Rhosts Auth Issues with OpenSSH 2.9p1 on Solaris 2.7
Jeff Newton
Jeff_Newton at pmc-sierra.com
Thu May 3 15:23:26 EST 2001
I've installed OpenSSH 2.9p1 on Solaris 2.7 and I am trying to get rhost
authentication working. Something appears to be wrong with the client
side as I can do rhost auth with a ssh1.2.27 client. Any help would be
appreciated.
/opt/openssh-2.9p1/etc/ssh_config is:
ForwardX11 yes
RhostsAuthentication yes
/opt/openssh-2.9p1/etc/sshd_config is:
Port 22
IgnoreRhosts no
StrictModes yes
X11Forwarding yes
X11DisplayOffset 10
KeepAlive yes
SyslogFacility AUTH
LogLevel INFO
RhostsAuthentication yes
RhostsRSAAuthentication no
HostbasedAuthentication yes
RSAAuthentication yes
PasswordAuthentication yes
PermitEmptyPasswords no
Subsystem sftp /opt/openssh-2.9p1/libexec/sftp-server
Permissions:
newton at nighthawk [29] ls -l /opt/ssh/bin
total 23282
-rwxr-xr-x 1 root other 355856 May 2 21:30 scp
-rwxr-xr-x 1 root other 749044 May 2 21:30 sftp
lrwxrwxrwx 1 root other 3 May 2 21:30 slogin -> ssh
-rws--x--x 1 root other 3936684 May 2 21:30 ssh
-rwxr-xr-x 1 root other 2004800 May 2 21:30 ssh-add
-rwxr-xr-x 1 root other 1703916 May 2 21:30 ssh-agent
-rwxr-xr-x 1 root other 2009980 May 2 21:30 ssh-keygen
-rwxr-xr-x 1 root other 1073612 May 2 21:30 ssh-keyscan
When I run ssh -v I notice that Rhosts Auth is disabled. Regardless if
I change this setting in ssh_config or not. Trying to force Protocol 1
in either ssh_config or sshd_config has no effect. Is this a bug with
OpenSSH-2.9p1 or am I doing something else wrong?
Here is some output:
newton at nighthawk [28] /opt/ssh/bin/ssh -v nighthawk
OpenSSH_2.9p1, SSH protocols 1.5/2.0, OpenSSL 0x0090601f
debug1: Reading configuration data /opt/openssh-2.9p1/etc/ssh_config
debug1: Seeded RNG with 42 bytes from programs
debug1: Seeded RNG with 3 bytes from system calls
debug1: Rhosts Authentication disabled, originating port will not be
trusted.
debug1: restore_uid
debug1: ssh_connect: getuid 1412 geteuid 0 anon 1
debug1: Connecting to nighthawk [134.87.114.11] port 22.
debug1: temporarily_use_uid: 1412/67 (e=0)
debug1: restore_uid
debug1: temporarily_use_uid: 1412/67 (e=0)
debug1: restore_uid
debug1: Connection established.
debug1: read PEM private key done: type DSA
debug1: read PEM private key done: type RSA
debug1: identity file /home/cs/newton/.ssh/identity type -1
debug1: Remote protocol version 1.5, remote software version
OpenSSH_2.9p1
debug1: match: OpenSSH_2.9p1 pat ^OpenSSH
debug1: Local version string SSH-1.5-OpenSSH_2.9p1
debug1: Waiting for server public key.
debug1: Received server public key (768 bits) and host key (1024 bits).
debug1: Host 'nighthawk' is known and matches the RSA1 host key.
debug1: Found key in /home/cs/newton/.ssh/known_hosts:6
debug1: Encryption type: 3des
debug1: Sent encrypted session key.
debug1: Installing crc compensation attack detector.
debug1: Received encrypted confirmation.
debug1: Doing password authentication.
newton at nighthawk's password:
Now here is output using ssh 1.2.27 client:
newton at nighthawk [30] /opt/ssh1/bin/ssh -v nighthawk
SSH Version 1.2.27 [sparc-sun-solaris2.7], protocol version 1.5.
Standard version. Does not use RSAREF.
nighthawk: Reading configuration data /opt/ssh1/etc/ssh_config
nighthawk: ssh_connect: getuid 1412 geteuid 0 anon 0
nighthawk: Connecting to nighthawk [134.87.114.11] port 22.
nighthawk: Allocated local port 1011.
nighthawk: Connection established.
nighthawk: Remote protocol version 1.5, remote software version
OpenSSH_2.9p1
nighthawk: Waiting for server public key.
nighthawk: Received server public key (768 bits) and host key (1024
bits).
nighthawk: Host 'nighthawk' is known and matches the host key.
nighthawk: Initializing random; seed file
/home/cs/newton/.ssh/random_seed
nighthawk: IDEA not supported, using 3des instead.
nighthawk: Encryption type: 3des
nighthawk: Sent encrypted session key.
nighthawk: Installing crc compensation attack detector.
nighthawk: Received encrypted confirmation.
nighthawk: Trying rhosts authentication.
nighthawk: Remote: Accepted by .shosts.
nighthawk: Requesting pty.
nighthawk: Requesting shell.
nighthawk: Entering interactive session.
Last login: Wed May 2 22:12:29 2001 from nighthawk
Sun Microsystems Inc. SunOS 5.7 Generic October 1998
Sun Microsystems Inc. SunOS 5.7 Generic October 1998
You have mail.
Cheers,
Jeff Newton
More information about the openssh-unix-dev
mailing list