From owner-freebsd-security Wed Mar 6 8:32:44 2002 Delivered-To: freebsd-security@freebsd.org Received: from relay3-gui.server.ntli.net (relay3-gui.server.ntli.net [194.168.4.200]) by hub.freebsd.org (Postfix) with ESMTP id 082CC37B400 for ; Wed, 6 Mar 2002 08:32:36 -0800 (PST) Received: from pc4-card4-0-cust162.cdf.cable.ntl.com ([80.4.14.162] helo=rhadamanth.private.submonkey.net ident=mailnull) by relay3-gui.server.ntli.net with esmtp (Exim 3.03 #2) id 16ieLD-0000tg-00 for security@freebsd.org; Wed, 06 Mar 2002 16:32:35 +0000 Received: from setantae by rhadamanth.private.submonkey.net with local (Exim 3.35 #1) id 16ieKq-000F6h-00; Wed, 06 Mar 2002 16:32:12 +0000 Date: Wed, 6 Mar 2002 16:32:12 +0000 From: Ceri To: David Wolfskill Cc: mwlucas@blackhelicopters.org, security@FreeBSD.ORG Subject: Re: ssh keys not working? Message-ID: <20020306163212.GA57856@submonkey.net> Mail-Followup-To: Ceri , David Wolfskill , mwlucas@blackhelicopters.org, security@FreeBSD.ORG References: <20020306161335.GC57440@submonkey.net> <200203061618.g26GI8N20045@bunrab.catwhisker.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200203061618.g26GI8N20045@bunrab.catwhisker.org> User-Agent: Mutt/1.3.27i Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Wed, Mar 06, 2002 at 08:18:08AM -0800, David Wolfskill wrote: > >Date: Wed, 6 Mar 2002 16:13:35 +0000 > >From: Ceri > > >Other than that, check that your Protocol line is 1,2 instead of 2,1. > > I would be somewhat surprised if that were effective, as I have > > Protocol 2,1 > > explicitly in my ~/.ssh/ssh_config, and relay on ssh for connecting to > other machines routinely. Seeing Michael's follow-up, I would suggest you prepare to be surprised. I have often found RSA key authentication to fail when version 2 is used first. Ceri -- keep a mild groove on To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message