Re: OpenSSH_3.1p1 auth problems

From: Cameron L. Spitzer (spambait@petra.dyndns.org)
Date: 08/26/02 

From: "Cameron L. Spitzer" <spambait@petra.dyndns.org>
Date: 26 Aug 2002 07:52:27 GMT

In article <m1lk7mejn4i.fsf@syrinx.oankali.net>, Richard E. Silverman wrote:
>
> Your problem is that you generated and RSA1 key, which can only be used
> with protocol 1... but you are using protocol 2. Use
>
> ssh-keygen -t {rsa|dsa}

I ran ssh-keygen -t dsa and gave a passphrase, and copied
.ssh/{id_dsa,id_dsa.pub} to the remote machine.
Then I copied id_dsa.pub to authorized_keys there.
The only thing that's different is I can log into the remote
machine with that passphrase now, instead of my shadow password
for the remote machine.
Is that what was supposed to happen?
Is that the difference between "keyboard interactive" and "password?"
I really can't tell from man ssh.

What I expected would happen is .ssh/id_dsa would match, and I
wouldn't have to type any password any more.
But ssh -v gives

...
debug1: next auth method to try is publickey
debug1: try privkey: /home/cls/.ssh/identity
debug1: try privkey: /home/cls/.ssh/id_rsa
debug1: try pubkey: /home/cls/.ssh/id_dsa
debug1: input_userauth_pk_ok: pkalg ssh-dss blen 434 lastkey 0x810bf68 hint 2
debug1: PEM_read_PrivateKey failed
debug1: read PEM private key done: type <unknown>
Enter passphrase for key '/home/cls/.ssh/id_dsa':
debug1: read PEM private key done: type DSA
...

Why did PEM_read_PrivateKey fail? What does PEM stand for?

Cameron

Relevant Pages

  • Re: OpenSSH_3.1p1 auth problems
    ... but you are using protocol 2. ... .ssh/to the remote machine. ... debug1: next auth method to try is publickey ... debug1: read PEM private key done: type DSA ...
    (comp.security.ssh)
  • Re: sshd failure
    ... 1752: debug1: read PEM private key done: type RSA ... 1752: Disabling protocol version 1. ... 1752: debug1: Server will not fork when running in debugging mode. ...
    (alt.os.linux)
  • Re: Kerberized ssh only works on KDC
    ... KDCs,, I get the following log from sshd: ... debug1: read PEM private key done: type RSA ... Client protocol version 2.0; ...
    (comp.protocols.kerberos)
  • login w/o password not working
    ... I am trying to log in a remote machine without having to use passwd each ... debug1: Reading configuration data /etc/ssh/ssh_config ... Remote protocol version 1.99, ... debug1: Next authentication method: keyboard-interactive ...
    (SSH)
  • SSH2_MSG_SERVICE_REQUEST leads to Corrupted MAC
    ... debug1: Connection established. ... Remote protocol version 1.99, ... Permanently added '192.168.52.111' (RSA) to the list of known ... debug1: read PEM private key done: type RSA ...
    (comp.security.ssh)
Loading