Hi all,

We are using OpenSSH-2.9p1 on Solaris 8 with PAM enabled.
We are not able to use the HostbasedAuthentication: the server still ask
for a password.

---Extract of Client ssh_config---
# Host *
#   ForwardAgent no
#   ForwardX11 no
#   RhostsAuthentication no
#   RhostsRSAAuthentication yes
HostbasedAuthentication yes
#   RSAAuthentication yes
-----------------------------------

---Extract of Server sshd_config---
# For this to work you will also need host keys in
/usr/local/etc/ssh_known_hosts
RhostsRSAAuthentication no
# similar for protocol version 2
HostbasedAuthentication yes
#
-----------------------------------

---Extract of Server debug session---
debug1: SSH2_MSG_NEWKEYS sent
debug1: waiting for SSH2_MSG_NEWKEYS
debug1: newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: KEX done
debug1: userauth-request for user root service ssh-connection method
none
debug1: attempt 0 failures 0
debug1: Starting up PAM with username "root"
debug1: PAM setting rhost to "Client"
Failed none for ROOT from xxx.xxx.xxx.xxx port 44226 ssh2
--------------------------------------

---Extract of Client debug session---
debug1: authentications that can continue:
publickey,password,keyboard-interactive,hostbased
debug3: start over, passed a different list
publickey,password,keyboard-interactive,hostbased
debug3: preferred publickey,password,keyboard-interactive,hostbased
debug3: authmethod_lookup publickey
debug3: remaining preferred: password,keyboard-interactive,hostbased
debug3: authmethod_is_enabled publickey
debug1: next auth method to try is publickey
debug1: try privkey: /local/home/toto/.ssh/identity
debug3: no such identity: /local/home/toto/.ssh/identity
debug1: try privkey: /local/home/toto/.ssh/id_rsa
debug3: no such identity: /local/home/toto/.ssh/id_rsa
debug1: try privkey: /local/home/toto/.ssh/id_dsa
debug3: no such identity: /local/home/toto/.ssh/id_dsa
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password
debug3: remaining preferred: keyboard-interactive,hostbased
debug3: authmethod_is_enabled password
debug1: next auth method to try is password
root@Servers's password:
---------------------------------------

We have a valid .shosts on the Server's root Home dir. as well as a
valid /usr/local/etc/ssh_known_hosts2 file containig the pub key of
Client.

Any ideas?


Dominique

Reply via email to