From: Kirkland, Mike # IHTUL (mike.kirkland@ndchealth.com)
Date: Mon Dec 02 2002 - 09:39:18 EST
Hi everyone,
This is the situation. I have two sunfire v120 boxes on the same subnet,
named piglett and testunix, both with solaris9 and ssh from sun's installed.
Nothing has been changed from the /etc/sshd_config and /etc/ssh_config
files.
I generated both rsa and dsa keys on each box and copied it to the other
box's .ssh/authorized-keys file.
When I try to ssh to the other box this is the errors I get, any thoughts or
suggestions on how to make this work is appreciated in advance.
# ssh piglett
The authenticity of host 'piglett' can't be established.
RSA key fingerprint in md5 is:
33:33:33:33:44:44:44:44:6c:91:85:c4:3d:bf:3d:b9
Are you sure you want to continue connecting(yes/no)?yes
Warning: Permanently added 'piglett,199:200:201.126' (RSA) to the list of
known hosts.
Enter passphrase for key '//.ssh/id_rsa':
Enter passphrase for key '//.ssh/id_dsa':
root@piglett's password:
Permission denied, please try again.
root@piglett's password:
Permission denied, please try again.
root@piglett's password:
Unable to find an authentication method
# uname -a
SunOS testunix 5.9 Generic_112233-01 sun4u sparc SUNW,UltraAX-i2
# pwd
/etc/ssh
# ssh -v testunix
SSH Version Sun_SSH_1.0, protocol versions 1.5/2.0.
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: ssh_connect: getuid 0 geteuid 0 anon 0
debug1: Connecting to testunix [199.200.201.128] port 22.
debug1: Allocated local port 1023.
debug1: Connection established.
debug1: identity file //.ssh/identity type 3
debug1: Bad RSA1 key file //.ssh/id_rsa.
debug1: identity file //.ssh/id_rsa type 3
debug1: Bad RSA1 key file //.ssh/id_dsa.
debug1: identity file //.ssh/id_dsa type 3
debug1: Remote protocol version 2.0, remote software version Sun_SSH_1.0
debug1: match: Sun_SSH_1.0 pat ^Sun_SSH_1\.0
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-Sun_SSH_1.0
debug1: sent kexinit: diffie-hellman-group1-sha1
debug1: sent kexinit: ssh-rsa,ssh-dss
debug1: sent kexinit: aes128-cbc,blowfish-cbc,3des-cbc,rijndael128-cbc
debug1: sent kexinit: aes128-cbc,blowfish-cbc,3des-cbc,rijndael128-cbc
debug1: sent kexinit: hmac-sha1,hmac-md5
debug1: sent kexinit: hmac-sha1,hmac-md5
debug1: sent kexinit: none
debug1: sent kexinit: none
debug1: sent kexinit:
/en_US.ISO8859-1/en_US.ISO8859-1/en_US.ISO8859-1/en_US.ISO8859-1/en_US.ISO88
59-1/C
debug1: sent kexinit:
/en_US.ISO8859-1/en_US.ISO8859-1/en_US.ISO8859-1/en_US.ISO8859-1/en_US.ISO88
59-1/C
debug1: send KEXINIT
debug1: done
debug1: wait KEXINIT
debug1: got kexinit: diffie-hellman-group1-sha1
debug1: got kexinit: ssh-rsa,ssh-dss
debug1: got kexinit: aes128-cbc,blowfish-cbc,3des-cbc
debug1: got kexinit: aes128-cbc,blowfish-cbc,3des-cbc
debug1: got kexinit: hmac-sha1,hmac-md5
debug1: got kexinit: hmac-sha1,hmac-md5
debug1: got kexinit: none,zlib
debug1: got kexinit: none,zlib
debug1: got kexinit:
90,geo,lcttab,iso_8859_15,iso_8859_1,en_CA,en_CA.ISO8859-1,en_US,en_US.ISO
8859-1,en_US.ISO8859-15,en_US.ISO8859-15@euro,es,es_MX,es_MX.ISO8859-1,fr,fr
_CA,fr_CA.ISO8859-1
debug1: got kexinit:
90,geo,lcttab,iso_8859_15,iso_8859_1,en_CA,en_CA.ISO8859-1,en_US,en_US.ISO
8859-1,en_US.ISO8859-15,en_US.ISO8859-15@euro,es,es_MX,es_MX.ISO8859-1,fr,fr
_CA,fr_CA.ISO8859-1
debug1: first kex follow: 0
debug1: reserved: 0
debug1: done
debug1: kex: server->client unable to decide common locale
debug1: kex: server->client aes128-cbc hmac-sha1 none
debug1: kex: client->server unable to decide common locale
debug1: kex: client->server aes128-cbc hmac-sha1 none
debug1: Sending SSH2_MSG_KEXDH_INIT.
debug1: bits set: 508/1024
debug1: Wait SSH2_MSG_KEXDH_REPLY.
debug1: Got SSH2_MSG_KEXDH_REPLY.
The authenticity of host 'testunix' can't be established.
RSA key fingerprint in md5 is:
11:11:11:22:22:22:f2:9e:be:21:79:fd:18:ff:9b:ab
Are you sure you want to continue connecting(yes/no)?no
Aborted by user!
debug1: Calling cleanup 0x39a0c(0x0)
#
Thanks
Mike Kirkland
Unix System Administrator
National Data Corporation
Phone: (918) 481-2817
Fax: (918) 481-4275
mike.kirkland@ndchealth.com <mailto:mike.kirkland@ndchealth.com>
NDC.| HEALTH
6100 South Yale Avenue
Suite 1900
Tulsa, OK 74136
"This E-mail message is for the sole use of the intended recipient(s) and
may contain confidential and privileged information. Any unauthorized
review, use, disclosure or distribution is prohibited. If you are not the
intended recipient, please contact the sender by reply E-mail, and destroy
all copies of the original message."
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:25:23 EDT