Re: problem with HostbasedAuthentication
Mahmood Naderan <[email protected]> Fri, 29 Apr 2011 00:04:51 -0700 (PDT)
| Newsgroups | gmane.network.openssh.general |
|---|---|
| Message-ID | <[email protected]> |
Sorry what do you mean?=0A=A0=0Amahmood@server:~$ sudo sshd -d=0Asshd re-ex= ec requires execution with an absolute path=0Amahmood@server:~$ sudo sshd -= d 3=0Asshd re-exec requires execution with an absolute path=0Amahmood@serve= r:~$ sudo sshd -ddd=0Asshd re-exec requires execution with an absolute path= =0A=0AMy last post was the debug information for server->client.=0A=0A// Na= deran *Mahmood;=0A=0A=0A----- Original Message -----=0AFrom: Sharad <sharad= [email protected]>=0ATo: Mahmood Naderan <[email protected]>=0ACc: "secures= [email protected]" <[email protected]>=0ASent: Friday, Apr= il 29, 2011 11:31 AM=0ASubject: Re: problem with HostbasedAuthentication=0A= =0ACan you run debug on server as well using sshd -d. More -d's mean more d= ebug information (you can use at the max 3 d's) :D=0A=0ARegards,=0ASharad= =0A--- On Fri, 29/4/11, Mahmood Naderan <[email protected]> wrote:=0A=0A= > From: Mahmood Naderan <[email protected]>=0A> Subject: Re: problem wit= h HostbasedAuthentication=0A> To: "Sharad" <[email protected]>=0A> Cc: "= [email protected]" <[email protected]>=0A> Date: Fr= iday, 29 April, 2011, 12:23 PM=0A> The same thing happens with IP=0A> addre= ss=0A> =A0=0A> =A0=0A> mahmood@server:~$ ssh -vvv 192.168.1.3=0A> OpenSSH_5= .3p1 Debian-3ubuntu4, OpenSSL 0.9.8k 25 Mar 2009=0A> debug1: Reading config= uration data /etc/ssh/ssh_config=0A> debug1: Applying options for *=0A> deb= ug2: ssh_connect: needpriv 0=0A> debug1: Connecting to 192.168.1.3 [192.168= .1.3] port 22.=0A> debug1: Connection established.=0A> debug1: identity fil= e /home/mahmood/.ssh/identity type -1=0A> debug1: identity file /home/mahmo= od/.ssh/id_rsa type -1=0A> debug1: identity file /home/mahmood/.ssh/id_dsa = type -1=0A> debug1: Remote protocol version 2.0, remote software=0A> versio= n OpenSSH_5.3p1 Debian-3ubuntu6=0A> debug1: match: OpenSSH_5.3p1 Debian-3ub= untu6 pat OpenSSH*=0A> debug1: Enabling compatibility mode for protocol 2.0= =0A> debug1: Local version string SSH-2.0-OpenSSH_5.3p1=0A> Debian-3ubuntu4= =0A> debug2: fd 3 setting O_NONBLOCK=0A> debug1: SSH2_MSG_KEXINIT sent=0A> = debug3: Wrote 792 bytes for a total of 831=0A> debug1: SSH2_MSG_KEXINIT rec= eived=0A> debug2: kex_parse_kexinit:=0A> diffie-hellman-group-exchange-sha2= 56,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-he= llman-group1-sha1=0A> debug2: kex_parse_kexinit: ssh-rsa,ssh-dss=0A> debug2= : kex_parse_kexinit:=0A> aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfou= r128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arc= four,[email protected]=0A> debug2: kex_parse_kexinit:=0A> aes128-= ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfis= h-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,[email protected]= =0A> debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,[email protected],hmac= -ripemd160,[email protected],hmac-sha1-96,hmac-md5-96=0A> debug2: = kex_parse_kexinit: hmac-md5,hmac-sha1,[email protected],hmac-ripemd160,hm= [email protected],hmac-sha1-96,hmac-md5-96=0A> debug2: kex_parse_kex= init: none,[email protected],zlib=0A> debug2: kex_parse_kexinit: none,zlib@o= penssh.com,zlib=0A> debug2: kex_parse_kexinit:=0A> debug2: kex_parse_kexini= t:=0A> debug2: kex_parse_kexinit: first_kex_follows 0=0A> debug2: kex_parse= _kexinit: reserved 0=0A> debug2: