On Fri, May 23, 2008 at 12:28 AM, Karl Goetz <[EMAIL PROTECTED]> wrote: > On Thu, 2008-05-22 at 07:49 +0100, Alexandros Papadopoulos wrote: >> Hi all, thanks for the suggestions so far. >> >> I talked local staff through backing up the sshd configuration file, >> purging the openssh-server package and then reinstalling openssh. >> >> I'm quite frustrated to say this didn't fix anything. Had exactly the >> same behaviour: >> >> <snip> >> debug1: Next authentication method: keyboard-interactive >> debug2: userauth_kbdint >> debug2: we sent a keyboard-interactive packet, wait for reply >> debug1: Authentications that can continue: publickey,keyboard-interactive >> debug3: userauth_kbdint: disable: no info_req_seen >> debug2: we did not send a packet, disable method >> debug1: No more authentication methods to try. >> Permission denied (publickey,keyboard-interactive). >> >> I did two further tests: >> >> 1. ssh from the box itself to localhost: Same result, permission was >> denied, no info_req_seen >> 2. tail -f /var/log/auth.log on the server - staff reported no new >> entries while I was attempting to login >> >> Does this mean that we never get to the authentication mechanism? >> >> I'm quite clueless now, I too was expecting that a purge and reinstall >> would fix it. > > sorry if i'm being dense - did you mv $HOME/.ssh/authorized_keys aside?
I believe I did, but will have local staff check that again today. I've also generated a new keypair and will send that over and walk them through installing a new authorized_keys. Something else that tiger (http://www.nongnu.org/tiger/) did come up with yesterday (and got mailed to me, hence I know) was this: # Performing check of user accounts... OLD: --WARN-- [acc021w] Login ID sshd appears to be a dormant account. # Performing check of group files... # Performing check of passwd files... Something happened there... Will let you know later if I get to the bottom of this. I don't like the debug option because then I will have a non technical person reading debugging information off a monitor and I'll be paying for the international call. Not good. Cheers -A -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]