topic Re: SSH issue!! in Operating System - HP-UX

SSH issue!!

Amit Manna_6 — Thu, 15 Sep 2005 02:45:52 GMT

From a HP server when we do ssh (hostname) to another server I get the followingf error:

/opt/ssh/bin/ssh tldnms
Permission denied.

Can anybody suggest a workaround for the same.

Re: SSH issue!!

RAC_1 — Thu, 15 Sep 2005 02:47:52 GMT

It is coming from another server-tldnms. Check on that server. May be you are not allowed to log onto it. Check syslog, dmesg on that server.

Re: SSH issue!!

RAC_1 — Thu, 15 Sep 2005 02:50:44 GMT

Also ssh -vvv tldnms will give more messages for anlyzing yourm problem.

Re: SSH issue!!

Arunvijai_4 — Thu, 15 Sep 2005 02:51:30 GMT

Are you executing this command as a root or normal user ?

Re: SSH issue!!

Arunvijai_4 — Thu, 15 Sep 2005 02:53:32 GMT

Check this thread, http://forums2.itrc.hp.com/service/forums/questionanswer.do?threadId=776938

Re: SSH issue!!

VEL_1 — Thu, 15 Sep 2005 02:58:36 GMT

check the ~/.ssh/known_hosts for an existing entry for the conflicting box
and check that your firewall settings allow connections on port 22

Re: SSH issue!!

VEL_1 — Thu, 15 Sep 2005 03:11:49 GMT

Check the permission of ssh config files. An dalso check the /bin directory. It should be 755.

Permission denied may be anywhere along the path, not the file itself. so look at /bin and / also.

Re: SSH issue!!

Amit Manna_6 — Thu, 15 Sep 2005 03:26:50 GMT

I am trying from normal user.

ssh -v tldnms
SSH Version 1.2.27 [hppa1.0-hp-hpux10.20], protocol version 1.5.
Standard version. Does not use RSAREF.
michael: ssh_connect: getuid 0 geteuid 0 anon 0
michael: Connecting to tldnms [10.220.6.17] port 22.
michael: Allocated local port 1023.
michael: Connection established.
michael: Remote protocol version 1.5, remote software version 1.2.27
michael: Waiting for server public key.
michael: Received server public key (768 bits) and host key (1024 bits).
michael: Host 'tldnms' is known and matches the host key.
michael: Initializing random; seed file /root/.ssh/random_seed
michael: Encryption type: idea
michael: Sent encrypted session key.
michael: Installing crc compensation attack detector.
michael: Received encrypted confirmation.
michael: Remote: Server does not permit empty password login.
michael: No agent.
michael: Doing password authentication.
root@tldnms's password:
Permission denied.

I am getting the above error.

Please advice.

Re: SSH issue!!

RAC_1 — Thu, 15 Sep 2005 03:34:43 GMT

ssh -vvv would have been better. Looks as if root is not allowed to login directly on the server. If you want to login in as another user, do ssh user@tldnms

Re: SSH issue!!

Orhan Biyiklioglu — Thu, 15 Sep 2005 03:36:49 GMT

Are you sure that you input the correct root password for the machine tldnms. Can you login to this machine by any other means (telnet, ftp, etc.) using this password. Maybe the root password has expired or the root account is disabled.
If you can login to tldnms than check if there are any messages in the syslog

grep sshd /var/adm/syslog/syslog.log

Re: SSH issue!!

Orhan Biyiklioglu — Thu, 15 Sep 2005 03:40:44 GMT

One more point:
If you can login to tldnms than check the sshd config file /opt/ssh/etc/sshd_config whether there is a line

PermitRootLogin no

if so sshd will not allow you to login as root.
Default is PermitRootLogin yes

Re: SSH issue!!

Bob_Vance — Sun, 18 Sep 2005 09:09:34 GMT

First of all, you said that you're "trying from normal user".
Are you sure?
The output you show is asking for *root* password.

Is the remote system also HPUX ?

When you get:

Permission denied, please try again.
bobv@pine3's password:
Permission denied, please try again.

that can mean that the remote account has been disabled, at least on HPUX.
Or, if you simply enter the wrong password!!

Do you have keys configured and exchanged for the account, or are you just relying on passwords?

Normally, without keys and with "ChallengeResponseAuthentication yes" (the default), your first prompt is
password:

You will get the user@host prompt after failing on the simple "password:" prompt. But, by this time the account has been disabled (on HPUX trusted).

Do you have "ChallengeResponseAuthentication no" on the remote system?

Are you really trying to use a null password?

bv

Re: SSH issue!!

Raj D. — Sun, 18 Sep 2005 10:25:47 GMT

Hi Amit ,

It seems that the remote system you are trying to login is not correctly configured ssh. check up the configuration agian.

Cheers,
Raj.

Re: SSH issue!!

Raj D. — Sun, 18 Sep 2005 10:29:07 GMT

Amit,

Also Check up in remote host:

# ps -ef | grep sshd
# lsof /opt/ssh/sbin/sshd

also check there should not be /etc/nologin , else it will not allow to connect.

And provide some more info if still not able to connect..

hth,
Raj.