kex_parse_kexinit:=0A> diffie-hellman-grou= p-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14= -sha1,diffie-hellman-group1-sha1=0A> debug2: kex_parse_kexinit: ssh-rsa,ssh= -dss=0A> debug2: kex_parse_kexinit:=0A> aes128-ctr,aes192-ctr,aes256-ctr,ar= cfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc= ,aes256-cbc,arcfour,[email protected]=0A> debug2: kex_parse_kexin= it:=0A> aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3= des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc= @lysator.liu.se=0A> debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,umac-64@o= penssh.com,hmac-ripemd160,[email protected],hmac-sha1-96,hmac-md5-= 96=0A> debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,[email protected],hm= ac-ripemd160,[email protected],hmac-sha1-96,hmac-md5-96=0A> debug2= : kex_parse_kexinit: none,[email protected]=0A> debug2: kex_parse_kexinit: n= one,[email protected]=0A> debug2: kex_parse_kexinit:=0A> debug2: kex_parse_k= exinit:=0A> debug2: kex_parse_kexinit: first_kex_follows 0=0A> debug2: kex_= parse_kexinit: reserved 0=0A> debug2: mac_setup: found hmac-md5=0A> debug1:= kex: server->client aes128-ctr hmac-md5 none=0A> debug2: mac_setup: found = hmac-md5=0A> debug1: kex: client->server aes128-ctr hmac-md5 none=0A> debug= 1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192)=0A> sent=0A> debug1: expecti= ng SSH2_MSG_KEX_DH_GEX_GROUP=0A> debug3: Wrote 24 bytes for a total of 855= =0A> debug2: dh_gen_key: priv key bits set: 129/256=0A> debug2: bits set: 5= 05/1024=0A> debug1: SSH2_MSG_KEX_DH_GEX_INIT sent=0A> debug1: expecting SSH= 2_MSG_KEX_DH_GEX_REPLY=0A> debug3: Wrote 144 bytes for a total of 999=0A> d= ebug3: check_host_in_hostfile: filename=0A> /home/mahmood/.ssh/known_hosts= =0A> debug3: check_host_in_hostfile: match line 1=0A> debug1: Host '192.168= .1.3' is known and matches the RSA=0A> host key.=0A> debug1: Found key in /= home/mahmood/.ssh/known_hosts:1=0A> debug2: bits set: 517/1024=0A> debug1: = ssh_rsa_verify: signature correct=0A> debug2: kex_derive_keys=0A> debug2: s= et_newkeys: mode 1=0A> debug1: SSH2_MSG_NEWKEYS sent=0A> debug1: expecting = SSH2_MSG_NEWKEYS=0A> debug3: Wrote 16 bytes for a total of 1015=0A> debug2:= set_newkeys: mode 0=0A> debug1: SSH2_MSG_NEWKEYS received=0A> debug1: SSH2= _MSG_SERVICE_REQUEST sent=0A> debug3: Wrote 48 bytes for a total of 1063=0A= > debug2: service_accept: ssh-userauth=0A> debug1: SSH2_MSG_SERVICE_ACCEPT = received=0A> debug2: key: /home/mahmood/.ssh/identity ((nil))=0A> debug2: k= ey: /home/mahmood/.ssh/id_rsa ((nil))=0A> debug2: key: /home/mahmood/.ssh/i= d_dsa ((nil))=0A> debug3: Wrote 64 bytes for a total of 1127=0A> debug1: Au= thentications that can continue:=0A> publickey,password,hostbased=0A> debug= 3: start over, passed a different list=0A> publickey,password,hostbased=0A>= debug3: preferred=0A> gssapi-keyex,gssapi-with-mic,gssapi,hostbased,public= key,keyboard-interactive,password=0A> debug3: authmethod_lookup hostbased= =0A> debug3: remaining preferred:=0A> publickey,keyboard-interactive,passwo= rd=0A> debug3: authmethod_is_enabled hostbased=0A> debug1: Next authenticat= ion method: hostbased=0A> get_socket_address: getnameinfo 8 failed: Name or= service=0A> not known=0A> debug2: userauth_hostbased: chost server.