problem with HostbasedAuthentication
Mahmood Naderan <[email protected]> Mon, 25 Apr 2011 22:58:24 -0700 (PDT)
| Newsgroups | gmane.network.openssh.general |
|---|---|
| Message-ID | <[email protected]> |
=0A=0AHi,=0AI am trying to setup a hostbased passwrodless ssh from a client= to a server using this guide http://www.ehow.com/how_7621307_set-up-hostba= sed-authentication.html.=0A=0AThe client looks like:=0A=0Amahmood@client:~$= cat /etc/ssh/ssh_config=A0 | grep "HostbasedAuthentication"=0A=A0=A0 Hostb= asedAuthentication yes=A0=0Amahmood@client:~$ cat /etc/ssh/ssh_config=A0 | = grep "EnableSSHKeysign"=0A=A0=A0 EnableSSHKeysign yes=0A=0A=0Aand the serve= r looks like:=0Amahmood@server:~$ cat /etc/ssh/sshd_config=A0 | grep "Hostb= asedAuthentication"=0AHostbasedAuthentication yes=A0=0Amahmood@server:~$ ca= t /etc/ssh/sshd_config=A0 | grep "IgnoreRhosts"=0AIgnoreRhosts no=A0=0A=0Aa= lso the server has the key for client:=0A=0Amahmood@server:~$ cat /etc/ssh/= ssh_known_hosts=A0=0Aclient ssh-rsa AAAAB3Nz.....=0A=0Athe ~/.shosts file o= n the server contains:=0Amahmood@server:~$ cat .shosts=A0=0Aclient.domain m= ahmood=0A=0AThen on both server and client, the ssh service is restarted:= =0Amahmood@client:~$ sudo service ssh restart=0Assh start/running, process = 1355=0Amahmood@server:~$ sudo service ssh restart=0Assh start/running, proc= ess 28982=0A=0AHow, when I run "ssh -vvv server" from client (to show the v= erbose messages), I still get the password prompt.=A0=0A=0Amahmood@client:~= $ ssh -vvv server=0AOpenSSH_5.3p1 Debian-3ubuntu6, OpenSSL 0.9.8k 25 Mar 20= 09=0Adebug1: Reading configuration data /etc/ssh/ssh_config=0Adebug1: Apply= ing options for *=0Adebug2: ssh_connect: needpriv 0=0Adebug1: Connecting to= server [192.168.1.1] port 22.=0Adebug1: Connection established.=0Adebug1: = identity file /home/mahmood/.ssh/identity type -1=0Adebug1: identity file /= home/mahmood/.ssh/id_rsa type -1=0Adebug1: identity file /home/mahmood/.ssh= /id_dsa type -1=0Adebug1: Remote protocol version 2.0, remote software vers= ion OpenSSH_5.3p1 Debian-3ubuntu4=0Adebug1: match: OpenSSH_5.3p1 Debian-3ub= untu4 pat OpenSSH*=0Adebug1: Enabling compatibility mode for protocol 2.0= =0Adebug1: Local version string SSH-2.0-OpenSSH_5.3p1 Debian-3ubuntu6=0Adeb= ug2: fd 3 setting O_NONBLOCK=0Adebug1: SSH2_MSG_KEXINIT sent=0Adebug3: Wrot= e 792 bytes for a total of 831=0Adebug1: SSH2_MSG_KEXINIT received=0Adebug2= : kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-gr= oup-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-=0Agroup1-sha1= =0Adebug2: kex_parse_kexinit: ssh-rsa,ssh-dss=0Adebug2: kex_parse_kexinit: = aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,= blowfish-cbc,cast128-cbc,aes192-=0Acbc,aes256-cbc,arcfour,rijndael-cbc@lysa= tor.liu.se=0Adebug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,ar= cfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-=0A= cbc,aes256-cbc,arcfour,[email protected]=0Adebug2: kex_parse_kexi= nit: hmac-md5,hmac-sha1,[email protected],hmac-ripemd160,hmac-ripemd160@o= penssh.com,hmac-sha1-96,hmac-=0Amd5-96=0Adebug2: kex_parse_kexinit: hmac-md= 5,hmac-sha1,[email protected],hmac-ripemd160,[email protected],h= mac-sha1-96,hmac-=0Amd5-96=0Adebug2: kex_parse_kexinit: none,[email protected]= om,zlib=0Adebug2: kex_parse_kexinit: none,[email protected],zlib=0Adebug2: k= ex_parse_kexinit:=A0=0Adebug2: kex_parse_kexinit:=A0=0Adebug2: kex_parse_ke= xinit: first_kex_follows 0=A0=0Adebug2: kex_parse_kexinit: reserved 0=A0=0A= debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hell= man-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-=0Agroup= 1-sha1=0Adebug2: kex_parse_kexinit: ssh-rsa,ssh-dss=0Adebug2: kex_parse_kex= init: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3de= s-cbc,blowfish-cbc,cast128-cbc,aes192-=0Acbc,aes256-cbc,arcfour,rijndael-cb= [email protected]=0Adebug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-= ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes1= 92-=0Acbc,aes256-cbc,arcfour,[email protected]=0Adebug2: kex_pars= e_kexinit: hmac-md5,hmac-sha1,[email protected],hmac-ripemd160,hmac-ripem= [email protected],hmac-sha1-96,hmac-=0Amd5-96=0Adebug2: