SSH problem

2010-01-27 Thread Hetz Ben Hamo
Hi, In the last updated my Fedora with the official updates and now it seems that passphraseless connections to RHEL/CentOS 5.X are not working any more. When I try to ssh from my Fedora machine to my CentOS machine, it gives errors: debug1: expecting SSH2_MSG_NEWKEYS debug1: SSH2_MSG_NEWKEYS r

Re: SSH problem

2010-01-27 Thread Lior Kaplan
try to use strace on the ssh server and see what does it do. Maybe you'll get an idea why it rejects your client. Kaplan 2010/1/27 Hetz Ben Hamo : > Hi, > In the last updated my Fedora with the official updates and now  it seems > that passphraseless connections to RHEL/CentOS 5.X are not working

Re: SSH problem

2010-01-27 Thread Nadav Har'El
On Wed, Jan 27, 2010, Hetz Ben Hamo wrote about "SSH problem": > debug1: Offering public key: /home/hetz/.ssh/id_rsa >.. > debug1: Trying private key: /home/hetz/.ssh/id_dsa > debug1: Next authentication method: password I don't know if this is your case, but this usual

Re: SSH problem

2010-01-27 Thread Hetz Ben Hamo
010, Hetz Ben Hamo wrote about "SSH problem": > > debug1: Offering public key: /home/hetz/.ssh/id_rsa > >.. > > debug1: Trying private key: /home/hetz/.ssh/id_dsa > > debug1: Next authentication method: password > > I don't know if this is your case, bu

Re: SSH problem

2010-01-27 Thread Tzafrir Cohen
On Wed, Jan 27, 2010 at 12:38:40PM +0200, Lior Kaplan wrote: > try to use strace on the ssh server and see what does it do. Maybe > you'll get an idea why it rejects your client. A variant of that: /usr/sbin/sshd -p 2022 -dd and then trry connecting to port 2022 instead. -- Tzafrir Cohen

Re: SSH problem

2010-01-27 Thread guy keren
: On Wed, Jan 27, 2010, Hetz Ben Hamo wrote about "SSH problem": > debug1: Offering public key: /home/hetz/.ssh/id_rsa >.. > debug1: Trying private key: /home/hetz/.ssh/id_dsa > debug1: Next authentication method: password I don't know if th

Re: SSH problem

2010-01-27 Thread Amos Shapira
2010/1/28 guy keren : > > someone suggested that you should disable gssapi - i second that. we had a > similar problem with centos systems (thought it was more of connections > taking long - not completely failing), and disabling the use of gssapi _in > the client_ solved it. I'll second this as w

Re: SSH problem

2010-01-28 Thread Ehud Karni
On Wed, 27 Jan 2010 20:18:51 Hetz Ben Hamo wrote: > > The permission issue is the first thing I checked. Everything is ok there > The log portion which I posted is what appears in the secure log file. > Trying to disable Kerberos doesn't help. > > On Wed, Jan 27, 2010 at 7:59 PM, Nadav Har'El wrote

Re: SSH problem

2010-01-28 Thread Amos Shapira
On 29 January 2010 03:14, Ehud Karni wrote: > Disabling Kerberos and GSSAPI should not change anything (may be a > slight shorter protocol exchange) because they are just MORE options. My personal experience indicates otherwise - GSSAPI timeout can slow down logins a lot (by around 30-60 seconds,

Re: what is gssapi good for ( was: SSH problem )

2010-01-27 Thread Michael Ben-Nes
Hi, What is gssapi good for? Read about it in wikipedia but I am not aware of apps that use it. Basically I disable it in new servers to get faster response. Bye, Miki -- Michael Ben-Nes - Internet Consultant and Director. http://www.epoch.co.il -

Re: what is gssapi good for ( was: SSH problem )

2010-01-27 Thread Amos Shapira
2010/1/28 Michael Ben-Nes : > Hi, > What is gssapi good for? > Read about it in wikipedia but I am not aware of apps that use it. > Basically I disable it in new servers to get faster response. I'm curios too. Couldn't find any use for it and also disable it as part of our SOE. Anyone? --Amos _

Re: what is gssapi good for ( was: SSH problem )

2010-01-27 Thread Ilya A. Volynets-Evenbakh
Amos Shapira wrote: > 2010/1/28 Michael Ben-Nes : > >> Hi, >> What is gssapi good for? >> Read about it in wikipedia but I am not aware of apps that use it. >> Basically I disable it in new servers to get faster response. >> > > I'm curios too. Couldn't find any use for it and also disable