=0A> de= bug2: ssh_keysign called=0A> debug3: ssh_msg_send: type 2=0A> debug3: ssh_m= sg_recv entering=0A> debug1: permanently_drop_suid: 1000=0A> get_socket_add= ress: getnameinfo 8 failed: Name or service=0A> not known=0A> cannot get so= ckname for fd=0A> ssh_keysign: no reply=0A> key_sign failed=0A> debug2: we = did not send a packet, disable method=0A> debug3: authmethod_lookup publick= ey=0A> debug3: remaining preferred: keyboard-interactive,password=0A> debug= 3: authmethod_is_enabled publickey=0A> debug1: Next authentication method: = publickey=0A> debug1: Trying private key: /home/mahmood/.ssh/identity=0A> d= ebug3: no such identity: /home/mahmood/.ssh/identity=0A> debug1: Trying pri= vate key: /home/mahmood/.ssh/id_rsa=0A> debug3: no such identity: /home/mah= mood/.ssh/id_rsa=0A> debug1: Trying private key: /home/mahmood/.ssh/id_dsa= =0A> debug3: no such identity: /home/mahmood/.ssh/id_dsa=0A> debug2: we did= not send a packet, disable method=0A> debug3: authmethod_lookup password= =0A> debug3: remaining preferred: ,password=0A> debug3: authmethod_is_enabl= ed password=0A> debug1: Next authentication method: password=0A> mahmood@19= 2.168.1.3's password:=0A> =0A> =0A> // Naderan *Mahmood;=0A> =0A> =0A> ----= - Original Message -----=0A> From: Sharad <[email protected]>=0A> To: Ma= hmood Naderan <[email protected]>=0A> Cc: "[email protected]= "=0A> <[email protected]>=0A> Sent: Friday, April 29, 2011 11:1= 9 AM=0A> Subject: Re: problem with HostbasedAuthentication=0A> =0A> Hi Mahm= ood,=0A> =0A> This line looks out of place. Check that host name is=0A> get= ting resolved:=0A> =0A> get_socket_address: getnameinfo 8 failed: Name or s= ervice=0A> not known=0A> =0A> I am sure you would have performed the same s= teps on both=0A> hosts. Try establishing connection with IP Address instead= =0A> of hostname.=0A> =0A> Regards,=0A> Sharad=0A> --- On Thu, 28/4/11, Mah= mood Naderan <[email protected]>=0A> wrote:=0A> =0A> > From: Mahmood Nad= eran <[email protected]>=0A> > Subject: Re: problem with HostbasedAuthen= tication=0A> > To: "Sharad" <[email protected]>=0A> > Cc: "secureshell@s= ecurityfocus.com"=0A> <[email protected]>=0A> > Date: Thursday,= 28 April, 2011, 11:12 PM=0A> > Dear Sharad,=0A> > I am now trying to setup= a hostbased ssh from server=0A> to=0A> > client (previously client->server= worked fine based=0A> on=0A> > your help). I want it to be bidirectional.= =0A> > =A0=0A> > I did the same thing in reverse (now the client=0A> become= s=0A> > server and the server becoms client). However this is=0A> what I=0A= > > get while trying to ssh from server to client:=0A> > =A0=0A> > =A0=0A> = > debug3: Wrote 48 bytes for a total of 1063=0A> > debug2: service_accept: = ssh-userauth=0A> > debug1: SSH2_MSG_SERVICE_ACCEPT received=0A> > debug2: k= ey: /home/mahmood/.ssh/identity ((nil))=0A> > debug2: key: /home/mahmood/.s= sh/id_rsa ((nil))=0A> > debug2: key: /home/mahmood/.ssh/id_dsa ((nil))=0A> = > debug3: Wrote 64 bytes for a total of 1127=0A> > debug1: Authentications = that can continue:=0A> > publickey,password,hostbased=0A> > debug3: start o= ver, passed a different list=0A> > publickey,password,hostbased=0A> > debug= 3: preferred=0A> >=0A> gssapi-keyex,gssapi-with-mic,gssapi,hostbased,public= key,keyboard-interactive,password=0A> > debug3: authmethod_lookup hostbased= =0A> > debug3: remaining preferred:=0A> > publickey,keyboard-interactive,pa= ssword=0A> > debug3: authmethod_is_enabled hostbased=0A> > debug1: Next aut= hentication method: hostbased=0A> > get_socket_address: getnameinfo 8 faile= d: Name or=0A> service=0A> > not known=0A> > debug2: userauth_hostbased: ch= ost server.