Permission Denied

From: Shawn Bierman (sbierman_at_gmail.com)
Date: 04/29/05 

Date: Fri, 29 Apr 2005 09:34:32 -0500
To: secureshell@securityfocus.com

I have two AIX 5.2 ML3 systems. I can ssh to nodeA from nodeB as
oracle but not as the root user or my own account (biermans).

root@sf1n03en4:/ > oslevel -r
5200-03

root@sf1n03en4:/ > lslpp -L |grep openssh.base
  openssh.base.client 3.7.0.5200 C F Open Secure Shell Commands
  openssh.base.server 3.7.0.5200 C F Open Secure Shell Server

[ as root user ]

root@sf1n03en4:/ > ssh 19.25.18.101
Permission denied (publickey,keyboard-interactive).

[ as biermans user ]

root@sf1n03en4:/ > ssh -l biermans 19.25.18.101
Permission denied (publickey,keyboard-interactive).

[ as oracle user ]

root@sf1n03en4:/ > ssh -l oracle 19.25.18.101
Last unsuccessful login: Mon Mar 21 17:54:32 UTC 2005 on ftp from
::ffff:16.37.18.31
Last login: Fri Apr 29 14:23:01 UTC 2005 on ssh

oracle@nf1n04en1.sdc:/home/oracle > lslpp -L |grep openssh.base
  openssh.base.client 3.7.0.5200 C F Open Secure Shell Commands
  openssh.base.server 3.7.0.5200 C F Open Secure Shell Server

oracle@nf1n04en1.sdc:/home/oracle > oslevel -r
5200-03

Just in case someone wants it:

root@sf1n03en4:/ > ssh -l biermans -v 19.25.18.101
OpenSSH_3.7.1p2-pwexp26_krb5, SSH protocols 1.5/2.0, OpenSSL 0.9.6g 9 Aug 2002
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Connecting to 19.25.18.101 [198.254.18.101] port 22.
debug1: Connection established.
debug1: identity file /.ssh/identity type -1
debug1: identity file /.ssh/id_rsa type 1
debug1: identity file /.ssh/id_dsa type -1
debug1: Remote protocol version 1.99, remote software version
OpenSSH_3.7.1p2-pwexp26_krb5
debug1: match: OpenSSH_3.7.1p2-pwexp26_krb5 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.7.1p2-pwexp26_krb5
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host '19.25.18.101' is known and matches the RSA host key.
debug1: Found key in /.ssh/known_hosts:11
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: /.ssh/identity
debug1: Offering public key: /.ssh/id_rsa
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: Trying private key: /.ssh/id_dsa
debug1: Next authentication method: keyboard-interactive
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: No more authentication methods to try.
Permission denied (publickey,keyboard-interactive).
debug1: Calling cleanup 0x2001280c(0x0)

Thanks for any insight.
-shawn

Relevant Pages

  • Re: queer dns access problem
    ... I was not quite right when I said that ssh works. ... debug1: Next authentication method: publickey ... not recording any traffic coming from the broken server when it tries to ...
    (RedHat)
  • Re: ssh gives "Permission denied, please try again"
    ... That just shows the server starting up, when you logged in via ssh to ... would have included the reason why it refused your login. ... debug1: Next authentication method: publickey ... debug1: Authentications that can continue: publickey,password ...
    (uk.comp.os.linux)
  • Re: ssh gives "Permission denied, please try again"
    ... That just shows the server starting up, when you logged in via ssh to ... would have included the reason why it refused your login. ... debug1: Next authentication method: publickey ... debug1: Authentications that can continue: publickey,password ...
    (uk.comp.os.linux)
  • Re: ssh fron windows to Linux m/c without password
    ... It seems to be than ssh doesn't find your private key. ... debug1: Connecting to llpfbuild port 22. ... debug1: Next authentication method: keyboard-interactive ...
    (SSH)
  • Replace worksation, now cant ssh to older machine
    ... need to be able to ssh to. ... I can't remeber exactly how I set these machines ... debug1: Connection established. ... debug1: Next authentication method: keyboard-interactive ...
    (freebsd-questions)