|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
|
Re: [PLUG] Problems with password-less SSH
|
- From: "Kyle R. Burton" <kyle.burton@gmail.com>
- To: "Philadelphia Linux User's Group Discussion List" <plug@lists.phillylinux.org>
- Subject: Re: [PLUG] Problems with password-less SSH
- Date: Wed, 21 Jul 2010 10:35:34 -0400
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:content-type; bh=0vUoxQgQaRdHMpgSLXdTyevJPY6JQmd1wRjwRke6hf0=; b=NHUGgOmGm+XaC6nRF5+nmLdr9sU/4t3ufi9l2foqUhKUN72z8sY3mZ58uqhDjZjS7l ILM1hFQEGaJ1ZzKvaLraWS3dB6J9EsRO6TMNuX9cVW0btIDl1av9c1GJL6/SWKMCObMe FK7MEUwn3IMpc8o1AFuHD+4dhb/DpKUTAHf+E=
- Reply-to: Philadelphia Linux User's Group Discussion List <plug@lists.phillylinux.org>
- Sender: plug-bounces@lists.phillylinux.org
>> One thing that often gets me is to ensure that FileCollector's .ssh
>> directory is 700, and that the files within it are 600.
>
> They are.
I know I'm being pedantic - but they need to be this way on both
boxes...and what I see below makes me think the perms are correct...
> If I understood it all, I'm sure it would be helpful. :-) I saw this (from a
> single -v):
>
> debug1: Host '192.168.1.30' is known and matches the RSA host key.
> debug1: Found key in /home/vadmin/.ssh/known_hosts:1
> debug1: ssh_rsa_verify: signature correct
> debug1: SSH2_MSG_NEWKEYS sent
> debug1: expecting SSH2_MSG_NEWKEYS
> debug1: SSH2_MSG_NEWKEYS received
> debug1: SSH2_MSG_SERVICE_REQUEST sent
> debug1: SSH2_MSG_SERVICE_ACCEPT received
> debug1: Authentications that can continue:
> publickey,gssapi-with-mic,password
> debug1: Next authentication method: gssapi-with-mic
> debug1: An invalid name was supplied
> Cannot determine realm for numeric host address
Googling for that (An invalid name was supplied) returned this:
http://www.webmasterworld.com/forum40/1350.htm
which mentions 'verifyreversemapping' in the sshd_config - is that set to 'yes'?
>
> debug1: An invalid name was supplied
> Cannot determine realm for numeric host address
>
> debug1: An invalid name was supplied
>
>
> debug1: Next authentication method: publickey
That it's trying the keys is a good sign that the permissions are correct...
> debug1: Trying private key: /home/vadmin/.ssh/identity
> debug1: Offering public key: /home/vadmin/.ssh/id_rsa
> debug1: Authentications that can continue:
> publickey,gssapi-with-mic,password
> debug1: Trying private key: /home/vadmin/.ssh/id_dsa
> debug1: Next authentication method: password
>
>
> And then I am prompted for the password. Anybody see anything that tells
> them anything? :-)
Kyle
--
Twitter: @kyleburton
Blog: http://asymmetrical-view.com/
Fun: http://snapclean.me/
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug
|
|