|
ru.unix.bsd- RU.UNIX.BSD ------------------------------------------------------------------ From : Sergei Simonenko 2:462/177.44 24 Jul 2001 23:24:36 To : All Subject : SSHD troubles -------------------------------------------------------------------------------- Hi, All! ppl, в чем дело? на фре 4.3 sshd упорно не хочет пускать меня по public-key. Всё время требует пароль. Key-phrase в ключе пустая. Конфиг sshd нормальный, на Slackware 8.0 с таким же конфигом sshd пускает без проблем. ~/.rhosts на сервере имеют 600 permission, клиент в них записан в ~/.ssh/authorized_keys(2) всё тоже нормально. SSH FAQ проштудировал, ответа не нашел. Где грабли? вот кусок лога (в debug mode:) Jul 24 23:10:07 acid sshd[57066]: Connection from gigabit.g-net port 32791 Jul 24 23:10:07 acid sshd[57066]: Connection from 172.16.1.2 port 32791 Jul 24 23:10:07 acid sshd[57066]: debug1: Client protocol version 2.0; client software version OpenSSH_2.9p1 Jul 24 23:10:07 acid sshd[57066]: debug1: no match: OpenSSH_2.9p1 Jul 24 23:10:07 acid sshd[57066]: Enabling compatibility mode for protocol 2.0 Jul 24 23:10:07 acid sshd[57066]: debug1: Local version string SSH-1.99-OpenSSH_2.3.0 green@FreeBSD.org 20010321 Jul 24 23:10:07 acid sshd[57066]: debug1: send KEXINIT Jul 24 23:10:07 acid sshd[57066]: debug1: done Jul 24 23:10:07 acid sshd[57066]: debug1: wait KEXINIT Jul 24 23:10:07 acid sshd[57066]: debug1: got kexinit: diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 Jul 24 23:10:07 acid sshd[57066]: debug1: got kexinit: ssh-rsa,ssh-dss Jul 24 23:10:07 acid sshd[57066]: debug1: got kexinit: 3des-cbc,blowfish-cbc,cast128-cbc,arcfour Jul 24 23:10:07 acid sshd[57066]: debug1: got kexinit: 3des-cbc,blowfish-cbc,cast128-cbc,arcfour Jul 24 23:10:07 acid sshd[57066]: debug1: got kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96, hmac-md5-96 Jul 24 23:10:07 acid sshd[57066]: debug1: got kexinit: hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96, hmac-md5-96 Jul 24 23:10:07 acid sshd[57066]: debug1: got kexinit: none Jul 24 23:10:07 acid sshd[57066]: debug1: got kexinit: none Jul 24 23:10:07 acid sshd[57066]: debug1: got kexinit: Jul 24 23:10:07 acid sshd[57066]: debug1: got kexinit: Jul 24 23:10:07 acid sshd[57066]: debug1: first kex follow: 0 Jul 24 23:10:07 acid sshd[57066]: debug1: reserved: 0 Jul 24 23:10:07 acid sshd[57066]: debug1: done Jul 24 23:10:07 acid sshd[57066]: debug1: kex: client->server 3des-cbc hmac-md5 none Jul 24 23:10:07 acid sshd[57066]: debug1: kex: server->client 3des-cbc hmac-md5 none Jul 24 23:10:07 acid sshd[57066]: debug1: Wait SSH2_MSG_KEX_DH_GEX_REQUEST. Jul 24 23:10:08 acid sshd[57066]: WARNING: /etc/ssh/primes does not exist, using old prime Jul 24 23:10:08 acid sshd[57066]: debug1: bits set: 491/1024 Jul 24 23:10:08 acid sshd[57066]: debug1: Sending SSH2_MSG_KEX_DH_GEX_GROUP. Jul 24 23:10:08 acid sshd[57066]: debug1: Wait SSH2_MSG_KEX_DH_GEX_INIT. Jul 24 23:10:08 acid sshd[57066]: debug1: bits set: 517/1024 Jul 24 23:10:08 acid sshd[57066]: debug1: sig size 20 20 Jul 24 23:10:08 acid sshd[57066]: debug1: send SSH2_MSG_NEWKEYS. Jul 24 23:10:08 acid sshd[57066]: debug1: done: send SSH2_MSG_NEWKEYS. Jul 24 23:10:08 acid sshd[57066]: debug1: Wait SSH2_MSG_NEWKEYS. Jul 24 23:10:08 acid sshd[57066]: debug1: GOT SSH2_MSG_NEWKEYS. Jul 24 23:10:08 acid sshd[57066]: debug1: done: KEX2. Jul 24 23:10:08 acid sshd[57066]: debug1: userauth-request for user gig service ssh-connection method none Jul 24 23:10:08 acid sshd[57066]: debug1: attempt #1 Jul 24 23:10:08 acid sshd[57066]: debug1: Starting up PAM with username "gig" Jul 24 23:10:09 acid sshd[57066]: debug1: PAM Password authentication for "gig" failed[7]: Authentication failure Jul 24 23:10:09 acid sshd[57066]: Failed none for gig from 172.16.1.2 port 32791 ssh2 Jul 24 23:10:09 acid sshd[57066]: Connection closed by 172.16.1.2 Jul 24 23:10:09 acid sshd[57066]: debug1: Calling cleanup 0x80592e4(0x0) Jul 24 23:10:09 acid sshd[57066]: debug1: Calling cleanup 0x8062be8(0x0) (отваливается сразу потому что я авторизацию по паролю на серваке запретил) -- WBR, Sergei --- ifmail v.2.15 * Origin: G-NET (2:462/177.44@fidonet) Вернуться к списку тем, сортированных по: возрастание даты уменьшение даты тема автор
Архивное /ru.unix.bsd/42009e382118.html, оценка из 5, голосов 10
|