kex_parse_kexinit: h= mac-md5,hmac-sha1,[email protected],hmac-ripemd160,hmac-ripemd160@openssh= .com,hmac-sha1-96,hmac-=0Amd5-96=0Adebug2: kex_parse_kexinit: none,zlib@ope= nssh.com=0Adebug2: kex_parse_kexinit: none,[email protected]=0Adebug2: kex_p= arse_kexinit:=A0=0Adebug2: kex_parse_kexinit:=A0=0Adebug2: kex_parse_kexini= t: first_kex_follows 0=A0=0Adebug2: kex_parse_kexinit: reserved 0=A0=0Adebu= g2: mac_setup: found hmac-md5=0Adebug1: kex: server->client aes128-ctr hmac= -md5 none=0Adebug2: mac_setup: found hmac-md5=0Adebug1: kex: client->server= aes128-ctr hmac-md5 none=0Adebug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8= 192) sent=0Adebug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP=0Adebug3: Wrote 24 = bytes for a total of 855=0Adebug2: dh_gen_key: priv key bits set: 124/256= =0Adebug2: bits set: 507/1024=0Adebug1: SSH2_MSG_KEX_DH_GEX_INIT sent=0Adeb= ug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY=0Adebug3: Wrote 144 bytes for a to= tal of 999=0Adebug3: check_host_in_hostfile: filename /home/mahmood/.ssh/kn= own_hosts=0Adebug3: check_host_in_hostfile: match line 1=0Adebug3: check_ho= st_in_hostfile: filename /home/mahmood/.ssh/known_hosts=0Adebug3: check_hos= t_in_hostfile: match line 2=0Adebug1: Host 'server' is known and matches th= e RSA host key.=0Adebug1: Found key in /home/mahmood/.ssh/known_hosts:1=0Ad= ebug2: bits set: 503/1024=0Adebug1: ssh_rsa_verify: signature correct=0Adeb= ug2: kex_derive_keys=0Adebug2: set_newkeys: mode 1=0Adebug1: SSH2_MSG_NEWKE= YS sent=0Adebug1: expecting SSH2_MSG_NEWKEYS=0Adebug3: Wrote 16 bytes for a= total of 1015=0Adebug2: set_newkeys: mode 0=0Adebug1: SSH2_MSG_NEWKEYS rec= eived=0Adebug1: SSH2_MSG_SERVICE_REQUEST sent=0Adebug3: Wrote 48 bytes for = a total of 1063=0Adebug2: service_accept: ssh-userauth=0Adebug1: SSH2_MSG_S= ERVICE_ACCEPT received=0Adebug2: key: /home/mahmood/.ssh/identity ((nil))= =0Adebug2: key: /home/mahmood/.ssh/id_rsa ((nil))=0Adebug2: key: /home/mahm= ood/.ssh/id_dsa ((nil))=0Adebug3: Wrote 64 bytes for a total of 1127=0Adebu= g1: Authentications that can continue: publickey,password,hostbased=0Adebug= 3: start over, passed a different list publickey,password,hostbased=0Adebug= 3: preferred gssapi-keyex,gssapi-with-mic,gssapi,hostbased,publickey,keyboa= rd-interactive,password=0Adebug3: authmethod_lookup hostbased=0Adebug3: rem= aining preferred: publickey,keyboard-interactive,password=0Adebug3: authmet= hod_is_enabled hostbased=0Adebug1: Next authentication method: hostbased=0A= debug2: userauth_hostbased: chost client.=0Adebug2: ssh_keysign called=0Ade= bug3: ssh_msg_send: type 2=0Adebug3: ssh_msg_recv entering=0Adebug1: perman= ently_drop_suid: 1000=0Adebug2: we sent a hostbased packet, wait for reply= =0Adebug3: Wrote 608 bytes for a total of 1735=0Adebug1: Authentications th= at can continue: publickey,password,hostbased=0Adebug2: userauth_hostbased:= chost client.=0Adebug2: ssh_keysign called=0Adebug3: ssh_msg_send: type 2= =0Adebug3: ssh_msg_recv entering=0Adebug1: permanently_drop_suid: 1000=0Ade= bug2: we sent a hostbased packet, wait for reply=0Adebug3: Wrote 672 bytes = for a total of 2407=0Adebug1: Authentications that can continue: publickey,= password,hostbased=0Adebug1: No more client hostkeys for hostbased authenti= cation.=0Adebug2: we did not send a packet, disable method=0Adebug3: authme= thod_lookup publickey=0Adebug3: remaining preferred: keyboard-interactive,p= assword=0Adebug3: authmethod_is_enabled publickey=0Adebug1: Next authentica= tion method: publickey=0Adebug1: Trying private key: /home/mahmood/.ssh/ide= ntity=0Adebug3: no such identity: /home/mahmood/.ssh/identity=0Adebug1: Try= ing private key: /home/mahmood/.ssh/id_rsa=0Adebug3: no such identity: /hom= e/mahmood/.ssh/id_rsa=0Adebug1: Trying private key: /home/mahmood/.ssh/id_d= sa=0Adebug3: no such identity: /home/mahmood/.ssh/id_dsa=0Adebug2: we did n= ot send a packet, disable method=0Adebug3: authmethod_lookup password=0Adeb= ug3: remaining preferred: ,password=0Adebug3: authmethod_is_enabled passwor= d=0Adebug1: Next authentication method: password=0Amahmood@server's passwor= d:=A0=0A=0A=0AAny idea about that?=0A=A0=0A// Naderan *Mahmood;=0A