Re: ssh-agent and limitation of number of keys

From: Richard E. Silverman (res_at_qoxp.net)
Date: 04/23/04


Date: 23 Apr 2004 15:58:45 -0400


>>>>> "OF" == oldfrog@volny cz <oldfrog@volny.cz> writes:

    OF> Hi, is there some limitation of number of keys simultaneously
    OF> loaded into ssh-agent? I loaded 9 keys and 8. and 9. key don't
    OF> work. I obtain messege

    OF> Received disconnect from X.X.X.X: 2: \ Too many
    OF> authentication failures for root

    OF> when i try to login. When I load these two keys separate, all
    OF> works fine.

As the error message implies, the limitation is on the server. Most SSH
servers limit the number of failed authentication requests a single
session may make. Depending on details of both the client and server
implementations, even testing key authorization may count as a "failure,"
thus effectively limiting the number of keys you can try.

You didn't say anything about what SSH software you're using...

-- 
  Richard Silverman
  res@qoxp.net


Relevant Pages

  • Re: Help: SSh does not work
    ... Our sysadmin is not helping. ... so I have to get to another machine to ssh from there. ... many authentication failures for ". ... switch it to yes and restart the server. ...
    (linux.redhat)
  • Re: Apache Software Foundation Server compromised, resecured. (fwd)
    ... this was one "result" of the comromised ssh binary at sourceforge. ... a public server of the Apache Software Foundation ... > (ASF) was illegally accessed by unknown crackers. ... > exhaustive audit of all Apache source code and binary distributions ...
    (FreeBSD-Security)
  • Re: FreeBSD Crash without Errors, Warnings, or Panics
    ... I suppose I could run on stable until the driver is fixed in a release branch, but I need this box up and online, and I've always read that the stable branch is not the place for production servers. ... I'm running 6.0-RELEASE-p5 on a Toshiba built server: dual Xeon Intel motherboard with a LSILogic MegaRAID controller. ... Also, some network ports still respond, like a telnet to port 22 to test SSH will yield an SSH banner, but trying to connect with SSH just hangs. ... The box runs a web-based app and connects to a local Postgres DB which seemed to be unable to start new connections being requested by the PHP scripts. ...
    (freebsd-hackers)
  • Re: restrict ssh access
    ... > We have one ssh server which receives about 6000 failed attempts to ... > unsuccessful login attempts per client IP address? ... the remote server is also running OpenSSH. ...
    (comp.security.ssh)
  • Re: SSH as root
    ... Subject: SSH as root ... but it doesn't require having a key on the server that could be ... If they compromise a server, and the passphrase, etc. is there, they only ... private key to anyone. ...
    (SSH)