From owner-freebsd-questions  Mon Jun  3 11:45:42 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mail.rpi.edu (mail.rpi.edu [128.113.22.40])
	by hub.freebsd.org (Postfix) with ESMTP id 61D7637B403
	for <freebsd-questions@FreeBSD.ORG>; Mon,  3 Jun 2002 11:45:38 -0700 (PDT)
Received: from [128.113.24.47] (gilead.netel.rpi.edu [128.113.24.47])
	by mail.rpi.edu (8.12.1/8.12.1) with ESMTP id g53IjanK554124;
	Mon, 3 Jun 2002 14:45:36 -0400
Mime-Version: 1.0
X-Sender: drosih@mail.rpi.edu
Message-Id: <p0511171eb92168fd8d81@[128.113.24.47]>
In-Reply-To: <000001c20b28$81b7d0e0$0264a8c0@3dmdomain.local>
References: <000001c20b28$81b7d0e0$0264a8c0@3dmdomain.local>
Date: Mon, 3 Jun 2002 14:45:35 -0400
To: <leroy@3dmasters.net>, <freebsd-questions@FreeBSD.ORG>
From: Garance A Drosihn <drosih@rpi.edu>
Subject: Re: SSH PROTOCOL 2
Content-Type: text/plain; charset="us-ascii" ; format="flowed"
X-Scanned-By: MIMEDefang 2.3 (www dot roaringpenguin dot com slash mimedefang)
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

At 11:00 AM -0700 6/3/02, Admin/Manager wrote:
>    I am using freebsd 4.5 RELEASE and i tryied to make sshd_conf
>run protocol 2 only and now i get this error:
>login as: bozo
>otp-md5 412 la8195 ext
>S/Key Password:
>
>
>    Then i try to enter a password and i get this error:
>Access denied
>bozo@199.199.199.199's password:
>
>Then i can enter my password and it works fine.

Check your sshd_conf for some lines that look like:

# Change to no to disable s/key passwords
#ChallengeResponseAuthentication no

That second line is probably commented out in your sshd_conf
file.  See what happens if you un-comment it (ie, just remove
the '#').  I think you're tripping over a minor bug in sshd,
which is fixed in later versions.  It thinks you want S/Key
authentication, even though you're not set up for it.

-- 
Garance Alistair Drosehn            =   gad@gilead.netel.rpi.edu
Senior Systems Programmer           or  gad@freebsd.org
Rensselaer Polytechnic Institute    or  drosih@rpi.edu

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message