SSH issue!!

[Amit Manna_6]

From a HP server when we do ssh (hostname) to another server I get the followingf error:

/opt/ssh/bin/ssh tldnms
Permission denied.

Can anybody suggest a workaround for the same.

[RAC_1]

It is coming from another server-tldnms. Check on that server. May be you are not allowed to log onto it. Check syslog, dmesg on that server.

[RAC_1]

Also ssh -vvv tldnms will give more messages for anlyzing yourm problem.

[Arunvijai_4]

Are you executing this command as a root or normal user ?

[Arunvijai_4]

Check this thread, http://forums2.itrc.hp.com/service/forums/questionanswer.do?threadId=776938

[VEL_1]

check the ~/.ssh/known_hosts for an existing entry for the conflicting box
and check that your firewall settings allow connections on port 22

[VEL_1]

Check the permission of ssh config files. An dalso check the /bin directory. It should be 755.

Permission denied may be anywhere along the path, not the file itself. so look at /bin and / also.

[Amit Manna_6]

I am trying from normal user.

ssh -v tldnms
SSH Version 1.2.27 [hppa1.0-hp-hpux10.20], protocol version 1.5.
Standard version. Does not use RSAREF.
michael: ssh_connect: getuid 0 geteuid 0 anon 0
michael: Connecting to tldnms [10.220.6.17] port 22.
michael: Allocated local port 1023.
michael: Connection established.
michael: Remote protocol version 1.5, remote software version 1.2.27
michael: Waiting for server public key.
michael: Received server public key (768 bits) and host key (1024 bits).
michael: Host 'tldnms' is known and matches the host key.
michael: Initializing random; seed file /root/.ssh/random_seed
michael: Encryption type: idea
michael: Sent encrypted session key.
michael: Installing crc compensation attack detector.
michael: Received encrypted confirmation.
michael: Remote: Server does not permit empty password login.
michael: No agent.
michael: Doing password authentication.
root@tldnms's password:
Permission denied.


I am getting the above error.

Please advice.

[RAC_1]

ssh -vvv would have been better. Looks as if root is not allowed to login directly on the server. If you want to login in as another user, do ssh user@tldnms

[Orhan Biyiklioglu]

Are you sure that you input the correct root password for the machine tldnms. Can you login to this machine by any other means (telnet, ftp, etc.) using this password. Maybe the root password has expired or the root account is disabled.
If you can login to tldnms than check if there are any messages in the syslog

grep sshd /var/adm/syslog/syslog.log

[Orhan Biyiklioglu]

One more point:
If you can login to tldnms than check the sshd config file /opt/ssh/etc/sshd_config whether there is a line

PermitRootLogin no

if so sshd will not allow you to login as root.
Default is PermitRootLogin yes

[Bob_Vance]

First of all, you said that you're "trying from normal user".
Are you sure?
The output you show is asking for *root* password.

Is the remote system also HPUX ?


When you get:

Permission denied, please try again.
bobv@pine3's password:
Permission denied, please try again.

that can mean that the remote account has been disabled, at least on HPUX.
Or, if you simply enter the wrong password!!

Do you have keys configured and exchanged for the account, or are you just relying on passwords?

Normally, without keys and with "ChallengeResponseAuthentication yes" (the default), your first prompt is
password:

You will get the user@host prompt after failing on the simple "password:" prompt. But, by this time the account has been disabled (on HPUX trusted).

Do you have "ChallengeResponseAuthentication no" on the remote system?

Are you really trying to use a null password?


bv

[Raj D.]

Hi Amit ,

It seems that the remote system you are trying to login is not correctly configured ssh. check up the configuration agian.

Cheers,
Raj.

[Raj D.]

Amit,

Also Check up in remote host:

# ps -ef | grep sshd
# lsof /opt/ssh/sbin/sshd

also check there should not be /etc/nologin , else it will not allow to connect.

And provide some more info if still not able to connect..

hth,
Raj.