Password authentication fails: SSH secure shell to openssh server

From: Andrew Muller (mullera_at_mcmaster.ca)
Date: 08/02/05

  • Next message: Darren Tucker: "Re: OpenSSH_4.1p1 hangs on exit using PAM/ChallengeResponse" 
    Date: Tue, 02 Aug 2005 09:31:55 -0400
To: secureshell@securityfocus.com

    Problem: Can connect to OpenSSH server from openSSH client but not from
    SSH Secure Shell Client

    I am running OpenSSH_3.8.1p1_FreeBSD_20040419 on my desktop
    (pc-mullera). I rely on passwords because I've never been able to
    figure out how to do the other authentication methods. I can ssh to the
    desktop from my laptop under cygwin (openSSH_4.1p1) but not from the
    laptop Secure Shell Client under XP (SSH Secure Schell 3.0.0) nor from a
    linux machine running SSH Secure Shell 3.1.2 under mandrake 9. When I
    fail to connect I get shut out with "no further authentication methods
    available" before I have even been asked for my password. I suspect an
    incompatibility between openSSH's keyboard-interactive method and Secure
    SSHs password method.

    Can anyone point me to some help on this?

    Here is the output of a failed attempt following
    "ssh -v pc-mullera 2> sshcom.log" issued from pc-muller-17

    $more sshcom.log
    debug: SshAppCommon/sshappcommon.c:133/ssh_app_get_global_regex_context:
    Allocating global SshRegex context.
    debug: SshConfig/sshconfig.c:2355/ssh2_parse_config: Unable to open
    /home/mullera/.ssh2/ssh2_config
    debug: Connecting to pc-mullera, port 22... (SOCKS not used)
    debug: Ssh2/ssh2.c:2121/main: Entering event loop.
    debug: Ssh2Client/sshclient.c:1403/ssh_client_wrap: Creating transport
    protocol.debug:
    SshAuthMethodClient/sshauthmethodc.c:83/ssh_client_authentication_initialize:
    Added "publickey" to usable methods.
    debug:
    SshAuthMethodClient/sshauthmethodc.c:83/ssh_client_authentication_initialize:
    Added "password" to usable methods.
    debug: Ssh2Client/sshclient.c:1444/ssh_client_wrap: Creating userauth
    protocol.
    debug: client supports 2 auth methods: 'publickey,password'
    debug: Ssh2Common/sshcommon.c:559/ssh_common_wrap: local ip =
    130.113.124.23, local port = 33035
    debug: Ssh2Common/sshcommon.c:561/ssh_common_wrap: remote ip =
    130.113.139.33, remote port = 22
    debug: SshConnection/sshconn.c:1930/ssh_conn_wrap: Wrapping...
    debug: Remote version: SSH-2.0-OpenSSH_3.8.1p1 FreeBSD-20040419
    debug: Major: 3 Minor: 8 Revision: 1
    debug: Ssh2Transport/trcommon.c:1306/ssh_tr_input_version: Remote
    version has rekey incompatibility bug.
    debug: Ssh2Transport/trcommon.c:1308/ssh_tr_input_version: Remote
    version is OpenSSH, KEX guesses disabled.
    debug: Ssh2Transport/trcommon.c:1647/ssh_tr_negotiate: lang s to c: `',
    lang c to s: `'
    debug: Ssh2Transport/trcommon.c:1712/ssh_tr_negotiate: c_to_s: cipher
    aes128-cbc, mac hmac-sha1, compression none
    debug: Ssh2Transport/trcommon.c:1715/ssh_tr_negotiate: s_to_c: cipher
    aes128-cbc, mac hmac-sha1, compression none
    debug: Remote host key found from database.
    debug: Ssh2Common/sshcommon.c:317/ssh_common_special: Received
    SSH_CROSS_STARTUP packet from connection protocol.
    debug: Ssh2Common/sshcommon.c:367/ssh_common_special: Received
    SSH_CROSS_ALGORITHMS packet from connection protocol.
    debug: server offers auth methods 'publickey,keyboard-interactive'.
    debug: SshConfig/sshconfig.c:2355/ssh2_parse_config: Unable to open
    /home/mullera/.ssh2/identification
    debug: Ssh2AuthClient/sshauthc.c:315/ssh_authc_completion_proc: Method
    'publickey' disabled.
    debug: server offers auth methods 'publickey,keyboard-interactive'.
    debug: Ssh2Common/sshcommon.c:155/ssh_common_disconnect: DISCONNECT
    received: No further authentication methods available.
    warning: Authentication failed.
    debug: Ssh2/ssh2.c:130/client_disconnect: locally_generated = TRUE
    Disconnected; no more authentication methods available (No further
    authentication methods available.).
    debug: Ssh2Client/sshclient.c:1478/ssh_client_destroy: Destroying client.
    debug: SshConnection/sshconn.c:1982/ssh_conn_destroy: Destroying SshConn
    object.debug: Ssh2Client/sshclient.c:1540/ssh_client_destroy_finalize:
    Destroying client completed.
    debug:
    SshAuthMethodClient/sshauthmethodc.c:88/ssh_client_authentication_uninitialize:
    Destroying authentication method array.
    debug:
    SshAppCommon/sshappcommon.c:146/ssh_app_free_global_regex_context:
    Freeing global SshRegex context.

    Note the contrast between the lines
    debug: client supports 2 auth methods: 'publickey,password'
    and
    debug: server offers auth methods 'publickey,keyboard-interactive'.

    Thanks for any help 

    -- 
Andrew Muller, Professor of Economics, McMaster University
Hamilton, Ontario, Canada L8S 4M4
http://socserv.socsci.mcmaster.ca/mullera
  • Next message: Darren Tucker: "Re: OpenSSH_4.1p1 hangs on exit using PAM/ChallengeResponse"

    Relevant Pages

    • Re: hostbased auth between commercial and OpenSSH
      ... The server just rejects hostbased from OpenSSH client saying method is ... Client side debug snippet (I've got hostbased as only ... client user 'myusername', server user 'myusername', ...
      (comp.security.ssh)
    • Connect to a linux box from Windows using RSA authentication
      ... transferred the public key to ... On the client I've got IdKey key in the identification file. ... debug: server offers auth methods 'publickey,password,keyboard-interactive'. ...
      (SSH)
    • Remote Debugging Issue VS2005 (works fine with VS2003)
      ... I fought very hard and succeed to do a remote debug from a client ... VS2003 on XP HOME to a Server with XP PRO. ...
      (microsoft.public.dotnet.languages.csharp)
    • Remote Debugging Issue With VS2005
      ... VS2003 on XP HOME to a Server with XP PRO. ... created same user/pwd with admin rights for client & Server. ... modified the DCOM security to allow remote access to Anonymous login ... when i try to debug I have the error message ["Access is denied", ...
      (microsoft.public.vsnet.debugging)
    • Gesucht - Virensoftware die funktioniert
      ... Server specifications ... - winmsd output from the OSCE server ... To turn on the server debug program: ... Setting window appears 3. select the Enable debug log check box. ...
      (microsoft.public.de.german.exchange2000.general)