Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

SSH on Solaris 9

Status
Not open for further replies.

reinstalled

IS-IT--Management
Feb 18, 2003
178

Hi,

We connect to our client remote servers via ssh. We set up a tunnel from a
server here to their server
redirecting all tcp ports to flow over the tunnel. Authentication is done
via key exchange where during set up we copy the appropriate key over to the
remote system. We run Solaris 8, 9, and 10 and have zero problems with all
servers except one. This is a Solaris 9 box running the build in version of
open-ssh.
Key exchange just will not work. We are prompted for password every time. No
error messages or anything to indicate an issue. I've even disabled the
built in ssh and installed open-ssh from scratch with no change. Here's part
of the verbose output:

debug1: ssh_rsa_verify: signature correct
debug1: kex_derive_keys
debug1: newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: waiting for SSH2_MSG_NEWKEYS
debug1: newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: done: ssh_kex2.
debug1: send SSH2_MSG_SERVICE_REQUEST
debug1: service_accept: ssh-userauth
debug1: got SSH2_MSG_SERVICE_ACCEPT
debug1: authentications that can continue:
publickey,password,keyboard-interactive
debug1: next auth method to try is publickey
debug1: try privkey: /home/sshvpn/.ssh/id_rsa
debug1: try pubkey: /home/sshvpn/.ssh/id_dsa
debug1: authentications that can continue:
publickey,password,keyboard-interactive
debug1: next auth method to try is keyboard-interactive
debug1: authentications that can continue:
publickey,password,keyboard-interactive
debug1: next auth method to try is password


Any suggestions on where to look at next?
 
Run the sshd in debug mode and it should tell you why it's refusing authentication.

Annihilannic.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top