Someone suggested I use -v on the local server and it got some good
information. The data is below. It complains "Bad file modes for
/export/home/user2" which is odd since the files for user2 are the same
(mode wise) as those for user1.
# here are the file permissions from the remote system, user1 is slight more
exposed than user2, but user2 is the one we can't log into.
/home/user2
[17:28:38]$ls -ld .ssh
drwxr-xr-x 2 user2 staff 512 Mar 14 13:47 .ssh/
/home/nsadmin
[17:28:42]$ls -l .ssh
total 5
-rw-r--r-- 1 user2 staff 1024 Mar 14 13:12 authorized_keys
-rw------- 1 user2 staff 533 Mar 14 13:47 identity
-rw-r--r-- 1 user2 staff 337 Mar 14 13:47 identity.pub
-rw------- 1 user2 staff 336 Mar 14 12:30 known_hosts
-rw------- 1 user2 staff 512 Mar 14 16:31 random_seed
/home/user1
[17:28:57]$ls -ld .ssh
drwxr-xr-x 2 user1 staff 512 Mar 14 17:20 .ssh/
/home/user1
[17:29:02]$ls -l .ssh
total 7
-rw-r--r-- 1 user1 staff 1023 Mar 14 17:20 authorized_keys
-rw-r--r-- 1 user1 staff 1351 Mar 7 10:55 authorized_keys~
-rw------- 1 user1 staff 534 Mar 5 11:57 identity
-rw-rw-r-- 1 user1 staff 338 Mar 5 11:57 identity.pub
-rw------- 1 user1 staff 999 Mar 14 12:43 known_hosts
-rw------- 1 user1 staff 512 Mar 14 16:20 random_seed
# try to connect to user1 and succeed
[17:20:24]$ssh -v xxx.xxx.xx.xxx
SSH Version 1.2.20 [sparc-sun-solaris2.5.1], protocol version 1.5.
Standard version. Does not use RSAREF.
w1.jobdirect.com: Reading configuration data /export/home/user1/.ssh/config
w1.jobdirect.com: Reading configuration data /etc/ssh_config
w1.jobdirect.com: ssh_connect: getuid 1033 geteuid 0 anon 0
w1.jobdirect.com: Connecting to xxx.xxx.xxx.xxx port 22.
w1.jobdirect.com: Allocated local port 1023.
w1.jobdirect.com: Connection established.
w1.jobdirect.com: Remote protocol version 1.5, remote software version
1.2.27
w1.jobdirect.com: Waiting for server public key.
w1.jobdirect.com: Received server public key (768 bits) and host key (1024
bits).
w1.jobdirect.com: Host 'xxx.xxx.xxx.xxx' is known and matches the host key.
w1.jobdirect.com: Initializing random; seed file
/export/home/usr1/.ssh/random_seed
w1.jobdirect.com: Encryption type: idea
w1.jobdirect.com: Sent encrypted session key.
w1.jobdirect.com: Received encrypted confirmation.
w1.jobdirect.com: Trying rhosts or /etc/hosts.equiv with RSA host
authentication.
w1.jobdirect.com: Server refused our rhosts authentication or host key.
w1.jobdirect.com: No agent.
w1.jobdirect.com: Trying RSA authentication with key 'user1@local'
w1.jobdirect.com: Received RSA challenge from server.
Enter passphrase for RSA key 'user1@local':
w1.jobdirect.com: Sending response to host key RSA challenge.
w1.jobdirect.com: Remote: RSA authentication accepted.
w1.jobdirect.com: RSA authentication accepted by server.
w1.jobdirect.com: Requesting pty.
w1.jobdirect.com: Failed to get local xauth data.
w1.jobdirect.com: Requesting X11 forwarding with authentication spoofing.
w1.jobdirect.com: Requesting shell.
w1.jobdirect.com: Entering interactive session.
# try to connect to user2 and FAIL
[17:21:11]$ssh -v -l user2 xxx.xxx.xxx.xxx
SSH Version 1.2.20 [sparc-sun-solaris2.5.1], protocol version 1.5.
Standard version. Does not use RSAREF.
w1.jobdirect.com: Reading configuration data /export/home/user1/.ssh/config
w1.jobdirect.com: Reading configuration data /etc/ssh_config
w1.jobdirect.com: ssh_connect: getuid 1033 geteuid 0 anon 0
w1.jobdirect.com: Connecting to xxx.xxx.xxx.xxx port 22.
w1.jobdirect.com: Allocated local port 1021.
w1.jobdirect.com: Connection established.
w1.jobdirect.com: Remote protocol version 1.5, remote software version
1.2.27
w1.jobdirect.com: Waiting for server public key.
w1.jobdirect.com: Received server public key (768 bits) and host key (1024
bits).
w1.jobdirect.com: Host 'xxx.xxx.xxx.xxx' is known and matches the host key.
w1.jobdirect.com: Initializing random; seed file
/export/home/user1/.ssh/random_seed
w1.jobdirect.com: Encryption type: idea
w1.jobdirect.com: Sent encrypted session key.
w1.jobdirect.com: Received encrypted confirmation.
w1.jobdirect.com: Trying rhosts or /etc/hosts.equiv with RSA host
authentication.
w1.jobdirect.com: Server refused our rhosts authentication or host key.
w1.jobdirect.com: No agent.
w1.jobdirect.com: Trying RSA authentication with key 'user1@local'
w1.jobdirect.com: Remote: Bad file modes for /export/home/user2
w1.jobdirect.com: Server refused our key.
Permission denied.
-----Original Message-----
From: Blue Lang [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, March 14, 2001 4:55 PM
To: Stephen Morley
Cc: SSH Users Mailing List
Subject: Re: Connection Problems
On Wed, 14 Mar 2001, Stephen Morley wrote:
> # but can't connect to other id
> user1@local$ ssh -l user2 remote-system
> Permission denied
please paste the output of sshd -v on the remote host.
--
Blue Lang http://www.gator.net/~blue
202 Ashe Ave, Apt 3, Raleigh, NC. 919 835 1540
