topic Re: sshd question in Operating System - HP-UX

sshd question

Aljosa_1 — Tue, 15 Feb 2005 03:41:33 GMT

Hi,

I'm trying to connect to my ssh server (3.91.002) on hpux 11.00. I'm trying to use public key authentication but I'm receiving following error: Authentication refused: bad ownership or modes for file authorized_keys. I check this file and have following permissions: 600 root sys. Any ideas?

Aljosa

Re: sshd question

Peter Godron — Tue, 15 Feb 2005 03:50:38 GMT

Aljosa,
did you have a look at:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=466828
Regards

Re: sshd question

Peter Godron — Tue, 15 Feb 2005 03:54:37 GMT

Aljosa,
you may also want to scan through:
http://www.nitech.com/consulting/onlinesupport/unix/hpuxSecureShell.html
Regards

Re: sshd question

Gordon Morrison_1 — Tue, 15 Feb 2005 05:51:05 GMT

This may be a silly question, but are you trying to login as root? Only root can read the authorized_keys file with the ownership/permissions you stated.

Re: sshd question

Jerome_18 — Wed, 16 Feb 2005 00:08:48 GMT

Are you doing ssh from a unix/linux box.. or from a windows box.
If it's unix/linux, then try using
ssh -v option. It provides verbose information and will help in resolving the problem faster.
If you are using cygwin on windows, you can log all information onto a file and trace out the error.
Do atatch these outputs and send it.

Thanks
Jerome

Re: sshd question

Aljosa_1 — Wed, 16 Feb 2005 03:38:56 GMT

Hi,

at the client side (Windows) I use Putty.
I check and change file and folders permissions at the server site.

Now I'm getting error: server refuses our key and at the server site only error I found is in syslog.log: Failed none for root from ...

Aljosa

Re: sshd question

Andrew Cowan — Wed, 16 Feb 2005 04:13:47 GMT

SSH checks the ownership of the ".ssh" directory, and the "authorized_hosts", and your home directory. Check that all these are owned by you.

The other alternative is to set the variable:

StrictModes no

in "/etc/ssh/sshd_config, then restart sshd and retry to see if this is really the problem.

====
http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&sektion=5&arch=&apropos=0&manpath=OpenBSD+Current

StrictModes
Specifies whether sshd should check file modes and ownership of the user's files and home directory before accepting login. This is normally desirable because novices sometimes accidentally leave their directory or files world-writable. The default is ``yes''.
====

Re: sshd question

Aljosa_1 — Wed, 16 Feb 2005 04:41:15 GMT

I change disable StrictModes: StrictModes no. But I'm still getting the same error?

Aljosa

Re: sshd question

Andrew Cowan — Wed, 16 Feb 2005 05:10:03 GMT

Have you tried using SSH to connect the Unix box back to itself? If you run up two telnet sessions, then run "sshd -d" on one, and "ssh -v localhost" this should tell you what SSH is complaining about.

Re: sshd question

Michael Selvesteen_2 — Wed, 16 Feb 2005 05:11:26 GMT

Please check the following,

1.Ensure you have correctly appended the correct public key generated from puttygen.exe to the
~/.ssh/authorized_keys
or
~/.ssh/authorized_keys2

2.At the client side (PuTTY), in the connection tab ensure you have provided the user name by which you connect to the server.

3. Check whether server supports public key authentication. ( setting yes to PubkeyAuthentication directive in sshd_config)

4. Try posting detailed server and client debug messages for better analysis.

All the Best.

Re: sshd question

Andrew Cowan — Wed, 16 Feb 2005 05:31:27 GMT

Another common problem with Putty keys is if you have copied them and picked-up some line breaks in the key. It should be one continuous line.

Re: sshd question

Aljosa_1 — Wed, 16 Feb 2005 05:33:22 GMT

Thnx all. I solve problem. There was missing a part of data in my autorized_keys file.

Aljosa