Configuring SSH on IS

, ,
1

Hi,
I am trying to do establish sFTP communication between two hosts. In order to logon without interactively using the password, we need to configure the SSH. I created the key pair without a password and it seemed to work fine. But when i try to establish a SSH connection to the remotehost i am getting these error

OpenSSH_3.6.1p1, SSH protocols 1.5/2.0, OpenSSL 0x0090702f
debug1: Reading configuration data packages/OpenSSH/config/options.properties
debug1: Applying options for *
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: Connecting to server [10.60.18.34] port 22.
debug1: Connection established.
debug1: identity file openssh/intserv.rsa type 1
debug1: Remote protocol version 1.99, remote software version OpenSSH_3.6.1p1
debug1: match: OpenSSH_3.6.1p1 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.6.1p1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 zlib
debug1: kex: client->server aes128-cbc hmac-md5 zlib
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host ‘server’ is known and matches the RSA host key.
debug1: Found key in /user/.ssh/known_hosts:1
debug1: ssh_rsa_verify: signature correct
debug1: Enabling compression at level 6.
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received

debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Offering public key: openssh/intserv.rsa
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: No more authentication methods to try.
Permission denied (publickey,password,keyboard-interactive).
debug1: Calling cleanup 0x2c928(0x0)
debug1: compress outgoing: raw data 263, compressed 222, factor 0.84
debug1: compress incoming: raw data 437, compressed 217, factor 0.50

In case any one encountered the same problem, or knows a work around for this please let me know.

Thanks for all the help.
Shantanu

2

You need to put the intserv.rsa.pub in the authorized_keys file on the remote host. The technote shows the steps on how to do this.

3

Hi Tim,
I have already put the intserv.rsa.pub in the authorized_keys file on the remote host.
The error i am getting is after doing all the steps mentioned in the tech note.
Is there some other configuration that i am missing out on?
Thanks
Shantanu

4

The server is not allowing the public key login for some reason. This can be difficult to troubleshoot.

One thing that is often wrong is the permissions on the remote server .ssh directory and authorized_keys files (your authorized_keys file is in the .ssh directory, right?). They must be very strict; read only to user and no permissions to others.

You might want to take a look at the OpenSSH site for tips.

5

Tim,
Thanks for all your help. It was really the permissions that was not allowing the logon.
To get this working make sure that $HOME (& parent dirs) has read-only access for other users. SSH requires that nobody can access .ssh except the owner – if .ssh is 700 & $HOME is 770 SSH will not work.
Change both the .ssh and $HOME folder to 700. And this should work.

Thanks
Shantanu