Re: FW: ssh problems

Ciao Andrea,

here what happens on one of my systems in debug mode :

OpenSSH_4.3p1, OpenSSL 0.9.7g 11 Apr 2005
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to demo [192.168.88.179] port 22.
debug1: Connection established.
debug1: identity file /home/matt/.ssh/identity type -1
debug1: identity file /home/matt/.ssh/id_rsa type 1
debug1: identity file /home/matt/.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_4.2
debug1: match: OpenSSH_4.2 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.3
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'demo' is known and matches the RSA host key.
debug1: Found key in /home/matt/.ssh/known_hosts:3
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,gssapi-with-mic,password
debug1: Next authentication method: publickey
debug1: Trying private key: /home/matt/.ssh/identity
debug1: Offering public key: /home/matt/.ssh/id_rsa
debug1: Server accepts key: pkalg ssh-rsa blen 277
debug1: read PEM private key done: type RSA
debug1: Authentication succeeded (publickey).
debug1: channel 0: new [client-session]
debug1: Entering interactive session.
debug1: Requesting X11 forwarding with authentication spoofing.
Last login: Wed Mar 29 10:44:24 2006 from node1

Please try this :

noraml ssh to localhost using password :

[root@demo ~]# ssh localhostroot@localhost's password:
Last login: Wed Mar 29 11:44:31 2006 from localhost.localdomain
[root@demo ~]# logout
Connection to localhost closed.
[root@demo ~]#

This was just for testing, logged out again.
Now :

[root@demo ~]# cat .ssh/id_rsa.pub >> .ssh/authorized_keys2
[root@demo ~]# ssh localhost
Last login: Wed Mar 29 11:44:53 2006 from localhost.localdomain
[root@demo ~]#

and passwordless ssh to localhost works.
The cat command added the rsa-key from localhost to the
.ssh/authorized_key2 file which controls the public key authentification.

This should work for you ;)
Then just copy the content of your .ssh/id_rsa.pub to every
system in your cluster at /root/.ssh/authorized_keys2

hope you will get it working,

Matt




On 3/29/06, Andres De Carlo <[email protected]> wrote:
>
>
>
>
>  ------------------------------
>
> *From:* Andres De Carlo [mailto:[email protected]]
> *Sent:* Tuesday, March 28, 2006 2:19 PM
> *To:* 'openmosix-general-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org'
> *Subject:* ssh problems
>
>
>
> Hi to all:
>
>
>
> I have still problems to configure ssh to make it work with openmosixview.
> I have tried everything so here is the output that I get when I try to
> connect.
>
>
>
> [root@node2 root]# ssh -v 192.168.1.110
>
> OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003
>
> debug1: Reading configuration data /etc/ssh/ssh_config
>
> debug1: Applying options for *
>
> debug1: Connecting to 192.168.1.110 [192.168.1.110] port 22.
>
> debug1: Connection established.
>
> debug1: permanently_set_uid: 0/0
>
> debug1: identity file /root/.ssh/identity type -1
>
> debug1: identity file /root/.ssh/id_rsa type -1
>
> debug1: identity file /root/.ssh/id_dsa type 2
>
> debug1: Remote protocol version 1.99, remote software version
> OpenSSH_3.9p1
>
> debug1: match: OpenSSH_3.9p1 pat OpenSSH*
>
> debug1: Enabling compatibility mode for protocol 2.0
>
> debug1: Local version string SSH-2.0-OpenSSH_3.9p1
>
> debug1: SSH2_MSG_KEXINIT sent
>
> debug1: SSH2_MSG_KEXINIT received
>
> debug1: kex: server->client aes128-cbc hmac-md5 none
>
> debug1: kex: client->server aes128-cbc hmac-md5 none
>
> debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
>
> debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
>
> debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
>
> debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
>
> debug1: Host '192.168.1.110' is known and matches the RSA host key.
>
> debug1: Found key in /root/.ssh/known_hosts:1
>
> debug1: ssh_rsa_verify: signature correct
>
> debug1: SSH2_MSG_NEWKEYS sent
>
> debug1: expecting SSH2_MSG_NEWKEYS
>
> debug1: SSH2_MSG_NEWKEYS received
>
> debug1: SSH2_MSG_SERVICE_REQUEST sent
>
> debug1: SSH2_MSG_SERVICE_ACCEPT received
>
> debug1: Authentications that can continue:
> publickey,password,keyboard-interactive
>
> debug1: Next authentication method: publickey
>
> debug1: Trying private key: /root/.ssh/identity
>
> debug1: Trying private key: /root/.ssh/id_rsa
>
> debug1: Offering public key: /root/.ssh/id_dsa
>
> debug1: Authentications that can continue:
> publickey,password,keyboard-interactive
>
> debug1: Next authentication method: keyboard-interactive
>
> debug1: Authentications that can continue:
> publickey,password,keyboard-interactive
>
> debug1: Next authentication method: password
>
> [email protected]'s password:
>
> debug1: Authentication succeeded (password).
>
> debug1: channel 0: new [client-session]
>
> debug1: Entering interactive session.
>
> debug1: Requesting X11 forwarding with authentication spoofing.
>
> Last login: Tue Mar 28 13:39:24 2006 from 192.168.1.105
>
> [root@node6 root]#
>
>
>
> So as you can see I don't get prompt for the passphrase only the password
> and I know it is reading the file etc/ssh/sshd_config but I can't figure out
> why is not taking the passphase that I generate and only the password. I can
> login if I use my root password, so I don't know what I am doing wrong or
> what I should change in sshd_config. By the way I am trying to use no
> password, I don't know if that's why I don't get prompt for the password I
> thought I should anyways.
>
>
>
> Thanks in advance and thanks for the ones that have reply my old emails.
>
>
>
> Andy
>
>
>