Hello,
We have a problem with OpenSSH and HP-UX 11i. With OpenSSH_3.6.1p1 we can
use the publickeys (~/.ssh/id_rsa). With the same .ssh-dir and config-files
in /etc/openssh OpenSSH_3.7.1p2 will not use the publickeys and prompt
for password :-( We have try this with OpenSSL 0.9.7b and OpenSSL 0.9.7c !
Why OpenSSH_3.7.1p2 not use my publickey-files ????????
The OpenSSH_3.7.1p2-Server (sshd) has no problems with publickeys from
other clients, but the OpenSSH_3.7.1p2-Clients (ssh,scp) will not use
our publickeys :-(
Here are debug output from OpenSSH_3.6.1p1 and OpenSSH_3.7.1p2:
-------------------------------------------------------------------
OpenSSH_3.6.1p1, SSH protocols 1.5/2.0, OpenSSL 0x0090702f
...
debug1: Host 'XXXX' is known and matches the RSA host key.
debug1: Found key in /root/.ssh/known_hosts:13
debug2: bits set: 1609/3191
debug1: ssh_rsa_verify: signature correct
debug2: kex_derive_keys
debug2: set_newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password
debug3: start over, passed a different list publickey,password
debug3: preferred publickey,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Offering public key: /root/.ssh/id_rsa
debug3: send_pubkey_test
debug2: we sent a publickey packet, wait for reply
...
-------------------------------------------------------------------
---------------------------------------------------------------------
OpenSSH_3.7.1p2, SSH protocols 1.5/2.0, OpenSSL 0.9.7b 10 Apr 2003
...
debug1: Host 'XXXX' is known and matches the RSA host key.
debug1: Found key in /root/.ssh/known_hosts:13
debug2: bits set: 1568/3191
debug1: ssh_rsa_verify: signature correct
debug2: kex_derive_keys
debug2: set_newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password
debug3: start over, passed a different list publickey,password
debug3: preferred publickey,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password
debug3: remaining preferred:
debug3: authmethod_is_enabled password
debug1: Next authentication method: password
...
---------------------------------------------------------------------
Greetings
Wolfram Greinert
--
###########################################
# Wolfram Greinert #
# URZ der Uni Leipzig, Abteilung Netze #
# 04109 Leipzig, Augustusplatz 10/11 #
# Tel.: +(0341) 97-33325 #
# email: greinert at rz.uni-leipzig.de #
###########################################
