Date: Mon, 17 Mar 2003 13:27:55 -0500 From: Edmond Baroud <SoHo@admin.fido.ca> To: "John Straiton" <jsmailing@clickcom.com> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: SSH woes Message-ID: <20030317132755.05bdce74.SoHo@admin.fido.ca> In-Reply-To: <003001c2ecad$c3d8fc30$1916c60a@win2k.clickcom.com> References: <20030317122806.7f7fe9df.SoHo@admin.fido.ca> <003001c2ecad$c3d8fc30$1916c60a@win2k.clickcom.com>
next in thread | previous in thread | raw e-mail | index | archive | help
this doesn't help much :) -> su testuser; env this does -> su - testuser;env Ed. On Mon, 17 Mar 2003 12:50:52 -0500 "John Straiton" <jsmailing@clickcom.com> wrote: > > do you have /root/.ssh/config ? > > No. Between both machines, no files exist in any /root/.ssh or ~/.ssh > directory other than known_hosts which apparently is fine based on the > verbose logging. For completeness, I'm including the full root > connection verbose log. > > >if u dont, could u paste your "env" output for us here? > Here it is, my comments are in ()'s. I'm pasting the output for root , > then testuser. > > # env > USER=jks > LOGNAME=jks > HOME=/root > MAIL=/var/mail/jks > PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/games:/usr/local/sbin:/usr/local > /bin:/usr/X11R6/bin:/root/bin > TERM=vt100 > BLOCKSIZE=K > FTP_PASSIVE_MODE=YES > SHELL=/bin/csh > SSH_CLIENT=209.198.xxx.xxx 4489 22 (my > workstation) > SSH_CONNECTION=209.198.xxx.xxx 4489 209.198.yyy.yyy 22 (my > workstation, local machine) > SSH_TTY=/dev/ttyp0 > HOSTTYPE=FreeBSD > VENDOR=intel > OSTYPE=FreeBSD > MACHTYPE=i386 > SHLVL=2 > PWD=/root/.ssh > GROUP=unknown > HOST=MACHINE1.clickcom.com > REMOTEHOST=MYWORKSTATION.clickcom.com > EDITOR=joe > PAGER=more > # > > # su testuser > %env > USER=testuser > LOGNAME=jks > HOME=/home/testuser > MAIL=/var/mail/jks > PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/games:/usr/local/sbin:/usr/local > /bin:/usr/X11R6/bin:/home/testuser/bin > TERM=vt100 > BLOCKSIZE=K > FTP_PASSIVE_MODE=YES > SHELL=/bin/csh > SSH_CLIENT=209.198.xxx.xxx 4489 22 > (my workstation) > SSH_CONNECTION=209.198.xxx.xxx 4489 209.198.yyy.yyy 22 (my workstation, > local machine) > SSH_TTY=/dev/ttyp0 > HOSTTYPE=FreeBSD > VENDOR=intel > OSTYPE=FreeBSD > MACHTYPE=i386 > SHLVL=3 > PWD=/root/.ssh > GROUP=unknown > HOST=MACHINE1.clickcom.com > REMOTEHOST=MYWORKSTATION.clickcom.com > EDITOR=vi > PAGER=more > % > > Full debug from ssh client connect as root below... > > John Straiton > jks@clickcom.com > Clickcom, Inc > 704-365-9970x101 > > > # ssh -vvv 209.198.xxx.xxx -l testuser > OpenSSH_3.5p1 FreeBSD-20021029, SSH protocols 1.5/2.0, OpenSSL > 0x0090607f > debug1: Reading configuration data /etc/ssh/ssh_config > debug1: Applying options for * > debug3: cipher ok: aes128-cbc > [aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256- > cbc] > debug3: cipher ok: 3des-cbc > [aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256- > cbc] > debug3: cipher ok: blowfish-cbc > [aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256- > cbc] > debug3: cipher ok: cast128-cbc > [aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256- > cbc] > debug3: cipher ok: arcfour > [aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256- > cbc] > debug3: cipher ok: aes192-cbc > [aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256- > cbc] > debug3: cipher ok: aes256-cbc > [aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256- > cbc] > debug3: ciphers ok: > [aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256- > cbc] > debug1: Rhosts Authentication disabled, originating port will not be > trusted. > debug1: ssh_connect: needpriv 0 > debug1: Connecting to MACHINE2 [209.198.xxx.xxx] port 22. > debug1: Connection established. > debug1: identity file /root/.ssh/identity type -1 > debug1: identity file /root/.ssh/id_rsa type -1 > debug1: identity file /root/.ssh/id_dsa type -1 > debug1: Remote protocol version 1.99, remote software version > OpenSSH_3.5p1 FreeBSD-20030201 > debug1: match: OpenSSH_3.5p1 FreeBSD-20030201 pat OpenSSH* > debug1: Enabling compatibility mode for protocol 2.0 > debug1: Local version string SSH-2.0-OpenSSH_3.5p1 FreeBSD-20021029 > debug1: SSH2_MSG_KEXINIT sent > debug1: SSH2_MSG_KEXINIT received > debug2: kex_parse_kexinit: > diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 > debug2: kex_parse_kexinit: ssh-dss,ssh-rsa > debug2: kex_parse_kexinit: > aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-c > bc > debug2: kex_parse_kexinit: > aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-c > bc > debug2: kex_parse_kexinit: > hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-9 > 6,hmac-md5-96 > debug2: kex_parse_kexinit: > hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-9 > 6,hmac-md5-96 > debug2: kex_parse_kexinit: none,zlib > debug2: kex_parse_kexinit: none,zlib > debug2: kex_parse_kexinit: > debug2: kex_parse_kexinit: > debug2: kex_parse_kexinit: first_kex_follows 0 > debug2: kex_parse_kexinit: reserved 0 > debug2: kex_parse_kexinit: > diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 > debug2: kex_parse_kexinit: ssh-dss > debug2: kex_parse_kexinit: > aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-c > bc,rijndael-cbc@lysator.liu.se > debug2: kex_parse_kexinit: > aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-c > bc,rijndael-cbc@lysator.liu.se > debug2: kex_parse_kexinit: > hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-9 > 6,hmac-md5-96 > debug2: kex_parse_kexinit: > hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-9 > 6,hmac-md5-96 > debug2: kex_parse_kexinit: none,zlib > debug2: kex_parse_kexinit: none,zlib > debug2: kex_parse_kexinit: > debug2: kex_parse_kexinit: > debug2: kex_parse_kexinit: first_kex_follows 0 > debug2: kex_parse_kexinit: reserved 0 > debug2: mac_init: found hmac-md5 > debug1: kex: server->client aes128-cbc hmac-md5 none > debug2: mac_init: found hmac-md5 > debug1: kex: client->server aes128-cbc hmac-md5 none > debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent > debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP > debug1: dh_gen_key: priv key bits set: 123/256 > debug1: bits set: 1612/3191 > debug1: SSH2_MSG_KEX_DH_GEX_INIT sent > debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY > debug3: check_host_in_hostfile: filename /root/.ssh/known_hosts > debug3: check_host_in_hostfile: match line 1 > debug1: Host '209.198.xxx.xxx' is known and matches the DSA host key. > debug1: Found key in /root/.ssh/known_hosts:1 > debug1: bits set: 1565/3191 > debug1: ssh_dss_verify: signature correct > debug1: kex_derive_keys > debug1: newkeys: mode 1 > debug1: SSH2_MSG_NEWKEYS sent > debug1: waiting for SSH2_MSG_NEWKEYS > debug1: newkeys: mode 0 > debug1: SSH2_MSG_NEWKEYS received > debug1: done: ssh_kex2. > debug1: send SSH2_MSG_SERVICE_REQUEST > debug1: service_accept: ssh-userauth > debug1: got SSH2_MSG_SERVICE_ACCEPT > debug1: authentications that can continue: > publickey,password,keyboard-interactive > debug3: start over, passed a different list > publickey,password,keyboard-interactive > debug3: preferred publickey,keyboard-interactive,password > debug3: authmethod_lookup publickey > debug3: remaining