Re: Using Key Pairs on OpenSSH on Win2k3
"Robert Denton" <[email protected]> Thu, 22 May 2008 10:10:52 -0700
| Newsgroups | gmane.network.ssh.windows |
|---|---|
| Organization | Headsprout |
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. -------------f371d5cf75bef06adeb09838f558c990 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Excellent advice! I will abandon "OpenSSH for Windows" and seek out Cop= SSH. I'll also post back with success or failure. Thanks again. Robert=20 =5F=5F=5F=5F=5F =20 From: Welsh, Armand [mailto:[email protected]] To: [email protected] Sent: Thu, 22 May 2008 09:17:19 -0700 Subject: Re: Using Key Pairs on OpenSSH on Win2k3 Robert, =20 Before I look into potential causes, the first I would like to know is= : are you using copSSH, the Cygwin installation with the openSSH package= installed, or the "openSSH for Windows" project from source forge=3F =20 Why do I ask=3F Al three are openSSH from the cygwin project the foll= owing conditions: Cygwin is the thick install proding the option to turn you windows box= into a GNU Linux like operating system (via the bash or other shell and= some special mappers built into cygwin). The cygwin project installs a= basic configuration of openSSH which works well on older windows system= s, but requires specific things be done to get the SSH server to work 10= 0% on windows 2003 and Vista. =20 CopSSH is a pre-packaged minimal installation of Cygwin with a couple = minor enhancement patches that installs Cygwin, openSSH, configures you = computer (even vista and win2k3) so that openSSH works without any tweak= ing at all. =20 "OpenSSH for Windows" is a dead sourceforge project that is almost ide= ntical to copSSH, except that development on the project has stopped a l= ong time ago, and this package requires more tweaking of the ssh setting= s and the server that the other options, and is running very old ssh cod= e that should not be used anymore in my opinion. =20 If you want the easy solution, install copSSH and everything will work= . If you want to get what you have working and you did not install copS= SH then we can offer assistance with making all the appropriate changes,= but it will take more time to get SSH services up and running with publ= ic keys, but you will have the option of using any piece of the cygwin p= roject easily. =20 Armand =20 ----- Original Message ----- From: [email protected] <[email protected]> To: [email protected] <[email protected]> Sent: Thu May 22 08:48:50 2008 Subject: Using Key Pairs on OpenSSH on Win2k3 =20 Hello all, I am hoping someone on this list has a good idea how to res= olve the following difficulty. I need to connect from a linux server to= a windows server via ssh in a script and I need to use keypairs to do t= his.=20 =20 I have installed Openssh on the win2k3 server and I have implemented t= he keypairs. Connecting to the win2k3 server it seems that the keypairs= are working well, but then I am immediately disconnected from the win2k= 3 server. Running ssh with the verbose switch, I get the following: =20 debug1: Authentications that can continue: publickey,password,keyboard= -interactive debug1: Next authentication method: publickey debug1: Trying private key: /root/.ssh/identity debug1: Offering public key: /root/.ssh/id=5Frsa debug1: Server accepts key: pkalg ssh-rsa blen 277 debug1: read PEM private key done: type RSA debug1: Authentication succeeded (publickey). debug1: channel 0: new [client-session] debug1: Entering interactive session. debug1: Sending environment. debug1: Sending env LANG =3D en=5FUS.UTF-8 Last login: Wed May 21 15:44:10 2008 from Larry debug1: client=5Finput=5Fchannel=5Freq: