> -----Original Message-----
> From: Bret Hughes
> Sent: Friday, March 07, 2003 12:21 AM
> Subject: Re: ssh only prompts for password after applying errata on RH
> 7.3.
> 
> 
> On Thu, 2003-03-06 at 23:57, Michael Wardle wrote:
> > On Fri, 2003-03-07 at 16:32, Bret Hughes wrote:
> > > crank it up with -dd
> > 
> > As requested...
> > 
> 
> Michael-
> 
> I don't think it is ever trying to use public key auth since 
> ther are no lines resembling the following.
> 
> 
> debug1: attempt 1 failures 1
> debug2: input_userauth_request: try method publickey
> debug1: test whether pkalg/pkblob are acceptable
> debug1: temporarily_use_uid: 500/500 (e=0)
> debug1: trying public key file /home/bhughes/.ssh/authorized_keys
> debug1: restore_uid
> debug1: temporarily_use_uid: 500/500 (e=0)
> debug1: trying public key file /home/bhughes/.ssh/authorized_keys2
> 
> 
> post your /etc/ssh/sshd_config and lets take a look.  

Bret,

Saw your reply to the OP about checking directory permissions. Thought I
would add that invalid directory permissions has bit me more than once when
trying to get ssh passphrase authentication working properly. Even the users
home directory must NOT have group (or world) writable permissions. i.e.
Typing: chmod g+w ... on anyone of the dir/files below will cause ssh to
ignore passphrase authentication and default to password authentication.
Note: I use ssh-agent/ssh-add on this system, so I included the permissions
on my pub/priv DSA keys.

[EMAIL PROTECTED] scowles]$ pwd
/home/scowles
[EMAIL PROTECTED] scowles]$ ls -ld
drwx------   98 scowles  scowles      4096 Mar  7 05:06 .
[EMAIL PROTECTED] scowles]$ cd .ssh
[EMAIL PROTECTED] .ssh]$ ls -l
total 52
-rw-------    1 scowles  scowles      6401 Feb 23 10:06 authorized_keys2
-rw-------    1 scowles  scowles      1784 Oct 18 22:55 id_dsa
-rw-r--r--    1 scowles  scowles      1629 Oct 18 22:55 id_dsa.pub
-rw-r--r--    1 scowles  scowles      1157 Jan 14 18:36 known_hosts
[EMAIL PROTECTED] .ssh]$ 

Steve Cowles



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to