=0A> > debug2: ssh_keysign called=0A> > debug3: ssh_msg_send: ty= pe 2=0A> > debug3: ssh_msg_recv entering=0A> > debug1: permanently_drop_sui= d: 1000=0A> > get_socket_address: getnameinfo 8 failed: Name or=0A> service= =0A> > not known=0A> > cannot get sockname for fd=0A> > ssh_keysign: no rep= ly=0A> > key_sign failed=0A> > debug2: we did not send a packet, disable me= thod=0A> > debug3: authmethod_lookup publickey=0A> > debug3: remaining pref= erred:=0A> keyboard-interactive,password=0A> > debug3: authmethod_is_enable= d publickey=0A> > debug1: Next authentication method: publickey=0A> > debug= 1: Trying private key:=0A> /home/mahmood/.ssh/identity=0A> > debug3: no suc= h identity: /home/mahmood/.ssh/identity=0A> > debug1: Trying private key: /= home/mahmood/.ssh/id_rsa=0A> > debug3: no such identity: /home/mahmood/.ssh= /id_rsa=0A> > debug1: Trying private key: /home/mahmood/.ssh/id_dsa=0A> > d= ebug3: no such identity: /home/mahmood/.ssh/id_dsa=0A> > debug2: we did not= send a packet, disable method=0A> > debug3: authmethod_lookup password=0A>= > debug3: remaining preferred: ,password=0A> > debug3: authmethod_is_enabl= ed password=0A> > debug1: Next authentication method: password=0A> > mahmoo= [email protected]'s password:=0A> > =0A> > =A0=0A> > What is your suggestion?= =0A> > =0A> > // Naderan *Mahmood;=0A> > =0A> > =0A> > ----- Original Messa= ge -----=0A> > From: Sharad <[email protected]>=0A> > To: Mahmood Nadera= n <[email protected]>=0A> > Cc: "[email protected]"=0A> > <s= [email protected]>=0A> > Sent: Thursday, April 28, 2011 5:20 PM= =0A> > Subject: Re: problem with HostbasedAuthentication=0A> > =0A> > Mahmo= od, =0A> > =0A> > The files are /home/username/.ssh/known_hosts on both=0A>= > server and client.=0A> > =0A> > By FQDN, I meant host's fully qualified = domain name. =0A> > =0A> > Following is the example:=0A> > =0A> > Assuming = both client and server are linux hosts:=0A> > =0A> > Server IP: 192.168.1.1= =0A> > Client IP: 192.168.1.101=0A> > =0A> > Server Name: lnx_srvr_1.domain= .com=0A> > Client Name: lnx_clnt_101.domain.com=0A> > =0A> > User name on e= ach host is mahmood.=0A> > =0A> > Following would be the entries in .shosts= on=0A> lnx_srvr_1=0A> > =0A> > =0A> > lnx_srvr_1:/home/mahmood $ cat .shos= ts=0A> > =0A> > lnx_clnt_101.domain.com mahmood=0A> > 192.168.1.101 mahmood= =0A> > lnx_clnt_101 mahmood=0A> > =0A> > Following should exist in=0A> /hom= e/mahmood/.ssh/known_hosts=0A> > file on the server side:=0A> > 192.168.1.1= 01,lnx_clnt_101,lnx_clnt_101.domain.com=A0=0A> > ssh-rsa AAAAB3Nz...=0A> > = =0A> > Following should also exist in=0A> > /home/mahmood/.ssh/known_hosts = file on the client=0A> side:=0A> > 192.168.1.1,lnx_srvr_1,lnx_srvr_1.domain= .com=A0=0A> ssh-rsa=0A> > AAAAB3Nz...=0A> > =0A> > Ensure that .ssh directo= ry on both client and server=0A> are=0A> > rwx for owner only and group/res= t of world is 000.=0A> > =0A> > Hope this helps! Good Luck! :)=0A> > =0A> >= Regards,=0A> > Sharad=A0 =0A> > --- On Thu, 28/4/11, Mahmood Naderan <nt_m= [email protected]>=0A> > wrote:=0A> > =0A> > > From: Mahmood Naderan <nt_mah= [email protected]>=0A> > > Subject: Re: problem with=0A> HostbasedAuthenticati= on=0A> > > To: "Sharad" <[email protected]>=0A> > > Cc: "secureshell@sec= urityfocus.com"=0A> > <[email protected]>=0A> > > Date: Thursda= y, 28 April, 2011, 3:54 PM=0A> > > Can you explain exactly which file I=0A>= > > should edit? What is FQDN? By 'hostname', Do you=0A> mean=0A> > server= =0A> > > hostname of client hostname. =0A> > > Should I do that on both sid= e or server side?...