Find the answer to your Linux question:
Results 1 to 4 of 4
Hi all ! Plz help me to debug the following issue I have a billing system running on 192.168.16.69 (SunOS) and a file server accesible via ssh on 192.168.16.70 (CEntOS) ...
  1. #1
    Just Joined!
    Join Date
    Dec 2011
    Posts
    2

    SSHd authentication by keys fails

    Hi all !

    Plz help me to debug the following issue

    I have a billing system running on 192.168.16.69 (SunOS) and a file server accesible via ssh on 192.168.16.70 (CEntOS)

    - The billing system produce a daily dump file whose backup copy must be stored on file server, and this backup process is realized by rsync/scp.

    - I have generated a couple of public/private keys on host 69 and put the public key on host 70 (the public key is copied in authorized_keys,with all right permissions - 600) for authentication.

    - But when I tried to connect, the server continue to ask me for the password
    Does anybody know how to debug this issue?
    Thank in advance.

    bash-3.00$ ssh -v -i backup69-rsa -p 222 backuper at 192.168.16.70
    Sun_SSH_1.1, SSH protocols 1.5/2.0, OpenSSL 0x0090704f
    debug1: Reading configuration data /etc/ssh/ssh_config
    debug1: Rhosts Authentication disabled, originating port will not be trusted.
    debug1: ssh_connect: needpriv 0
    debug1: Connecting to 192.168.16.70 [192.168.16.70] port 222.
    debug1: Connection established.
    debug1: identity file backup69-rsa type 1
    debug1: Remote protocol version 2.0, remote software version OpenSSH_4.3
    debug1: match: OpenSSH_4.3 pat OpenSSH*
    debug1: Enabling compatibility mode for protocol 2.0
    debug1: Local version string SSH-2.0-Sun_SSH_1.1
    debug1: Failed to acquire GSS-API credentials for any mechanisms (No credentials were supplied, or the credentials were unavailable or inaccessible
    Unknown code 0
    )
    debug1: SSH2_MSG_KEXINIT sent
    debug1: SSH2_MSG_KEXINIT received
    debug1: kex: server->client aes128-ctr hmac-md5 none
    debug1: kex: client->server aes128-ctr hmac-md5 none
    debug1: Peer sent proposed langtags, ctos:
    debug1: Peer sent proposed langtags, stoc:
    debug1: We proposed langtags, ctos: i-default
    debug1: We proposed langtags, stoc: i-default
    debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
    debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
    debug1: dh_gen_key: priv key bits set: 137/256
    debug1: bits set: 1033/2048
    debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
    debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
    debug1: Host '192.168.16.70' is known and matches the RSA host key.
    debug1: Found key in /export/home/oracle/.ssh/known_hosts:1
    debug1: bits set: 1051/2048
    debug1: ssh_rsa_verify: signature correct
    debug1: newkeys: mode 1
    debug1: SSH2_MSG_NEWKEYS sent
    debug1: expecting SSH2_MSG_NEWKEYS
    debug1: newkeys: mode 0
    debug1: SSH2_MSG_NEWKEYS received
    debug1: done: ssh_kex2.
    debug1: send SSH2_MSG_SERVICE_REQUEST
    debug1: got SSH2_MSG_SERVICE_ACCEPT
    debug1: Authentications that can continue: publickey,gssapi-with-mic,password
    debug1: Next authentication method: gssapi-with-mic
    debug1: Failed to acquire GSS-API credentials for any mechanisms (No credentials were supplied, or the credentials were unavailable or inaccessible
    Unknown code 0
    )
    debug1: Next authentication method: publickey
    debug1: Trying public key: backup69-rsa
    debug1: Authentications that can continue: publickey,gssapi-with-mic,password
    debug1: Next authentication method: password
    backuper at 192.168.16.70's password:

  2. #2
    Linux Guru Rubberman's Avatar
    Join Date
    Apr 2009
    Location
    I can be found either 40 miles west of Chicago, or in a galaxy far, far away.
    Posts
    8,974
    Try removing the keys in question from both the server and the client, then reconnect w/ password so they can exchange keys again.
    Sometimes, real fast is almost as good as real time.
    Just remember, Semper Gumbi - always be flexible!

  3. #3
    Just Joined!
    Join Date
    Dec 2011
    Posts
    2
    I removed................. But no change !

  4. #4
    Linux Guru Rubberman's Avatar
    Join Date
    Apr 2009
    Location
    I can be found either 40 miles west of Chicago, or in a galaxy far, far away.
    Posts
    8,974
    Shrug... Well, I'm not an ssh expert, but that has worked for me in the past. At this point, perhaps someone else has a better idea.
    Sometimes, real fast is almost as good as real time.
    Just remember, Semper Gumbi - always be flexible!

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
...