Results 1 to 4 of 4
Hi all !
Plz help me to debug the following issue
I have a billing system running on 192.168.16.69 (SunOS) and a file server accesible via ssh on 192.168.16.70 (CEntOS)
...
- 12-27-2011 #1Just Joined!
- Join Date
- Dec 2011
- Posts
- 2
SSHd authentication by keys fails
Hi all !
Plz help me to debug the following issue
I have a billing system running on 192.168.16.69 (SunOS) and a file server accesible via ssh on 192.168.16.70 (CEntOS)
- The billing system produce a daily dump file whose backup copy must be stored on file server, and this backup process is realized by rsync/scp.
- I have generated a couple of public/private keys on host 69 and put the public key on host 70 (the public key is copied in authorized_keys,with all right permissions - 600) for authentication.
- But when I tried to connect, the server continue to ask me for the password
Does anybody know how to debug this issue?
Thank in advance.
bash-3.00$ ssh -v -i backup69-rsa -p 222 backuper at 192.168.16.70
Sun_SSH_1.1, SSH protocols 1.5/2.0, OpenSSL 0x0090704f
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: ssh_connect: needpriv 0
debug1: Connecting to 192.168.16.70 [192.168.16.70] port 222.
debug1: Connection established.
debug1: identity file backup69-rsa type 1
debug1: Remote protocol version 2.0, remote software version OpenSSH_4.3
debug1: match: OpenSSH_4.3 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-Sun_SSH_1.1
debug1: Failed to acquire GSS-API credentials for any mechanisms (No credentials were supplied, or the credentials were unavailable or inaccessible
Unknown code 0
)
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-ctr hmac-md5 none
debug1: kex: client->server aes128-ctr hmac-md5 none
debug1: Peer sent proposed langtags, ctos:
debug1: Peer sent proposed langtags, stoc:
debug1: We proposed langtags, ctos: i-default
debug1: We proposed langtags, stoc: i-default
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: dh_gen_key: priv key bits set: 137/256
debug1: bits set: 1033/2048
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host '192.168.16.70' is known and matches the RSA host key.
debug1: Found key in /export/home/oracle/.ssh/known_hosts:1
debug1: bits set: 1051/2048
debug1: ssh_rsa_verify: signature correct
debug1: newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: done: ssh_kex2.
debug1: send SSH2_MSG_SERVICE_REQUEST
debug1: got SSH2_MSG_SERVICE_ACCEPT
debug1: Authentications that can continue: publickey,gssapi-with-mic,password
debug1: Next authentication method: gssapi-with-mic
debug1: Failed to acquire GSS-API credentials for any mechanisms (No credentials were supplied, or the credentials were unavailable or inaccessible
Unknown code 0
)
debug1: Next authentication method: publickey
debug1: Trying public key: backup69-rsa
debug1: Authentications that can continue: publickey,gssapi-with-mic,password
debug1: Next authentication method: password
backuper at 192.168.16.70's password:
- 12-27-2011 #2Linux Guru
- Join Date
- Apr 2009
- Location
- I can be found either 40 miles west of Chicago, or in a galaxy far, far away.
- Posts
- 8,974
Try removing the keys in question from both the server and the client, then reconnect w/ password so they can exchange keys again.
Sometimes, real fast is almost as good as real time.
Just remember, Semper Gumbi - always be flexible!
- 12-27-2011 #3Just Joined!
- Join Date
- Dec 2011
- Posts
- 2
I removed................. But no change !
- 12-27-2011 #4Linux Guru
- Join Date
- Apr 2009
- Location
- I can be found either 40 miles west of Chicago, or in a galaxy far, far away.
- Posts
- 8,974
Shrug... Well, I'm not an ssh expert, but that has worked for me in the past. At this point, perhaps someone else has a better idea.
Sometimes, real fast is almost as good as real time.
Just remember, Semper Gumbi - always be flexible!


Reply With Quote