channel 0 rtype exit-status re= ply 0 debug1: channel 0: free: client-session, nchannels 1 Connection to production closed. debug1: Transferred: stdin 0, stdout 0, stderr 35 bytes in 0.2 seconds debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 178.7 debug1: Exit status 255 =20 I am currently researching the exit status 255 message, but for the re= st I am not sure. The authentication is clearly working and I get into = the server based on the key exchange but I am being booted right back ou= t. Another oddity, and I am at a loss to explain this so far, the Stric= tModes option in sshd=5Fconfig plays a role: when set to yes, the keypa= ir authentication fails. When set to no, it succeeds but I am immediate= ly disconnected form the server. =20 Any ideas=3F =20 =20 Robert=20 .+-"w=EF=BF=BD=EF=BF=BDi=EF=BF=BD=EF=BF=BDu=EF=BF=BDr=EF=BF=BD=EF=BF= =BD\=EF=BF=BDo=EF=BF=BD=19=7F.+-=02=EF=BF=BD!=EF=BF=BD=EF=BF=BD=EF=BF=BD= i=EF=BF=BD=EF=BF=BDu=EF=BF=BDr=EF=BF=BD=EF=BF=BD\=EF=BF=BDo=DA=AD=EF=BF= =BDb=EF=BF=BD=EF=BF=BD=EF=BF=BD=19=7FN=EF=BF=BD'=EF=BF=BD=EF=BF=BD=EF=BF= =BDr=EF=BF=BD=EF=BF=BDx=C6=A2=EF=BF=BDf=EF=BF=BD=EF=BF=BD=EF=BF=BD,=EF= =BF=BD=1F=EF=BF=BD=EF=BF=BD=CB=9B=EF=BF=BD=EF=BF=BD=EF=BF=BDm=EF=BF=BDu= =EF=BF=BDr=EF=BF=BD=EF=BF=BD\=EF=BF=BDb=1F=CA=8B=EF=BF=BD=EF=BF=BD=EF=BF= =BDZ=EF=BF=BD)=E0=B6=BA.nW=EF=BF=BD=EF=BF=BD=CB=9B=EF=BF=BD=EF=BF=BD=EF= =BF=BDn)=EF=BF=BD+"=EF=BF=BD=EF=BF=BD^.+-"w=E8=A5=A8=1E~=EF=BF=BD=EF=BF= =BDzZ =20 -------------f371d5cf75bef06adeb09838f558c990 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable <!DOCTYPE html PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'> <html> <head> <meta http-equiv=3D'Content-Type' content=3D'text/html;charset=3DUTF-8'= > <style>BODY{font:10pt Tahoma, Verdana, sans-serif;}</style> </head> <body> Excellent advice! I will abandon "OpenSSH for Windows" and seek ou= t CopSSH. I'll also post back with success or failure. Thanks agai= n.<br><br>Robert <br><blockquote style=3D"border-left: 2px solid rgb(0, = 0, 255); padding-left: 5px; margin-left: 5px; margin-right: 0px;"><hr><b= >From:</b> Welsh, Armand [mailto:[email protected]]<br><b>To:</b> = [email protected]<br><b>Sent:</b> Thu, 22 May 2008 09:17:19 -0700<br><b>= Subject:</b> Re: Using Key Pairs on OpenSSH on Win2k3<br><br>Robert,<br> <br> Before I look into potential causes, the first I would like to know is: = are you using copSSH, the Cygwin installation with the openSSH package i= nstalled, or the "openSSH for Windows" project from source forge=3F<br> <br> Why do I ask=3F Al three are openSSH from the cygwin project the follow= ing conditions:<br> Cygwin is the thick install proding the option to turn you windows box i= nto a GNU Linux like operating system (via the bash or other shell and s= ome special mappers built into cygwin). The cygwin project installs a b= asic configuration of openSSH which works well on older windows systems,= but requires specific things be done to get the SSH server to work 100%= on windows 2003 and Vista.<br> <br> CopSSH is a pre-packaged minimal installation of Cygwin with a couple mi= nor enhancement patches that installs Cygwin, openSSH, configures you co= mputer (even vista and win2k3) so that openSSH works without any tweakin= g at all.<br> <br> "OpenSSH for Windows" is a dead sourceforge project that is almost ident= ical to copSSH, except that development on the project has stopped a lon= g time ago, and this package requires more tweaking of the ssh settings = and the server that the other options, and is running very old ssh code = that should not be used anymore in my opinion.