From owner-freebsd-stable Mon Jul 8 7:37:41 2002 Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 981EA37B400 for ; Mon, 8 Jul 2002 07:37:35 -0700 (PDT) Received: from sumter.awod.com (sumter.awod.com [208.140.99.1]) by mx1.FreeBSD.org (Postfix) with ESMTP id E0E5343E09 for ; Mon, 8 Jul 2002 07:37:34 -0700 (PDT) (envelope-from stanb@awod.com) Received: from teddy.fas.com (pcp01010372pcs.mplsnt01.sc.comcast.net [68.58.176.67]) by sumter.awod.com (8.8.7/8.12.2) with ESMTP id KAA11233 for ; Mon, 8 Jul 2002 10:37:33 -0400 (EDT) (envelope-from stanb@awod.com) X-Authentication-Warning: sumter.awod.com: User stanb [pcp01010372pcs.mplsnt01.sc.comcast.net] popped 141 seconds ago Received: from stan by teddy.fas.com with local (Exim 3.35 #1 (Debian)) id 17RZjY-0006Xf-00 for ; Mon, 08 Jul 2002 10:43:24 -0400 Date: Mon, 8 Jul 2002 10:43:24 -0400 From: stan To: FreeBSD Stable Mailing List Subject: ssh to remote machines problem after cvsup Message-ID: <20020708144324.GA24911@teddy.fas.com> Mail-Followup-To: FreeBSD Stable Mailing List Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable User-Agent: Mutt/1.3.28i X-Editor: gVim X-Operating-System: Debian GNU/Linux X-Kernel-Version: 2.4.17 X-Uptime: 10:35:31 up 19 days, 15:54, 1 user, load average: 0.24, 0.20, 0.18 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG I thought I would repost this with more information. I cvsup'd, rebuilt everythign, and ran mergemester this weekend on my 4STABLE laptop. Now I'm having trouble ssh'ing to machines that could get to before. The first clue was that I got a message about not being able to authenticate each and every machien that I try to ssh to. So, I have been acepting the new keys.=20 Some machines will let me in, but only if I enter the password (where I did not have to before). Others just refuse to let me in at all! Here's a log of one of the ones that won't let me in: Script started on Mon Jul 8 10:27:44 2002 =1B]0;stan@brown.westvaco.com;/home/stan=07stan@brown.westvaco.com:/home/st= an $ ssh -v phse7 OpenSSH_3.4p1 FreeBSD-20020702, SSH protocols 1.5/2.0, OpenSSL 0x0090601f debug1: Reading configuration data /etc/ssh/ssh_config debug1: Rhosts Authentication disabled, originating port will not be truste= d. debug1: ssh_connect: needpriv 0 debug1: Connecting to phse7 [170.85.106.132] port 22. debug1: Connection established. debug1: identity file /home/stan/.ssh/identity type 0 debug1: identity file /home/stan/.ssh/id_rsa type -1 debug1: identity file /home/stan/.ssh/id_dsa type -1 debug1: Remote protocol version 1.99, remote software version OpenSSH_2.5.1= p1 debug1: match: OpenSSH_2.5.1p1 pat OpenSSH_2.5.0p1*,OpenSSH_2.5.1p1* Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_3.4p1 FreeBSD-20020702 debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug1: kex: server->client 3des-cbc hmac-md5 none debug1: kex: client->server 3des-cbc hmac-md5 none debug1: SSH2_MSG_KEX_DH_GEX_REQUEST_OLD sent debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP debug1: dh_gen_key: priv key bits set: 210/384 debug1: bits set: 1024/2049 debug1: SSH2_MSG_KEX_DH_GEX_INIT sent debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY debug1: Host 'phse7' is known and matches the DSA host key. debug1: Found key in /home/stan/.ssh/known_hosts:33 debug1: bits set: 1017/2049 debug1: ssh_dss_verify: signature correct debug1: kex_derive_keys debug1: newkeys: mode 1 debug1: SSH2_MSG_NEWKEYS sent debug1: waiting for SSH2_MSG_NEWKEYS debug1: newkeys: mode 0 debug1: SSH2_MSG_NEWKEYS received debug1: done: ssh_kex2. debug1: send SSH2_MSG_SERVICE_REQUEST debug1: service_accept: ssh-userauth debug1: got SSH2_MSG_SERVICE_ACCEPT debug1: authentications that can continue: publickey,keyboard-interactive debug1: next auth method to try is publickey debug1: try privkey: /home/stan/.ssh/id_rsa debug1: try privkey: /home/stan/.ssh/id_dsa debug1: next auth method to try is keyboard-interactive debug1: authentications that can continue: publickey,keyboard-interactive debug1: no more auth methods to try Permission denied (publickey,keyboard-interactive). debug1: Calling cleanup 0x804bef8(0x0) =1B]0;stan@brown.westvaco.com;/home/stan=07stan@brown.westvaco.com:/home/st= an $=20 Script done on Mon Jul 8 10:27:58 2002 Can some kind soul tell me what I need to do to corect this problem? --=20 "They that would give up essential liberty for temporary safety deserve neither liberty nor safety." -- Benjamin Franklin To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message