problem with HostbasedAuthentication

Mahmood Naderan <[email protected]> Mon, 25 Apr 2011 22:58:24 -0700 (PDT)
Newsgroups gmane.network.openssh.general
Message-ID <[email protected]>
=0A=0AHi,=0AI am trying to setup a hostbased passwrodless ssh from a client=
 to a server using this guide http://www.ehow.com/how_7621307_set-up-hostba=
sed-authentication.html.=0A=0AThe client looks like:=0A=0Amahmood@client:~$=
 cat /etc/ssh/ssh_config=A0 | grep "HostbasedAuthentication"=0A=A0=A0 Hostb=
asedAuthentication yes=A0=0Amahmood@client:~$ cat /etc/ssh/ssh_config=A0 | =
grep "EnableSSHKeysign"=0A=A0=A0 EnableSSHKeysign yes=0A=0A=0Aand the serve=
r looks like:=0Amahmood@server:~$ cat /etc/ssh/sshd_config=A0 | grep "Hostb=
asedAuthentication"=0AHostbasedAuthentication yes=A0=0Amahmood@server:~$ ca=
t /etc/ssh/sshd_config=A0 | grep "IgnoreRhosts"=0AIgnoreRhosts no=A0=0A=0Aa=
lso the server has the key for client:=0A=0Amahmood@server:~$ cat /etc/ssh/=
ssh_known_hosts=A0=0Aclient ssh-rsa AAAAB3Nz.....=0A=0Athe ~/.shosts file o=
n the server contains:=0Amahmood@server:~$ cat .shosts=A0=0Aclient.domain m=
ahmood=0A=0AThen on both server and client, the ssh service is restarted:=
=0Amahmood@client:~$ sudo service ssh restart=0Assh start/running, process =
1355=0Amahmood@server:~$ sudo service ssh restart=0Assh start/running, proc=
ess 28982=0A=0AHow, when I run "ssh -vvv server" from client (to show the v=
erbose messages), I still get the password prompt.=A0=0A=0Amahmood@client:~=
$ ssh -vvv server=0AOpenSSH_5.3p1 Debian-3ubuntu6, OpenSSL 0.9.8k 25 Mar 20=
09=0Adebug1: Reading configuration data /etc/ssh/ssh_config=0Adebug1: Apply=
ing options for *=0Adebug2: ssh_connect: needpriv 0=0Adebug1: Connecting to=
 server [192.168.1.1] port 22.=0Adebug1: Connection established.=0Adebug1: =
identity file /home/mahmood/.ssh/identity type -1=0Adebug1: identity file /=
home/mahmood/.ssh/id_rsa type -1=0Adebug1: identity file /home/mahmood/.ssh=
/id_dsa type -1=0Adebug1: Remote protocol version 2.0, remote software vers=
ion OpenSSH_5.3p1 Debian-3ubuntu4=0Adebug1: match: OpenSSH_5.3p1 Debian-3ub=
untu4 pat OpenSSH*=0Adebug1: Enabling compatibility mode for protocol 2.0=
=0Adebug1: Local version string SSH-2.0-OpenSSH_5.3p1 Debian-3ubuntu6=0Adeb=
ug2: fd 3 setting O_NONBLOCK=0Adebug1: SSH2_MSG_KEXINIT sent=0Adebug3: Wrot=
e 792 bytes for a total of 831=0Adebug1: SSH2_MSG_KEXINIT received=0Adebug2=
: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-gr=
oup-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-=0Agroup1-sha1=
=0Adebug2: kex_parse_kexinit: ssh-rsa,ssh-dss=0Adebug2: kex_parse_kexinit: =
aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,=
blowfish-cbc,cast128-cbc,aes192-=0Acbc,aes256-cbc,arcfour,rijndael-cbc@lysa=
tor.liu.se=0Adebug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,ar=
cfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-=0A=
cbc,aes256-cbc,arcfour,[email protected]=0Adebug2: kex_parse_kexi=
nit: hmac-md5,hmac-sha1,[email protected],hmac-ripemd160,hmac-ripemd160@o=
penssh.com,hmac-sha1-96,hmac-=0Amd5-96=0Adebug2: kex_parse_kexinit: hmac-md=
5,hmac-sha1,[email protected],hmac-ripemd160,[email protected],h=
mac-sha1-96,hmac-=0Amd5-96=0Adebug2: kex_parse_kexinit: none,[email protected]=
om,zlib=0Adebug2: kex_parse_kexinit: none,[email protected],zlib=0Adebug2: k=
ex_parse_kexinit:=A0=0Adebug2: kex_parse_kexinit:=A0=0Adebug2: kex_parse_ke=
xinit: first_kex_follows 0=A0=0Adebug2: kex_parse_kexinit: reserved 0=A0=0A=
debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hell=
man-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-=0Agroup=
1-sha1=0Adebug2: kex_parse_kexinit: ssh-rsa,ssh-dss=0Adebug2: kex_parse_kex=
init: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3de=
s-cbc,blowfish-cbc,cast128-cbc,aes192-=0Acbc,aes256-cbc,arcfour,rijndael-cb=
[email protected]=0Adebug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-=
ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes1=
92-=0Acbc,aes256-cbc,arcfour,[email protected]=0Adebug2: kex_pars=
e_kexinit: hmac-md5,hmac-sha1,[email protected],hmac-ripemd160,hmac-ripem=
[email protected],hmac-sha1-96,hmac-=0Amd5-96=0Adebug2: kex_parse_kexinit: h=
