Re: two users on same machine, one can ssh to another machine, the other can't



"KH" == kiwihughes2000 <kiwihughes2000@xxxxxxxx> writes:

KH> All, I have two users on a machine. There are three other
KH> machines that these users should be able to ssh to. The "from"
KH> machine is setup:

KH> ncsu# ssh -V OpenSSH_4.2p1, OpenSSL 0.9.7h 11 Oct 2005

KH> The "to" machine that is problematic is setup:

KH> $ ssh -V OpenSSH_3.9p1, OpenSSL 0.9.7e 25 Oct 2004

KH> User A can ssh to all three machines without issue; the other user
KH> - B - can ssh to only two of the machines. (I can't tell you what
KH> versions are on the other two machines as I do not have the
KH> password to get in

$ telnet <server> 22

KH> $ ssh -l donkey a.b.c.d
KH> Authorization failed executing: /usr/bin/ssh -l donkey a.b.c.d

This looks like some sort of local restriction, like a restricted shell --
it's not an SSH message.

--
Richard Silverman
res@xxxxxxxx

.



Relevant Pages

  • Re: Can Exceed connect to linux (running Gnome) through SSH?
    ... > -These machines are in two separate physical locations and separated ... Each firewall allows SSH ... Now start xterm and you should see a window pop up" ... > I simply log in through the Gnome login screen and it works. ...
    (comp.os.linux.security)
  • (no subject)
    ... > -These machines are in two separate physical locations and separated ... Each firewall allows SSH ... Now start xterm and you should see a window pop up" ... > I simply log in through the Gnome login screen and it works. ...
    (comp.os.linux.security)
  • Re: Did I give up on telnet too easily?
    ... > If ssh is to be considered 'more secure' than telnet, ... have a mixture of Debian, Red Hat, Trustix, Tru64 Unix, and HP-UX machines. ... theirs isn't OpenSSH based, so it wouldn't have needed updating). ... > etc.) I think a better approach would be to use telnet for remote access. ...
    (comp.os.linux.networking)
  • Re: Did I give up on telnet too easily?
    ... > If ssh is to be considered 'more secure' than telnet, ... have a mixture of Debian, Red Hat, Trustix, Tru64 Unix, and HP-UX machines. ... theirs isn't OpenSSH based, so it wouldn't have needed updating). ... > etc.) I think a better approach would be to use telnet for remote access. ...
    (comp.os.linux.security)
  • Re: SMB vs NFS
    ... >> to only allow the machines you expect to reach you, ... SSH access is restricted to a few IP subnets where I know I'll ... What is so disaster-inviting about running SMB ... What config files is it that you need ...
    (comp.os.linux.networking)