Re: two users on same machine, one can ssh to another machine, the other can't



kiwihughes2000@xxxxxxxx writes:

All,

I have two users on a machine. There are three other machines that
these users should be able to ssh to. The "from" machine is setup:

ncsu# ssh -V
OpenSSH_4.2p1, OpenSSL 0.9.7h 11 Oct 2005

The "to" machine that is problematic is setup:

$ ssh -V
OpenSSH_3.9p1, OpenSSL 0.9.7e 25 Oct 2004

User A can ssh to all three machines without issue; the other user - B
- can ssh to only two of the machines. (I can't tell you what versions
are on the other two machines as I do not have the password to get in,
but the ssh call from the "from" machine gets the expected "Password"
prompts.)

When I set the debug level to DEBUG3 on the "from" machine and using
user A, I get lots of debug output. When using user B, I get:

$ ssh -l donkey a.b.c.d

Authorization failed executing: /usr/bin/ssh -l donkey a.b.c.d

I took a look at the code - it seems that user B's attempt to get to
a.b.c.d bails before attempting to connect. Any assistance would be
appreciated.

ssh -vvv -l donkey a.b.c.d
for very verbose output.

Also are you sure that ssh is not a script in B's directory or something?
Do you hae problem if you do /usr/bin/ssh -l donkey a.b.c.d as well?



.



Relevant Pages

  • Re: Can Exceed connect to linux (running Gnome) through SSH?
    ... > -These machines are in two separate physical locations and separated ... Each firewall allows SSH ... Now start xterm and you should see a window pop up" ... > I simply log in through the Gnome login screen and it works. ...
    (comp.os.linux.security)
  • (no subject)
    ... > -These machines are in two separate physical locations and separated ... Each firewall allows SSH ... Now start xterm and you should see a window pop up" ... > I simply log in through the Gnome login screen and it works. ...
    (comp.os.linux.security)
  • Re: Did I give up on telnet too easily?
    ... > If ssh is to be considered 'more secure' than telnet, ... have a mixture of Debian, Red Hat, Trustix, Tru64 Unix, and HP-UX machines. ... theirs isn't OpenSSH based, so it wouldn't have needed updating). ... > etc.) I think a better approach would be to use telnet for remote access. ...
    (comp.os.linux.networking)
  • Re: Did I give up on telnet too easily?
    ... > If ssh is to be considered 'more secure' than telnet, ... have a mixture of Debian, Red Hat, Trustix, Tru64 Unix, and HP-UX machines. ... theirs isn't OpenSSH based, so it wouldn't have needed updating). ... > etc.) I think a better approach would be to use telnet for remote access. ...
    (comp.os.linux.security)
  • Re: SMB vs NFS
    ... >> to only allow the machines you expect to reach you, ... SSH access is restricted to a few IP subnets where I know I'll ... What is so disaster-inviting about running SMB ... What config files is it that you need ...
    (comp.os.linux.networking)