at_gmail.com)
Date: 04/04/05

  • Next message: Turner, Carl H [NTK]: "tunneled ports not working" 
    Date: Mon, 04 Apr 2005 13:29:47 -0400
To: secureshell@securityfocus.com

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    I am at my wit's end. I am trying to setup a ssh passwordless key
    authentication between two servers (unfortunately using the root
    account).
    On Host A I generated my keys using ssh-keygen -t dsa as root with
    blank
    passphrase. I named them /root/.ssh/remotehost.id_dsa.
    I created a file called config inside /root/.ssh:

      Host Host B
      User root
      Compression yes
      Protocol 2
      RSAAuthentication yes
      StrictHostKeyChecking no
      ForwardAgent yes
      ForwardX11 yes
      IdentityFile /root/.ssh/remotehost.id_dsa

    I then copied remotehost.id_dsa.pub to the authorized_key2 file on
    Host B.

    I then run the following from Host A to test:

    [root@HOSTA .ssh]# ssh -v hostb

    __OUTPUT__
    debug1: Reading configuration data /root/.ssh/config
    debug1: Reading configuration data /etc/ssh/ssh_config
    debug1: Applying options for *
    debug1: Rhosts Authentication disabled, originating port will not be
    trusted.
    debug1: Connecting to hostB [xxx.xxx.xxx.xxx] port 22.
    debug1: Connection established.
    debug1: identity file /root/.ssh/identity type -1
    debug1: identity file /root/.ssh/id_rsa type -1
    debug1: identity file /root/.ssh/id_dsa type 2
    debug1: Remote protocol version 1.99, remote software version
    OpenSSH_3.5p1
    debug1: match: OpenSSH_3.5p1 pat OpenSSH*
    debug1: Enabling compatibility mode for protocol 2.0
    debug1: Local version string SSH-2.0-OpenSSH_3.6.1p2
    debug1: SSH2_MSG_KEXINIT sent
    debug1: SSH2_MSG_KEXINIT received
    debug1: kex: server->client aes128-cbc hmac-md5 none
    debug1: kex: client->server aes128-cbc hmac-md5 none
    debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
    debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
    debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
    debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
    debug1: Host 'hostB' is known and matches the RSA host key.
    debug1: Found key in /root/.ssh/known_hosts:1
    debug1: ssh_rsa_verify: signature correct
    debug1: SSH2_MSG_NEWKEYS sent
    debug1: expecting SSH2_MSG_NEWKEYS
    debug1: SSH2_MSG_NEWKEYS received
    debug1: SSH2_MSG_SERVICE_REQUEST sent
    debug1: SSH2_MSG_SERVICE_ACCEPT received
    debug1: Authentications that can continue:
    publickey,password,keyboard-interactive
    debug1: Next authentication method: publickey
    debug1: Trying private key: /root/.ssh/identity
    debug1: Trying private key: /root/.ssh/id_rsa
    debug1: Offering public key: /root/.ssh/id_dsa
    debug1: Authentications that can continue:
    publickey,password,keyboard-interactive
    debug1: Next authentication method: keyboard-interactive
    debug1: Authentications that can continue:
    publickey,password,keyboard-interactive
    debug1: Next authentication method: password
    root@hostB's password:

    Nothing I type for password works..

    Any help or suggestions would be much appreciated.

    -----BEGIN PGP SIGNATURE-----
    Version: PGP 8.1

    iQA/AwUBQlF5lavE15SFM+JaEQKDQwCfa1LXg9IXkVe3ykLSnH28eeWgoq0Anje+
    PdGUgyOlPqw3z8VCXjevv9s7
    =1PI1
    -----END PGP SIGNATURE-----

  • Next message: Turner, Carl H [NTK]: "tunneled ports not working"

    Relevant Pages

    • Re: pubkey works for user: why not root ?
      ... AND to add the line "AllowUsers sean root" (multiple users can be allowed, ... debug1: Connection established. ... debug2: fd 3 setting O_NONBLOCK ... debug1: Next authentication method: publickey ...
      (SSH)
    • Re: getting host certificates working
      ... I currently trying certificate based authentication with ssh and was ... but failed to configure host ... debug1: Connection established. ...
      (SSH)
    • Key-based authentication in SSH with Sun Directory Server 6.3 (On Solaris 10 client)
      ... I'm having problems with key-based authentication on one of my Solaris ... debug1: Connection established. ... # rlogin service (explicit because of pam_rhost_auth) ... # Default definitions for Authentication management ...
      (comp.unix.solaris)
    • getting host certificates working
      ... I currently trying certificate based authentication with ssh and was ... Signed the host key: ... debug1: Connection established. ...
      (SSH)
    • LDAP Authentication via SSH
      ... authenticate via SSH to the LDAP server. ... debug1: Connecting to ldapclient.domain port 22. ... debug1: Next authentication method: keyboard-interactive ... # rlogin service (explicit because of pam_rhost_auth) ...
      (SunManagers)