=0A> > > =0A> > > // Naderan *Mahmood;=0A> > > =0A> > >= =0A> > > ----- Original Message -----=0A> > > From: Sharad <sharad2011@yah= oo.com>=0A> > > To: Mahmood Naderan <[email protected]>;=0A> > > Asif Iq= bal <[email protected]>=0A> > > Cc: "[email protected]"=0A> > > = <[email protected]>=0A> > > Sent: Thursday, April 28, 2011 1:16= PM=0A> > > Subject: Re: problem with=0A> HostbasedAuthentication=0A> > > = =0A> > > Sometimes the issue lies with hostname as well.=0A> What I=0A> > m= ean=0A> > > with that is the known_hosts may have just the=0A> host=0A> > n= ame=0A> > > where as when the connection is established, the=0A> debug=0A> = > shows=0A> > > the FQDN. I faced this issue so to be sure, I=0A> edited=0A= > > the=0A> > > known_hosts file and inserted the hostname,=0A> hostname's= =0A> > FQDN=0A> > > and it's IP address (all comma separated).=0A> > > =0A>= > > Also ensure that you both the hosts' known_hosts=0A> files=0A> > have= =0A> > > opposite servers names (as prescribed above). =0A> > > =0A> > > Al= l the above checks makes it work for me.=0A> > > =0A> > > Hope this solves.= =0A> > > =0A> > > Kind regards,=0A> > > Sharad=0A> > > --- On Thu, 28/4/11,= Asif Iqbal <[email protected]>=0A> > > wrote:=0A> > > =0A> > > > From: Asif= Iqbal <[email protected]>=0A> > > > Subject: Re: problem with=0A> > Hostbas= edAuthentication=0A> > > > To: "Mahmood Naderan" <[email protected]>=0A>= > > > Cc: "[email protected]"=0A> > > <secureshell@securityfoc= us.com>=0A> > > > Date: Thursday, 28 April, 2011, 12:38 AM=0A> > > > On Wed= , Apr 27, 2011 at 1:12 AM,=0A> > > > Mahmood Naderan <[email protected]>= =0A> > > > wrote:=0A> > > > >>Change the order method. Have=0A> hostbased= =0A> > > before=0A> > > > password=0A> > > > >=0A> > > > > Sorry where shou= ld I do that?=0A> > > > =0A> > > > man ssh_config and look into=0A> > Prefe= rredAuthentications=0A> > > > =0A> > > > >=0A> > > > > // Naderan *Mahmood;= =0A> > > > >=0A> > > > > From: Asif Iqbal <[email protected]>=0A> > > > > To= : Mahmood Naderan <[email protected]>=0A> > > > > Cc: "secureshell@secur= ityfocus.com"=0A> > > > <[email protected]>=0A> > > > > Sent: W= ednesday, April 27, 2011 9:17=0A> AM=0A> > > > > Subject: Re: problem with= =0A> > > HostbasedAuthentication=0A> > > > >=0A> > > > >=0A> > > > > Change= the order method. Have=0A> hostbased=0A> > before=0A> > > > password=0A> >= > > > On Apr 26, 2011 11:52 PM, "Mahmood=0A> Naderan"=0A> > > <nt_mahmood@= yahoo.com>=0A> > > > wrote:=0A> > > > >>=0A> > > > >>=0A> > > > >> Hi,=0A> = > > > >> I am trying to setup a hostbased=0A> > passwrodless=0A> > > ssh=0A= > > > > from a client to a server using this guide=0A> http://www.ehow.com/= how_7621307_set-up-hostbased-authentication.html.=0A> > > > >>=0A> > > > >>= The client looks like:=0A> > > > >>=0A> > > > >> mahmood@client:~$ cat=0A>= > /etc/ssh/ssh_config=A0 |=0A> > > grep=0A> > > > "HostbasedAuthentication= "=0A> > > > >> =A0=A0 HostbasedAuthentication yes=0A> > > > >> mahmood@clie= nt:~$ cat=0A> > /etc/ssh/ssh_config=A0 |=0A> > > grep=0A> > > > "EnableSSHK= eysign"=0A> > > > >> =A0=A0 EnableSSHKeysign yes=0A> > > > >>=0A> > > > >>= =0A> > > > >> and the server looks like:=0A> > > > >> mahmood@server:~$ cat= =0A> > /etc/ssh/sshd_config=A0=0A> > > |=0A> > > > grep "HostbasedAuthentic= ation"=0A> > > > >> HostbasedAuthentication yes=0A> > > > >> mahmood@server= :~$ cat=0A> > /etc/ssh/sshd_config=A0=0A> > > |=0A> > > > grep "IgnoreRhost= s"=0A> > > > >> IgnoreRhosts no=0A> > > > >>=0A> > > > >> also the server h= as the key for=0A> client:=0A> > > > >>=0A> > > > >> mahmood@server:~$ cat= =0A> > > /etc/ssh/ssh_known_hosts=0A> > > > >> client ssh-rsa AAAAB3Nz.....