mac-md5,hmac-sha1,[email protected],hmac-ripemd160,hmac-ripemd160@openssh=
.com,hmac-sha1-96,hmac-=0Amd5-96=0Adebug2: kex_parse_kexinit: none,zlib@ope=
nssh.com=0Adebug2: kex_parse_kexinit: none,[email protected]=0Adebug2: kex_p=
arse_kexinit:=A0=0Adebug2: kex_parse_kexinit:=A0=0Adebug2: kex_parse_kexini=
t: first_kex_follows 0=A0=0Adebug2: kex_parse_kexinit: reserved 0=A0=0Adebu=
g2: mac_setup: found hmac-md5=0Adebug1: kex: server->client aes128-ctr hmac=
-md5 none=0Adebug2: mac_setup: found hmac-md5=0Adebug1: kex: client->server=
 aes128-ctr hmac-md5 none=0Adebug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8=
192) sent=0Adebug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP=0Adebug3: Wrote 24 =
bytes for a total of 855=0Adebug2: dh_gen_key: priv key bits set: 124/256=
=0Adebug2: bits set: 507/1024=0Adebug1: SSH2_MSG_KEX_DH_GEX_INIT sent=0Adeb=
ug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY=0Adebug3: Wrote 144 bytes for a to=
tal of 999=0Adebug3: check_host_in_hostfile: filename /home/mahmood/.ssh/kn=
own_hosts=0Adebug3: check_host_in_hostfile: match line 1=0Adebug3: check_ho=
st_in_hostfile: filename /home/mahmood/.ssh/known_hosts=0Adebug3: check_hos=
t_in_hostfile: match line 2=0Adebug1: Host 'server' is known and matches th=
e RSA host key.=0Adebug1: Found key in /home/mahmood/.ssh/known_hosts:1=0Ad=
ebug2: bits set: 503/1024=0Adebug1: ssh_rsa_verify: signature correct=0Adeb=
ug2: kex_derive_keys=0Adebug2: set_newkeys: mode 1=0Adebug1: SSH2_MSG_NEWKE=
YS sent=0Adebug1: expecting SSH2_MSG_NEWKEYS=0Adebug3: Wrote 16 bytes for a=
 total of 1015=0Adebug2: set_newkeys: mode 0=0Adebug1: SSH2_MSG_NEWKEYS rec=
eived=0Adebug1: SSH2_MSG_SERVICE_REQUEST sent=0Adebug3: Wrote 48 bytes for =
a total of 1063=0Adebug2: service_accept: ssh-userauth=0Adebug1: SSH2_MSG_S=
ERVICE_ACCEPT received=0Adebug2: key: /home/mahmood/.ssh/identity ((nil))=
=0Adebug2: key: /home/mahmood/.ssh/id_rsa ((nil))=0Adebug2: key: /home/mahm=
ood/.ssh/id_dsa ((nil))=0Adebug3: Wrote 64 bytes for a total of 1127=0Adebu=
g1: Authentications that can continue: publickey,password,hostbased=0Adebug=
3: start over, passed a different list publickey,password,hostbased=0Adebug=
3: preferred gssapi-keyex,gssapi-with-mic,gssapi,hostbased,publickey,keyboa=
rd-interactive,password=0Adebug3: authmethod_lookup hostbased=0Adebug3: rem=
aining preferred: publickey,keyboard-interactive,password=0Adebug3: authmet=
hod_is_enabled hostbased=0Adebug1: Next authentication method: hostbased=0A=
debug2: userauth_hostbased: chost client.=0Adebug2: ssh_keysign called=0Ade=
bug3: ssh_msg_send: type 2=0Adebug3: ssh_msg_recv entering=0Adebug1: perman=
ently_drop_suid: 1000=0Adebug2: we sent a hostbased packet, wait for reply=
=0Adebug3: Wrote 608 bytes for a total of 1735=0Adebug1: Authentications th=
at can continue: publickey,password,hostbased=0Adebug2: userauth_hostbased:=
 chost client.=0Adebug2: ssh_keysign called=0Adebug3: ssh_msg_send: type 2=
=0Adebug3: ssh_msg_recv entering=0Adebug1: permanently_drop_suid: 1000=0Ade=
bug2: we sent a hostbased packet, wait for reply=0Adebug3: Wrote 672 bytes =
for a total of 2407=0Adebug1: Authentications that can continue: publickey,=
password,hostbased=0Adebug1: No more client hostkeys for hostbased authenti=
cation.=0Adebug2: we did not send a packet, disable method=0Adebug3: authme=
thod_lookup publickey=0Adebug3: remaining preferred: keyboard-interactive,p=
assword=0Adebug3: authmethod_is_enabled publickey=0Adebug1: Next authentica=
tion method: publickey=0Adebug1: Trying private key: /home/mahmood/.ssh/ide=
ntity=0Adebug3: no such identity: /home/mahmood/.ssh/identity=0Adebug1: Try=
ing private key: /home/mahmood/.ssh/id_rsa=0Adebug3: no such identity: /hom=
e/mahmood/.ssh/id_rsa=0Adebug1: Trying private key: /home/mahmood/.ssh/id_d=
sa=0Adebug3: no such identity: /home/mahmood/.ssh/id_dsa=0Adebug2: we did n=
ot send a packet, disable method=0Adebug3: authmethod_lookup password=0Adeb=
ug3: remaining preferred: ,password=0Adebug3: authmethod_is_enabled passwor=
d=0Adebug1: Next authentication method: password=0Amahmood@server's passwor=
d:=A0=0A=0A=0AAny idea about that?=0A=A0=0A// Naderan *Mahmood;=0A