SSH - RSA Authentication - server refused our key

From: Javed (kjaved_at_ncs.com.sg)
Date: 12/21/04


Date: 21 Dec 2004 02:57:25 -0800

Hi,

I have been trying to establish a SSH connectivity between my AIX 5.2
and Solaris 9 box, but it fails to connect using the public key while
its able to connect using password authentication.

Here is what I have done
On AIX

Under my $HOME/.ssh folder i generated rsa1 key "identity" using
"ssh-keygen -t rsa1" command.

some attributes of ssh_config file is as follows
RSAAuthentication yes
IdentityFile ~/.ssh/identity
Protocol 1,2

On Solaris

Under my $HOME/.ssh folder i repeat the same process to generate the
rsa1 key.

attributes of sshd_config file is as follows

Protocol 1
HostKey /usr/local/openssh/etc/ssh_host_key
RSAAuthentication yes
PubkeyAuthentication yes
AuthorizedKeysFile /app/cyclone/.ssh/authorized_keys
IgnoreRhosts yes
PasswordAuthentication yes
PermitEmptyPasswords no

After generating the public key on both systems (AIX and Solaris) i
copied it into the other system's respective .ssh folder. There i
append the "identity.pub" key to "authorized_keys".

I execute the following commnand from AIX system to connect to Solaris.
Our intention is to connect to solaris box using the pass pharase of
the rsa key.

following is the output on the client (AIX) system
---------------------------------------------------
CCSDEV:amtrix:/amtrix/.ssh>ssh -vvv -1 cyclone@192.168.143.51
OpenSSH_3.4p1, SSH protocols 1.5/2.0, OpenSSL 0x0090605f
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug3: Seeding PRNG from /usr/sbin/ssh-rand-helper
debug1: Rhosts Authentication disabled, originating port will not be
trusted.
debug1: ssh_connect: needpriv 0
debug1: Connecting to 192.168.143.51 [192.168.143.51] port 22.
debug1: Connection established.
debug1: identity file /amtrix/.ssh/identity type 0
debug1: Remote protocol version 1.5, remote software version
OpenSSH_3.7.1p2
debug1: match: OpenSSH_3.7.1p2 pat OpenSSH*
debug1: Local version string SSH-1.5-OpenSSH_3.4p1
debug1: Waiting for server public key.
debug1: Received server public key (1152 bits) and host key (1024
bits).
debug3: check_host_in_hostfile: filename /amtrix/.ssh/known_hosts
debug3: check_host_in_hostfile: match line 2
debug1: Host '192.168.143.51' is known and matches the RSA1 host key.
debug1: Found key in /amtrix/.ssh/known_hosts:2
debug1: Encryption type: 3des
debug1: Sent encrypted session key.
debug1: cipher_init: set keylen (16 -> 32)
debug1: cipher_init: set keylen (16 -> 32)
debug1: Installing crc compensation attack detector.
debug1: Received encrypted confirmation.
debug1: Trying RSA authentication with key '/amtrix/.ssh/identity'
debug1: Server refused our key.
debug1: Doing challenge response authentication.
debug1: No challenge.
debug1: Doing password authentication.
cyclone@192.168.143.51's password:

As it can been seen from the log .... Server refused our key.
We are unable to make out the reason behind the connection failure. Can
anyone help to rectify the error. Have spend a lot of time debugging
the error but without the desired output.
Any help is highly appreciated.

Regards
Javed



Relevant Pages

  • Ora-rg could not start using scswitch command!
    ... So oracle server could not be started. ... Is Shockwave Plugin available for Solaris??? ... debug1: read PEM private key done: type RSA ...
    (SunManagers)
  • Re: Public Key problem - CORRECTION
    ... mixture of Sun's, RedHat Linux, and AIX. ... I've been able to get public key ... debug1: got SSH2_MSG_SERVICE_ACCEPT ... debug1: authentications that can continue: ...
    (comp.security.ssh)
  • SSH problem to Solaris 10 : Resource temporarily unavailable
    ... We have a strange problem SSH'ing to some new Solaris 10 installs, ... from similar Solaris 10 builds, the SSH client hangs, and from existing ... debug1: Rhosts Authentication disabled, originating port will not be trusted. ... debug1: We proposed langtags, ctos: en-US ...
    (SunManagers)
  • Re: Kerberos MIT SSH Solaris 9
    ... I'm experiencing some problem on kerberizing ssh on Solaris 9 with MIT ... debug1: read PEM private key done: type RSA ... debug2: Mapping initiator GSS-API principal to local username ... Starting PAM service sshd-gssapi for method gssapi-keyex ...
    (comp.protocols.kerberos)
  • Solaris 10 sshd and OpenSSH 4 client problems
    ... Solaris 10 SPARC with OEM sshd. ... authentication method and goes to keyboard-interactive ... debug1: Connecting to bertha port 22. ... AFS Ignoring superuser root ...
    (SSH)