openssh unix dev - Aug 2002 - Authenticated with partial success ?

Hi all,

I've got the following problem when connecting to a SSH server version
2.0.13
with dsa public key authentication. Instead of logging in I get 
"Authenticated with partial success". I attached the complete output
of
"ssh -v".

The interesting part: This only happens when connecting from one special 
machine (running SuSE 8.0, OpenSSH 3.4p1). From any other machine (running 
the same version of OpenSSH) I can log in without problems. Even copying a 
proven to work key-pair to that machine does not help.

Whats wrong? Am I missing something?

Thanks,

Martin
-------------- next part --------------
OpenSSH_3.4p1, SSH protocols 1.5/2.0, OpenSSL 0x0090603f
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: ssh_connect: needpriv 0
debug1: Connecting to hunter.xxxxxxxxxxxxxxxxxxxxx [xxxxxxxxxxx] port 22.
debug1: Connection established.
debug1: identity file /home/martin/.ssh/identity type -1
debug1: identity file /home/martin/.ssh/id_rsa type -1
debug1: identity file /home/martin/.ssh/id_dsa type 2
debug1: Remote protocol version 1.99, remote software version 2.0.13
(non-commercial)
debug1: match: 2.0.13 (non-commercial) pat
2.0.13*,2.0.14*,2.0.15*,2.0.16*,2.0.17*,2.0.18*,2.0.19*
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.4p1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client 3des-cbc hmac-md5 none
debug1: kex: client->server 3des-cbc hmac-md5 none
debug1: dh_gen_key: priv key bits set: 212/384
debug1: bits set: 519/1024
debug1: sending SSH2_MSG_KEXDH_INIT
debug1: expecting SSH2_MSG_KEXDH_REPLY
debug1: Host 'hunter.xxxxxxxxxxxxxxxxxxxx' is known and matches the DSA
host key.
debug1: Found key in /home/martin/.ssh/known_hosts:1
debug1: bits set: 491/1024
debug1: ssh_dss_verify: signature correct
debug1: kex_derive_keys
debug1: newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: waiting for SSH2_MSG_NEWKEYS
debug1: newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: done: ssh_kex2.
debug1: send SSH2_MSG_SERVICE_REQUEST
debug1: buggy server: service_accept w/o service
debug1: got SSH2_MSG_SERVICE_ACCEPT
debug1: authentications that can continue: 
debug1: next auth method to try is publickey
debug1: try privkey: /home/martin/.ssh/identity
debug1: try privkey: /home/martin/.ssh/id_rsa
debug1: try pubkey: /home/martin/.ssh/id_dsa
debug1: input_userauth_pk_ok: pkalg ssh-dss blen 817 lastkey 0x8093dd0 hint 2
debug1: read PEM private key done: type DSA
Authenticated with partial success.
debug1: authentications that can continue: 
debug1: next auth method to try is keyboard-interactive
debug1: authentications that can continue: 
debug1: next auth method to try is password

It probably means that the authentication succeeded but the
authorization failed. Check the authorized_keys entries.

The SSHv2 authentication protocol draft is a little unclear.
Section 2.2 seems to mean that if authentication succeeds but
authorization fails then the server must respond with a partial
userauth error.

Cheers,

Nico
-- 
> -----Original Message-----
> From: Martin Habbecke [mailto:M.Habbecke at gmx.de]
> Sent: Wednesday, August 21, 2002 3:38 PM
> To: openssh-unix-dev at mindrot.org
> Subject: Authenticated with partial success ?
> 
> 
> Hi all,
> 
> I've got the following problem when connecting to a SSH 
> server version 2.0.13 
> with dsa public key authentication. Instead of logging in I get 
> "Authenticated with partial success". I attached the complete 
> output of 
> "ssh -v".
> 
> The interesting part: This only happens when connecting from 
> one special 
> machine (running SuSE 8.0, OpenSSH 3.4p1). From any other 
> machine (running 
> the same version of OpenSSH) I can log in without problems. 
> Even copying a 
> proven to work key-pair to that machine does not help.
> 
> Whats wrong? Am I missing something?
> 
> Thanks,
> 
> Martin
> 
Visit our website at http://www.ubswarburg.com

This message contains confidential information and is intended only 
for the individual named.  If you are not the named addressee you 
should not disseminate, distribute or copy this e-mail.  Please 
notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system.

E-mail transmission cannot be guaranteed to be secure or error-free 
as information could be intercepted, corrupted, lost, destroyed, 
arrive late or incomplete, or contain viruses.  The sender therefore 
does not accept liability for any errors or omissions in the contents 
of this message which arise as a result of e-mail transmission.  If 
verification is required please request a hard-copy version.  This 
message is provided for informational purposes and should not be 
construed as a solicitation or offer to buy or sell any securities or 
related financial instruments.