preferred: keyboard-interactive,password > debug3: authmethod_is_enabled publickey > debug1: next auth method to try is publickey > debug1: try privkey: /root/.ssh/identity > debug3: no such identity: /root/.ssh/identity > debug1: try privkey: /root/.ssh/id_rsa > debug3: no such identity: /root/.ssh/id_rsa > debug1: try privkey: /root/.ssh/id_dsa > debug3: no such identity: /root/.ssh/id_dsa > debug2: we did not send a packet, disable method > debug3: authmethod_lookup keyboard-interactive > debug3: remaining preferred: password > debug3: authmethod_is_enabled keyboard-interactive > debug1: next auth method to try is keyboard-interactive > debug2: userauth_kbdint > debug2: we sent a keyboard-interactive packet, wait for reply > debug2: input_userauth_info_req > debug2: input_userauth_info_req: num_prompts 1 > Password: > debug3: packet_send2: adding 32 (len 22 padlen 10 extra_pad 64) > debug2: input_userauth_info_req > debug2: input_userauth_info_req: num_prompts 0 > debug3: packet_send2: adding 48 (len 10 padlen 6 extra_pad 64) > debug1: ssh-userauth2 successful: method keyboard-interactive > debug1: channel 0: new [client-session] > debug3: ssh_session2_open: channel_new: 0 > debug1: send channel open 0 > debug1: Entering interactive session. > debug2: callback start > debug1: ssh_session2_setup: id 0 > debug1: channel request 0: pty-req > debug3: tty_make_modes: ospeed 9600 > debug3: tty_make_modes: ispeed 9600 > debug3: tty_make_modes: 1 3 > debug3: tty_make_modes: 2 28 > debug3: tty_make_modes: 3 127 > debug3: tty_make_modes: 4 21 > debug3: tty_make_modes: 5 4 > debug3: tty_make_modes: 6 255 > debug3: tty_make_modes: 7 255 > debug3: tty_make_modes: 8 17 > debug3: tty_make_modes: 9 19 > debug3: tty_make_modes: 10 26 > debug3: tty_make_modes: 11 25 > debug3: tty_make_modes: 12 18 > debug3: tty_make_modes: 13 23 > debug3: tty_make_modes: 14 22 > debug3: tty_make_modes: 17 20 > debug3: tty_make_modes: 18 15 > debug3: tty_make_modes: 30 1 > debug3: tty_make_modes: 31 0 > debug3: tty_make_modes: 32 0 > debug3: tty_make_modes: 33 0 > debug3: tty_make_modes: 34 0 > debug3: tty_make_modes: 35 0 > debug3: tty_make_modes: 36 1 > debug3: tty_make_modes: 38 1 > debug3: tty_make_modes: 39 1 > debug3: tty_make_modes: 40 0 > debug3: tty_make_modes: 41 0 > debug3: tty_make_modes: 50 1 > debug3: tty_make_modes: 51 1 > debug3: tty_make_modes: 53 1 > debug3: tty_make_modes: 54 1 > debug3: tty_make_modes: 55 1 > debug3: tty_make_modes: 56 0 > debug3: tty_make_modes: 57 0 > debug3: tty_make_modes: 58 0 > debug3: tty_make_modes: 59 1 > debug3: tty_make_modes: 60 1 > debug3: tty_make_modes: 61 1 > debug3: tty_make_modes: 62 1 > debug3: tty_make_modes: 70 1 > debug3: tty_make_modes: 72 1 > debug3: tty_make_modes: 73 0 > debug3: tty_make_modes: 74 0 > debug3: tty_make_modes: 75 0 > debug3: tty_make_modes: 90 1 > debug3: tty_make_modes: 91 1 > debug3: tty_make_modes: 92 0 > debug3: tty_make_modes: 93 0 > debug1: channel request 0: shell > debug1: fd 3 setting TCP_NODELAY > debug2: callback done > debug1: channel 0: open confirm rwindow 0 rmax 32768 > debug2: channel 0: rcvd adjust 131072 > Last login: Mon Mar 17 12:41:58 2003 from MACHINE1 > Copyright (c) 1980, 1983, 1986, 1988, 1990, 1991, 1993, 1994 > The Regents of the University of California. All rights > reserved. > > % > > -- Edmond Baroud UNIX Systems Admin mailto:SoHo@admin.fido.ca Fingerprint 140F 5FD5 3FDD 45D9 226D 9602 8C3D EAFB 4E19 BEF9 "UNIX is very user friendly, it's just picky about who its friends are." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030317132755.05bdce74.SoHo>