= =0A> > > > >>=0A> > > > >> the ~/.shosts file on the server=0A> > contains:= =0A> > > > >> mahmood@server:~$ cat .shosts=0A> > > > >> client.domain mahm= ood=0A> > > > >>=0A> > > > >> Then on both server and client, the=0A> ssh= =0A> > > service is=0A> > > > restarted:=0A> > > > >> mahmood@client:~$ sud= o service ssh=0A> > restart=0A> > > > >> ssh start/running, process 1355=0A= > > > > >> mahmood@server:~$ sudo service ssh=0A> > restart=0A> > > > >> ss= h start/running, process 28982=0A> > > > >>=0A> > > > >> How, when I run "s= sh -vvv server"=0A> from=0A> > client=0A> > > (to=0A> > > > show the verbos= e messages), I still get the=0A> > password=0A> > > > prompt.=0A> > > > >>= =0A> > > > >> mahmood@client:~$ ssh -vvv server=0A> > > > >> OpenSSH_5.3p1 = Debian-3ubuntu6,=0A> OpenSSL=0A> > 0.9.8k=0A> > > 25=0A> > > > Mar 2009=0A>= > > > >> debug1: Reading configuration data=0A> > > > /etc/ssh/ssh_config= =0A> > > > >> debug1: Applying options for *=0A> > > > >> debug2: ssh_conne= ct: needpriv 0=0A> > > > >> debug1: Connecting to server=0A> > [192.168.1.1= ]=0A> > > port=0A> > > > 22.=0A> > > > >> debug1: Connection established.= =0A> > > > >> debug1: identity file=0A> > > /home/mahmood/.ssh/identity=0A>= > > > type -1=0A> > > > >> debug1: identity file=0A> > > /home/mahmood/.ss= h/id_rsa=0A> > > > type -1=0A> > > > >> debug1: identity file=0A> > > /home= /mahmood/.ssh/id_dsa=0A> > > > type -1=0A> > > > >> debug1: Remote protocol= version=0A> 2.0,=0A> > remote=0A> > > > software version OpenSSH_5.3p1=0A>= Debian-3ubuntu4=0A> > > > >> debug1: match: OpenSSH_5.3p1=0A> > Debian-3ub= untu4=0A> > > pat=0A> > > > OpenSSH*=0A> > > > >> debug1: Enabling compatib= ility mode=0A> for=0A> > > protocol=0A> > > > 2.0=0A> > > > >> debug1: Loca= l version string=0A> > > SSH-2.0-OpenSSH_5.3p1=0A> > > > Debian-3ubuntu6=0A= > > > > >> debug2: fd 3 setting O_NONBLOCK=0A> > > > >> debug1: SSH2_MSG_KE= XINIT sent=0A> > > > >> debug3: Wrote 792 bytes for a total=0A> of=0A> > 83= 1=0A> > > > >> debug1: SSH2_MSG_KEXINIT received=0A> > > > >> debug2: kex_p= arse_kexinit:=0A> > > >=0A> > >=0A> >=0A> diffie-hellman-group-exchange-sha= 256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-h= ellman-=0A> > > > >> group1-sha1=0A> > > > >> debug2: kex_parse_kexinit:=0A= > > ssh-rsa,ssh-dss=0A> > > > >> debug2: kex_parse_kexinit:=0A> > > >=0A> >= >=0A> >=0A> aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-= cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-=0A> > > > >> cbc,aes256-cbc,a= rcfour,[email protected]=0A> > > > >> debug2: kex_parse_kexinit:= =0A> > > >=0A> > >=0A> >=0A> aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,ar= cfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-=0A> > > > >> = cbc,aes256-cbc,arcfour,[email protected]=0A> > > > >> debug2: kex= _parse_kexinit:=0A> > > hmac-md5,hmac-sha1,[email protected],hmac-ripemd1= 60,[email protected],hmac-sha1-96,hmac-=0A> > > > >> md5-96=0A> > = > > >> debug2: kex_parse_kexinit:=0A> > > hmac-md5,hmac-sha1,umac-64@openss= h.com,hmac-ripemd160,[email protected],hmac-sha1-96,hmac-=0A> > > = > >> md5-96=0A> > > > >> debug2: kex_parse_kexinit: none,[email protected],z= lib=0A> > > > >> debug2: kex_parse_kexinit: none,[email protected],zlib=0A> = > > > >> debug2: kex_parse_kexinit:=0A> > > > >> debug2: kex_parse_kexinit:= =0A> > > > >> debug2: kex_parse_kexinit:=0A> > first_kex_follows=0A> > > 0= =0A> > > > >> debug2: kex_parse_kexinit: reserved=0A> 