topic Re: SSH Authentication Failed in Operating System - OpenVMS

SSH Authentication Failed

Robert Jacobs — Wed, 24 Aug 2005 11:30:16 GMT

I will try and make this short

My coworker has been able to ssh to a server from a Putty session on his pc.

So we know the public and private keys work in that senario.

On the tru64 side of the gs160 I ftp the private client key to OpenVMS and converted the file to Stream_LF as I found out in the documentation.

Both on the tru64 side and OpenVMS side the SSH session indicates the public key has been accepted and I did find it in the
SYS$SYSDEVICE:[TCPIP$SSH.SSH2.HOSTKEYS] directory.

**********************************************
Host key saved to ssh2/hostkeys/key_gs160.pub
host key for gs160, accepted by system Tue Aug 23 2005 22:39:57
warning: Authentication failed.
Disconnected; no more authentication methods available (No further authenticatio
n methods available.).
**********************************************

Any help here would be very great

Thank you all again

Robert J.

Re: SSH Authentication Failed

Robert_Boyd — Wed, 24 Aug 2005 13:13:14 GMT

Robert,

Could you provide the commands that you're using that generate the failure you show here?

Robert

Re: SSH Authentication Failed

Robert Jacobs — Wed, 24 Aug 2005 14:05:15 GMT

Thank you for your help

This is kind of tuff sleading on this issue

At this point I have been able to use OpenVMS as a SSH server in the context of downloading Putty setting an IP address and using I guess just password based authentication. One small step for mindkind. I was able to gain a $ prompt and do some basic commands like $show system

Without going into to much troubleshooting at this point in regards to the use of Public/Private key pairs. There may be a problem with the Keys that were generated at this unix box. Which is a custom linux system.

The first thing I did was to ftp this private key file icat.PPK from the tru64 side of the gs160 this file was generated on the other custom linux box

on the OpenVMS side of the gs160 I converted the file into Stream_LF as shown below in the dir/full output

********************************************

icat.PPK;3 File ID: (8433,2,0)
Size: 2/3 Owner: [1,1]
Created: 23-AUG-2005 15:25:58.43
Revised: 23-AUG-2005 15:25:58.48 (1)
Expires:
Backup:
Effective:
Recording:
Accessed:
Attributes:
Modified:
Linkcount: 1
File organization: Sequential
Shelved state: Online
Caching attribute: Writethrough
File attributes: Allocation: 3, Extend: 0, Global buffer count: 0
No version limit
Record format: Stream_LF, maximum 0 bytes, longest 65 bytes
Record attributes: Carriage return carriage control
RMS attributes: None
Journaling enabled: None
File protection: System:RWED, Owner:RWED, Group:RE, World:
Access Cntrl List: None
Client attributes: None

********************************************

I am getting regected from both the linux box and the tru64 using this private key

at this stage i want to ask my coworker to regenerate the key pairs and start over.

my coworker get authenticated to the linux box but not on tru64

This is starting to drive me crazy. As long as he get in to the linux box from his PC he does not want to regen any keys at this stage

Any hints and I will keep you posted

Thanks Robert J

Re: SSH Authentication Failed

Robert_Boyd — Wed, 24 Aug 2005 14:20:00 GMT

Which directory did you put the icat.PPK file in?

See this documentation page for the rules about how to set up keys correctly:

http://h71000.www7.hp.com/DOC/732final/aa-rvbua-te/aa-rvbua-te.html

Robert