[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] openssh install not authenticating
- Subject: Re: [cobalt-users] openssh install not authenticating
- From: "Bill Gibbs" <bgibbs@xxxxxxxxxxxxx>
- Date: Fri Nov 15 14:54:01 2002
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
I only have a RAQ550, but this might help you.
What does your /etc/pam.d/sshd look like?
#%PAM-1.0
auth required /lib/security/pam_stack.so service=system-auth
auth required /lib/security/pam_nologin.so
account required /lib/security/pam_stack.so service=system-auth
password required /lib/security/pam_stack.so service=system-auth
session required /lib/security/pam_stack.so service=system-auth
session required /lib/security/pam_limits.so
session optional /lib/security/pam_console.so
Bill
On Fri, 15 Nov 2002 14:27:59 -0800 (PST), Anthony Ettinger wrote
> Hello,
>
> I just downloaded the latest openssh version 3.5p1 and
> performed a default install it on my cobalt system.
>
> I am having trouble, when I try to ssh in from a
> remote (or local) host, I get password authentication
> errors even though my account can login via telnet no
> problem.
>
> I've been hitting my head against the wall here.
>
> I have run sshd -d (the debug option) here are the
> results if this helps (I changed my IP to
> xxx.xxx.xxx.xxx)...
>
> ========== debug output ===========
>
> debug1: sshd version OpenSSH_3.5p1
> debug1: private host key: #0 type 0 RSA1
> debug1: read PEM private key done: type RSA
> debug1: private host key: #1 type 1 RSA
> debug1: read PEM private key done: type DSA
> debug1: private host key: #2 type 2 DSA
> socket: Invalid argument
> debug1: Bind to port 22 on 0.0.0.0.
> Server listening on 0.0.0.0 port 22.
> Generating 768 bit RSA key.
> RSA key generation complete.
> debug1: Server will not fork when running in debugging
> mode.
> Connection from 209.61.157.236 port 3228
> debug1: Client protocol version 2.0; client software
> version OpenSSH_3.4p1
> debug1: match: OpenSSH_3.4p1 pat OpenSSH*
> debug1: Enabling compatibility mode for protocol 2.0
> debug1: Local version string SSH-1.99-OpenSSH_3.5p1
> debug1: permanently_set_uid: 503/503
> debug1: list_hostkey_types: ssh-rsa,ssh-dss
> debug1: SSH2_MSG_KEXINIT sent
> debug1: SSH2_MSG_KEXINIT received
> debug1: kex: client->server aes128-cbc hmac-md5 none
> debug1: kex: server->client aes128-cbc hmac-md5 none
> debug1: SSH2_MSG_KEX_DH_GEX_REQUEST received
> debug1: SSH2_MSG_KEX_DH_GEX_GROUP sent
> debug1: dh_gen_key: priv key bits set: 123/256
> debug1: bits set: 1597/3191
> debug1: expecting SSH2_MSG_KEX_DH_GEX_INIT
> debug1: bits set: 1592/3191
> debug1: SSH2_MSG_KEX_DH_GEX_REPLY sent
> debug1: kex_derive_keys
> debug1: newkeys: mode 1
> debug1: SSH2_MSG_NEWKEYS sent
> debug1: waiting for SSH2_MSG_NEWKEYS
> debug1: newkeys: mode 0
> debug1: SSH2_MSG_NEWKEYS received
> debug1: KEX done
> debug1: userauth-request for user admin service
> ssh-connection method none
> debug1: attempt 0 failures 0
> Failed none for admin from xxx.xxx.xxx.xxx port 3228
> ssh2
> Failed none for admin from xxx.xxx.xxx.xxx port 3228
> ssh2
> debug1: userauth-request for user admin service
> ssh-connection method keyboard-interactive
> debug1: attempt 1 failures 1
> debug1: keyboard-interactive devs
> debug1: auth2_challenge: user=admin devs=
> debug1: kbdint_alloc: devices ''
> Failed keyboard-interactive for admin from
> xxx.xxx.xxx.xxx port 3228 ssh2
> debug1: userauth-request for user admin service
> ssh-connection method password
> debug1: attempt 2 failures 2
> Failed password for admin from xxx.xxx.xxx.xxx port
> 3228 ssh2
> Failed password for admin from xxx.xxx.xxx.xxx port
> 3228 ssh2
> Connection closed by xxx.xxx.xxx.xxx
> debug1: Calling cleanup 0x806b964(0x0)
>
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Web Hosting - Let the expert host your site
> http://webhosting.yahoo.com
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
--
Open WebMail Project (http://openwebmail.org)