[Bug 3507] Cannot get host-based authentication to work

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Thu Dec 8 19:21:34 AEDT 2022


https://bugzilla.mindrot.org/show_bug.cgi?id=3507

--- Comment #25 from Darren Tucker <dtucker at dtucker.net> ---
(In reply to Darren Tucker from comment #24)
> Comparing working and non-working, the working example has the
> following, which is missing from the non-working one:
> debug2: hostbased key 4: ecdsa-sha2-nistp256 key from
> "/opt/openssh-9.1p1/etc/ssh_host_ecdsa_key"

These loads are in ssh.c and are gated by "if
(options.hostbased_authentication)" and do include certificates.  I'd
suggest:

 - checking that HostbasedAuthentication isn't disabled someplace, eg,
a user config file ( check the effective setting with "ssh -G
yourserver | grep hostbased").

 - checking that the public portion of host keys are readable by
unprivileged users (since this is done in the client).

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list