Re: Cannot authenticate from RedHat 7.1

From: Richard Silverman (res@des.jhy.us.ml.com)
Date: 12/12/01


From: Richard Silverman <res@des.jhy.us.ml.com>
Date: 12 Dec 2001 16:11:12 -0500


>>>>> "JK" == Jacob Kjelstrup <jacob@iicnet.com> writes:

    JK> I think the issue is that I'm going through the AT&T Broadband
    JK> network and sshd is trying to do a reverse DNS lookup on the IP
    JK> address and not finding anything. Apparently this additional
    JK> check only takes place for protocol 1 and not for protocol 2. Is
    JK> this true or am I confused?

Neither protocol requires DNS lookups; some implementations may be
configured to. SSH2 can have RequireReverseMapping set -- however, it
doesn't give the behavior you're seeing; you would just get "permission
denied."

    JK> In any event, by forcing the protocol to 1 I was able to use both
    JK> password authentication and public key authentication.

I would troubleshoot this further and get it fixed -- protocol 1 has known
security weaknesses and is deprecated.

-- 
 Richard Silverman
 slade@shore.net



Relevant Pages

  • Re: Cannot authenticate from RedHat 7.1
    ... > JK> network and sshd is trying to do a reverse DNS lookup on the IP ... > JK> check only takes place for protocol 1 and not for protocol 2. ...
    (comp.security.ssh)
  • Re: Reverse DNS
    ... Any tool for reverse dns lookup? ... Barry Margolin, barmar@xxxxxxxxxxxx ...
    (comp.unix.programmer)

Quantcast