<br> <br> If you want the easy solution, install copSSH and everything will work. = If you want to get what you have working and you did not install copSSH= then we can offer assistance with making all the appropriate changes, b= ut it will take more time to get SSH services up and running with public= keys, but you will have the option of using any piece of the cygwin pro= ject easily.<br> <br> Armand<br> <br> ----- Original Message -----<br> From: <a href=3D"mailto:[email protected]">[email protected]</a> <<a = href=3D"mailto:[email protected]">[email protected]</a>><br> To: <a href=3D"mailto:[email protected]">[email protected]</a> <<a hr= ef=3D"mailto:[email protected]">[email protected]</a>><br> Sent: Thu May 22 08:48:50 2008<br> Subject: Using Key Pairs on OpenSSH on Win2k3<br> <br> Hello all, I am hoping someone on this list has a good idea how to resol= ve the following difficulty. I need to connect from a linux server to a= windows server via ssh in a script and I need to use keypairs to do thi= s. <br> <br> I have installed Openssh on the win2k3 server and I have implemented the= keypairs. Connecting to the win2k3 server it seems that the keypairs a= re working well, but then I am immediately disconnected from the win2k3 = server. Running ssh with the verbose switch, I get the following:<br> <br> debug1: Authentications that can continue: publickey,password,keyboard-i= nteractive<br> debug1: Next authentication method: publickey<br> debug1: Trying private key: /root/.ssh/identity<br> debug1: Offering public key: /root/.ssh/id=5Frsa<br> debug1: Server accepts key: pkalg ssh-rsa blen 277<br> debug1: read PEM private key done: type RSA<br> debug1: Authentication succeeded (publickey).<br> debug1: channel 0: new [client-session]<br> debug1: Entering interactive session.<br> debug1: Sending environment.<br> debug1: Sending env LANG =3D en=5FUS.UTF-8<br> Last login: Wed May 21 15:44:10 2008 from Larry<br> debug1: client=5Finput=5Fchannel=5Freq: channel 0 rtype exit-status repl= y 0<br> debug1: channel 0: free: client-session, nchannels 1<br> Connection to production closed.<br> debug1: Transferred: stdin 0, stdout 0, stderr 35 bytes in 0.2 seconds<b= r> debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 178.7<br> debug1: Exit status 255<br> <br> I am currently researching the exit status 255 message, but for the rest= I am not sure. The authentication is clearly working and I get into th= e server based on the key exchange but I am being booted right back out.= Another oddity, and I am at a loss to explain this so far, the StrictM= odes option in sshd=5Fconfig plays a role: when set to yes, the keypair= authentication fails. When set to no, it succeeds but I am immediately= disconnected form the server.<br> <br> Any ideas=3F<br> <br> <br> Robert <br> .+-"w=EF=BF=BD=EF=BF=BDi=EF=BF=BD=EF=BF=BDu=EF=BF=BDr=EF=BF=BD=EF=BF=BD\= =EF=BF=BDo=EF=BF=BD=19=7F.+-=02=EF=BF=BD!=EF=BF=BD=EF=BF=BD=EF=BF=BDi=EF= =BF=BD=EF=BF=BDu=EF=BF=BDr=EF=BF=BD=EF=BF=BD\=EF=BF=BDo=DA=AD=EF=BF=BDb= =EF=BF=BD=EF=BF=BD=EF=BF=BD=19=7FN=EF=BF=BD'=EF=BF=BD=EF=BF=BD=EF=BF=BDr= =EF=BF=BD=EF=BF=BDx=C6=A2=EF=BF=BDf=EF=BF=BD=EF=BF=BD=EF=BF=BD,=EF=BF=BD= =1F=EF=BF=BD=EF=BF=BD=CB=9B=EF=BF=BD=EF=BF=BD=EF=BF=BDm=EF=BF=BDu=EF=BF= =BDr=EF=BF=BD=EF=BF=BD\=EF=BF=BDb=1F=CA=8B=EF=BF=BD=EF=BF=BD=EF=BF=BDZ= =EF=BF=BD)=E0=B6=BA.nW=EF=BF=BD=EF=BF=BD=CB=9B=EF=BF=BD=EF=BF=BD=EF=BF= =BDn)=EF=BF=BD+"=EF=BF=BD=EF=BF=BD^.+-"w=E8=A5=A8=1E~=EF=BF=BD=EF=BF=BDz= Z</blockquote><style> </style> </body></html> -------------f371d5cf75bef06adeb09838f558c990-- -- List Info: http://erdelynet.com/ssh-l/ List Archives: http://erdelynet.com/archive/ssh-l/ To Unsubscribe: Mail mailto:[email protected] If you are having trouble unsubscribing, visit the List Info page for help.