two SSH compatibility scenarios: can it work?

From: Alan Tu (alantu@students.uiuc.edu)
Date: 09/05/02


From: "Alan Tu" <alantu@students.uiuc.edu>
Date: Thu, 5 Sep 2002 07:38:19 -0500

Hi, I use a lot of computers, especially Linux, and its nice to be able to
log in remotely, and securely. Thank you OpenSSH. However, I have two
connection scenarios which I'm not sure will work.

1. We are required to use SSH to log into the Engineering lab machines. The
server software displays this header upon telnet connection to port 22.
SSH-1.99-OpenSSH_3.4p1

My question is, can I make the server do public-key based authentication, or
must the sysadmin enable this explicitly? Right now the SSH2 authentication
is password-based.

2. I still use Windows on my notebook for application compatibility. The
campus people told us to install a specific software for SSH compatibility
with all campus servers. Going to help/about, I see:
SSH Secure Shell
Version: 3.1.0 (Build 235)
Copyright 2000-2001 SSH Communications Security Corp.

This version has connected with the campus servers via password. However,
because its for students, something called PKI has been removed. I run a
Linux server at home which I would like to log into. Its a Mandrake system
running OpenSSH 3.4p1 (patched). Here, I do want to use public-key
authentication, so I generated a DSA key on the remote system, copied the
id_dsa.pub into authorized_keys, and then copied id_dsa[.pub] onto my
Windows computer. When I tried to connect, however, this Windows SSH client
said it could not read the keys and defaulted to password authentication.

My question is, are the key formats incompatible? Is there a key I can
generate that this Windows SSH client can import and use?

Thanks.

Alan



Relevant Pages

  • Re: How safe are FTP servers?
    ... decent server software with a good track record, ... that rsync can run transparently over a few protocols, including SSH ... Just to clarify, rsync uses it's own rsync protocol over SSH, stuffed ... server if you then use something like Basic HTTP authentication as well - ...
    (comp.os.linux.security)
  • Authentication (was Re: Great SWT Program)
    ... You know that ssh reads the ... authentication mechanisms are challenge/response-based and handle the ... what methods your server allows using 'ssh -v ... debug1: Authentications that can continue: publickey,password ...
    (comp.lang.java.programmer)
  • Re: OpenSSH and pam_radius_auth.so
    ... This indicates that password authentication was attempted. ... It appears as if sshd is not displaying the second ... RADIUS server tries again 2 more times before giving up. ... the most likely problem is that your SSH *client* isn't ...
    (comp.security.ssh)
  • Re: Firewall with one-time passwords?
    ... Is the authentication and authorization code absolutely ... >> SSH encryption, not in place of. ... > that the one-time password authentication program will enable ... you run the server at your end. ...
    (comp.os.linux.security)
  • Re: Firewall with one-time passwords?
    ... Is the authentication and authorization code absolutely ... >> SSH encryption, not in place of. ... > that the one-time password authentication program will enable ... you run the server at your end. ...
    (comp.security.firewalls)