0=0A> > > > >> debug2= : kex_parse_kexinit:=0A> > > >=0A> > >=0A> >=0A> diffie-hellman-group-excha= nge-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,d= iffie-hellman-=0A> > > > >> group1-sha1=0A> > > > >> debug2: kex_parse_kexi= nit:=0A> > ssh-rsa,ssh-dss=0A> > > > >> debug2: kex_parse_kexinit:=0A> > > = >=0A> > >=0A> >=0A> aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,= aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-=0A> > > > >> cbc,aes25= 6-cbc,arcfour,[email protected]=0A> > > > >> debug2: kex_parse_ke= xinit:=0A> > > >=0A> > >=0A> >=0A> aes128-ctr,aes192-ctr,aes256-ctr,arcfour= 256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-=0A> > >= > >> cbc,aes256-cbc,arcfour,[email protected]=0A> > > > >> debug= 2: kex_parse_kexinit:=0A> > > hmac-md5,hmac-sha1,[email protected],hmac-r= ipemd160,[email protected],hmac-sha1-96,hmac-=0A> > > > >> md5-96= =0A> > > > >> debug2: kex_parse_kexinit:=0A> > > hmac-md5,hmac-sha1,umac-64= @openssh.com,hmac-ripemd160,[email protected],hmac-sha1-96,hmac-= =0A> > > > >> md5-96=0A> > > > >> debug2: kex_parse_kexinit: none,zlib@open= ssh.com=0A> > > > >> debug2: kex_parse_kexinit: none,[email protected]=0A> >= > > >> debug2: kex_parse_kexinit:=0A> > > > >> debug2: kex_parse_kexinit:= =0A> > > > >> debug2: kex_parse_kexinit:=0A> > first_kex_follows=0A> > > 0= =0A> > > > >> debug2: kex_parse_kexinit: reserved=0A> 0=0A> > > > >> debug2= : mac_setup: found hmac-md5=0A> > > > >> debug1: kex: server->client=0A> > = aes128-ctr=0A> > > hmac-md5=0A> > > > none=0A> > > > >> debug2: mac_setup: = found hmac-md5=0A> > > > >> debug1: kex: client->server=0A> > aes128-ctr=0A= > > > hmac-md5=0A> > > > none=0A> > > > >> debug1:=0A> > > >=0A> > SSH2_MSG= _KEX_DH_GEX_REQUEST(1024<1024<8192)=0A> > > sent=0A> > > > >> debug1: expec= ting=0A> > SSH2_MSG_KEX_DH_GEX_GROUP=0A> > > > >> debug3: Wrote 24 bytes fo= r a total=0A> of=0A> > 855=0A> > > > >> debug2: dh_gen_key: priv key bits= =0A> set:=0A> > > 124/256=0A> > > > >> debug2: bits set: 507/1024=0A> > > >= >> debug1: SSH2_MSG_KEX_DH_GEX_INIT=0A> sent=0A> > > > >> debug1: expectin= g=0A> > SSH2_MSG_KEX_DH_GEX_REPLY=0A> > > > >> debug3: Wrote 144 bytes for = a total=0A> of=0A> > 999=0A> > > > >> debug3: check_host_in_hostfile:=0A> >= filename=0A> > > > /home/mahmood/.ssh/known_hosts=0A> > > > >> debug3: che= ck_host_in_hostfile:=0A> match=0A> > line 1=0A> > > > >> debug3: check_host= _in_hostfile:=0A> > filename=0A> > > > /home/mahmood/.ssh/known_hosts=0A> >= > > >> debug3: check_host_in_hostfile:=0A> match=0A> > line 2=0A> > > > >>= debug1: Host 'server' is known and=0A> > matches=0A> > > the RSA=0A> > > >= host key.=0A> > > > >> debug1: Found key in=0A> > > > /home/mahmood/.ssh/k= nown_hosts:1=0A> > > > >> debug2: bits set: 503/1024=0A> > > > >> debug1: s= sh_rsa_verify: signature=0A> > correct=0A> > > > >> debug2: kex_derive_keys= =0A> > > > >> debug2: set_newkeys: mode 1=0A> > > > >> debug1: SSH2_MSG_NEW= KEYS sent=0A> > > > >> debug1: expecting SSH2_MSG_NEWKEYS=0A> > > > >> debu= g3: Wrote 16 bytes for a total=0A> of=0A> > 1015=0A> > > > >> debug2: set_n= ewkeys: mode 0=0A> > > > >> debug1: SSH2_MSG_NEWKEYS received=0A> > > > >> = debug1: SSH2_MSG_SERVICE_REQUEST=0A> sent=0A> > > > >> debug3: Wrote 48 byt= es for a total=0A> of=0A> > 1063=0A> > > > >> debug2: service_accept:=0A> s= sh-userauth=0A> > > > >> debug1: SSH2_MSG_SERVICE_ACCEPT=0A> > received=0A>= > > > >> debug2: key:=0A> > /home/mahmood/.ssh/identity=0A> > > ((nil))=0A= > > > > >> debug2: key:=0A> /home/mahmood/.ssh/id_rsa=0A> > > ((nil))=0A> >= > > >> debug2: