Re: Permission denied (publickey,keyboard-interactive).

From: Darren Tucker (dtucker_at_dodgy.net.au)
Date: 12/19/03


Date: Fri, 19 Dec 2003 11:51:03 +0000 (UTC)

In article <7d34fc3.0312182220.7f5e28b6@posting.google.com>,
Kishore <vkkumar@indiatimes.com> wrote:
>I have a Solaris server with openSSH 3.4.1, when i try doing ssh from
>any other hosts it throws the following error.
>Permission denied (publickey,keyboard-interactive).
>I tried with different users, but no luck. I am attaching the debug
>output of SSH.

[snip client-side debug]

The interesting messages (ie the ones that will tell you *why* the
authentication attempts were denied) will be on the server side. You
can see them by running the server with "/path/to/sshd -ddd -p 2022"
then connect with "ssh -p 2022 yourserver".

Note that OpenSSH 3.4p1 has a potential security problem[1], you should
consider upgrading your server to 3.7.1p2.

        -Daz.

[1] http://www.openssh.com/txt/buffer.adv

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.


Relevant Pages

  • Re: two SSH compatibility scenarios: can it work?
    ... We are required to use SSH to log into the Engineering lab machines. ... > server software displays this header upon telnet connection to port 22. ... I still use Windows on my notebook for application compatibility. ... > running OpenSSH 3.4p1. ...
    (comp.security.ssh)
  • Re: SSH
    ... >> OpenSSH client, SSH server will report at least one or more implementation ... When using an SSH client to ...
    (comp.unix.solaris)
  • RE: ssh.com sshd 3.2.x, really enforcing sftp-only
    ... With plink/putty, this doesn't work, but with openssh it does (my tests ... ssh user@host cmd ... so locking down the permissions on the server itself should be ... involves making a "dummy" /etc/passwd file for cygwin programs to check. ...
    (SSH)
  • Re: Zugriff auf Linux via SSH
    ... Es gibt natürlich freie SSH Tools (Putty, OpenSSH), die aber leider erst ... Somit hat sich unser Projekt immer zweigeteilt - halt die Server ... Applikation auf dem eigentlichen Server und dann auf den per SSH ...
    (microsoft.public.de.german.entwickler.dotnet.csharp)
  • Re: need rhosts rsa help
    ... >I'm having problems getting RhostsRSAAuthentication working on OpenSSH ... It appears from the client log that it's not even attempting ... Since you're using SSHv1 you need to make the "ssh" binary setuid root ... Good judgement comes with experience. ...
    (comp.security.ssh)