openssh unix dev - Mar 2009 - question on using keys

I've read man ssh and man ssh-keygen and some howtos and still am not
getting what I expect.

I can do ssh john at 192.168.15.3 and login with a password OK.

I want to be able to do that with keys in preparation for running rsync with
keys, so I created
a key on router1, the machine I want to ssh from.

routem at router1:~/.ssh$ lla
total 20
drwx------ 2 routem routem 4096 2009-03-08 09:55 .
drwxr-xr-x 5 routem routem 4096 2009-03-08 13:41 ..
-rw------- 1 routem routem 1675 2009-03-07 12:02 id_rsync_rsa
-rw-r--r-- 1 routem routem  397 2009-03-07 12:02 id_rsync_rsa.pub
-rw-r--r-- 1 routem routem  650 2009-03-08 09:56 known_hosts

I used scp to copy id_rsync_rsa.pub over to 192.168.15.3:/home/john/.ssh

john at toolbench:~/.ssh$ lla
total 60
drwx------   2 john cibolo  4096 2009-03-08 09:54 .
drwxrwxr-x 162 john cibolo 12288 2009-03-08 11:47 ..
-rw-r--r--   1 john john    4096 2005-11-26 09:26 .known_hosts.swo
-rw-------   1 john john     963 2006-10-15 13:26 IDENTITY
-rw-r--r--   1 john john     963 2006-10-15 13:26 IDENTITY.cibolo
-rw-------   1 john john     397 2009-03-07 15:04 authorized_keys2


Now I try the below command:


ssh -2 -vvv  -i "/home/routem/.ssh/id_rsync_rsa" john at 192.168.15.3


It comes to problems right away:


OpenSSH_5.1p1 Debian-5, OpenSSL 0.9.8g 19 Oct 2007
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug3: key names ok: [ssh-dss,ssh-rsa]
debug2: ssh_connect: needpriv 0
debug1: Connecting to 192.168.15.3 [192.168.15.3] port 22.
debug1: Connection established.
debug3: Not a RSA1 key file /home/routem/.ssh/id_rsync_rsa.
debug2: key_type_from_name: unknown key type '-----BEGIN'
debug3: key_read: missing keytype
debug3: key_read: missing whitespace

My ssh-config on both machines is default plus these lines:
    Protocol 2,1
     HostKeyAlgorithms    ssh-dss,ssh-rsa


after the above wrong looking log lines this also looks suspicious:

debug2: key: /home/routem/.ssh/id_rsync_rsa (0x7007dae0)
debug1: Authentications that can continue: publickey,password
debug3: start over, passed a different list publickey,password
debug3: preferred
gssapi-keyex,gssapi-with-mic,gssapi,publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Offering public key: /home/routem/.ssh/id_rsync_rsa
debug3: send_pubkey_test
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey,password
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password


it drops to password and that will work if entered.

Any hints appreciated.

John Griessen

John Griessen wrote:
..
> -rw-------   1 john john     397 2009-03-07 15:04 authorized_keys2
Rename this to authorized_keys and it should work. authorized_keys2
is a very old filename that recent versions of OpenSSH do not use
anymore.

> debug3: Not a RSA1 key file /home/routem/.ssh/id_rsync_rsa.
> debug2: key_type_from_name: unknown key type '-----BEGIN'
> debug3: key_read: missing keytype
> debug3: key_read: missing whitespace
This is as expected. The file is an RSA key file for use with SSH
protocol version 2.

> after the above wrong looking log lines this also looks suspicious:
> 
> debug2: key: /home/routem/.ssh/id_rsync_rsa (0x7007dae0)
This is also as expected. ssh has now loaded your key.


Keyfile handling was unified so that the user does not have to say
which type of key each file contains. The flip side is that there
will always be an error message.


//Peter

On Sun, 8 Mar 2009, Peter Stuge wrote:
> John Griessen wrote:
> ..
> > -rw-------   1 john john     397 2009-03-07 15:04 authorized_keys2
> 
> Rename this to authorized_keys and it should work. authorized_keys2
> is a very old filename that recent versions of OpenSSH do not use
> anymore.
authorized_keys2 is still checked.

-d

Damien Miller wrote:
> On Sun, 8 Mar 2009, Peter Stuge wrote:
> > > -rw-------   1 john john     397 2009-03-07 15:04
authorized_keys2
> > 
> > Rename this to authorized_keys and it should work. authorized_keys2
> > is a very old filename that recent versions of OpenSSH do not use
> > anymore.
> 
> authorized_keys2 is still checked.
Oh thanks! I was pretty sure it had gone away because I found one of
these files on a system with an old OpenSSH and I renamed it as I
upgraded. I was just playing it safe then.


//Peter