key:=0A> /home/mahmood/.ssh/id_dsa=0A> > > ((nil))=0A> > > = > >> debug3: Wrote 64 bytes for a total=0A> of=0A> > 1127=0A> > > > >> debu= g1: Authentications that can=0A> > continue:=0A> > > > publickey,password,h= ostbased=0A> > > > >> debug3: start over, passed a=0A> different=0A> > list= =0A> > > > publickey,password,hostbased=0A> > > > >> debug3: preferred=0A> = > > >=0A> > >=0A> >=0A> gssapi-keyex,gssapi-with-mic,gssapi,hostbased,publi= ckey,keyboard-interactive,password=0A> > > > >> debug3: authmethod_lookup= =0A> hostbased=0A> > > > >> debug3: remaining preferred:=0A> > > > publicke= y,keyboard-interactive,password=0A> > > > >> debug3: authmethod_is_enabled= =0A> hostbased=0A> > > > >> debug1: Next authentication=0A> method:=0A> > >= hostbased=0A> > > > >> debug2: userauth_hostbased: chost=0A> > client.=0A>= > > > >> debug2: ssh_keysign called=0A> > > > >> debug3: ssh_msg_send: typ= e 2=0A> > > > >> debug3: ssh_msg_recv entering=0A> > > > >> debug1: permane= ntly_drop_suid:=0A> 1000=0A> > > > >> debug2: we sent a hostbased packet,= =0A> wait=0A> > for=0A> > > > reply=0A> > > > >> debug3: Wrote 608 bytes fo= r a total=0A> of=0A> > 1735=0A> > > > >> debug1: Authentications that can= =0A> > continue:=0A> > > > publickey,password,hostbased=0A> > > > >> debug2= : userauth_hostbased: chost=0A> > client.=0A> > > > >> debug2: ssh_keysign = called=0A> > > > >> debug3: ssh_msg_send: type 2=0A> > > > >> debug3: ssh_m= sg_recv entering=0A> > > > >> debug1: permanently_drop_suid:=0A> 1000=0A> >= > > >> debug2: we sent a hostbased packet,=0A> wait=0A> > for=0A> > > > re= ply=0A> > > > >> debug3: Wrote 672 bytes for a total=0A> of=0A> > 2407=0A> = > > > >> debug1: Authentications that can=0A> > continue:=0A> > > > publick= ey,password,hostbased=0A> > > > >> debug1: No more client hostkeys=0A> for= =0A> > > hostbased=0A> > > > authentication.=0A> > > > >> debug2: we did no= t send a packet,=0A> > disable=0A> > > method=0A> > > > >> debug3: authmeth= od_lookup=0A> publickey=0A> > > > >> debug3: remaining preferred:=0A> > > >= keyboard-interactive,password=0A> > > > >> debug3: authmethod_is_enabled= =0A> publickey=0A> > > > >> debug1: Next authentication=0A> method:=0A> > >= publickey=0A> > > > >> debug1: Trying private key:=0A> > > > /home/mahmood= /.ssh/identity=0A> > > > >> debug3: no such identity:=0A> > > > /home/mahmo= od/.ssh/identity=0A> > > > >> debug1: Trying private key:=0A> > > > /home/m= ahmood/.ssh/id_rsa=0A> > > > >> debug3: no such identity:=0A> > > > /home/m= ahmood/.ssh/id_rsa=0A> > > > >> debug1: Trying private key:=0A> > > > /home= /mahmood/.ssh/id_dsa=0A> > > > >> debug3: no such identity:=0A> > > > /home= /mahmood/.ssh/id_dsa=0A> > > > >> debug2: we did not send a packet,=0A> > d= isable=0A> > > method=0A> > > > >> debug3: authmethod_lookup password=0A> >= > > >> debug3: remaining preferred:=0A> ,password=0A> > > > >> debug3: aut= hmethod_is_enabled=0A> password=0A> > > > >> debug1: Next authentication=0A= > method:=0A> > password=0A> > > > >> mahmood@server's password:=0A> > > > = >>=0A> > > > >>=0A> > > > >> Any idea about that?=0A> > > > >>=0A> > > > >>= // Naderan *Mahmood;=0A> > > > >>=0A> > > > >=0A> > > > =0A> > > > =0A> > = > > =0A> > > > -- =0A> > > > Asif Iqbal=0A> > > > PGP Key: 0xE62693C5 KeySe= rver: pgp.mit.edu=0A> > > > A: Because it messes up the order in which=0A> = > people=0A> > > normally=0A> > > > read text.=0A> > > > Q: Why is top-post= ing such a bad thing?=0A> > > >=0A> > >=0A> > =0A> >=0A> =0A>=0A