← Back to team overview

sslug-teknik team mailing list archive

Re: OpenSSH og scp i batchscripts

 

det ser ud til at alle retteheder er ok , om ikk andet så har jeg også slået
scrict mode fra

det her er output fra client server.

scp -B /home/pej/test tux:/home/pej/test
Permission denied (publickey,keyboard-interactive).
lost connection

og i message log på server , ser det sån ud

Mar 13 10:21:05 tux sshd[15418]: Connection closed by 195.184.44.160

jeg har fået det til at virke på protocol 1 , og så vidt jeg kan se så
skulle den eneste forskel
på 1 og 2 været at keys hedder dsa, id_dsa.pub (DSA KEY ssh2) og på ssh1
hedder de
identity , og identity.pub (RAS KEY) , og dsa keys skal kopires ovre så de
hedder authorized_keys2
og RSA keys til authorized_keys.

det her siger client siden med -v (verbose)
scp -v -B test pej@tux:/home/pej/test
Executing: program /usr/bin/ssh host tux, user pej, command scp -v -t
/home/pej/test
Permission denied (publickey,keyboard-interactive).
lost connection

og det her serveren . med -d (debug)

/usr/sbin/sshd -d
debug1: sshd version OpenSSH_2.5.1p2
debug1: load_private_key_autodetect: type 0 RSA1
debug1: read SSH2 private key done: name dsa w/o comment success 1
debug1: load_private_key_autodetect: type 2 DSA
debug1: Seeding random number generator
debug1: Bind to port 22 on 0.0.0.0.
Server listening on 0.0.0.0 port 22.
debug1: Server will not fork when running in debugging mode.
Connection from 195.184.44.160 port 644
debug1: Client protocol version 2.0; client software version OpenSSH_2.5.1p2

debug1: match: OpenSSH_2.5.1p2 pat ^OpenSSH
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_2.5.1p2
debug1: list_hostkey_types: ssh-dss
debug1: send KEXINIT
debug1: done
debug1: wait KEXINIT
debug1: got kexinit:
diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1
debug1: got kexinit: ssh-rsa,ssh-dss
debug1: got kexinit:
3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes128-cbc,aes192-cbc,aes256-cbc,rijndael128-cbc,rijndael192-cbc,rijndael256-cbc,rijndael-cbc@xxxxxxxxxxxxxx

debug1: got kexinit:
3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes128-cbc,aes192-cbc,aes256-cbc,rijndael128-cbc,rijndael192-cbc,rijndael256-cbc,rijndael-cbc@xxxxxxxxxxxxxx

debug1: got kexinit:
hmac-sha1,hmac-md5,hmac-ripemd160,hmac-ripemd160@xxxxxxxxxxx,hmac-sha1-96,hmac-md5-96

debug1: got kexinit:
hmac-sha1,hmac-md5,hmac-ripemd160,hmac-ripemd160@xxxxxxxxxxx,hmac-sha1-96,hmac-md5-96

debug1: got kexinit: none
debug1: got kexinit: none
debug1: got kexinit:
debug1: got kexinit:
debug1: first kex follow: 0
debug1: reserved: 0
debug1: done
debug1: kex: client->server 3des-cbc hmac-sha1 none
debug1: kex: server->client 3des-cbc hmac-sha1 none
debug1: Wait SSH2_MSG_KEX_DH_GEX_REQUEST.
debug1: Sending SSH2_MSG_KEX_DH_GEX_GROUP.
debug1: bits set: 1034/2049
debug1: Wait SSH2_MSG_KEX_DH_GEX_INIT.
debug1: bits set: 1030/2049
debug1: sig size 20 20
debug1: send SSH2_MSG_NEWKEYS.
debug1: done: send SSH2_MSG_NEWKEYS.
debug1: Wait SSH2_MSG_NEWKEYS.
debug1: GOT SSH2_MSG_NEWKEYS.
debug1: done: KEX2.
debug1: userauth-request for user pej service ssh-connection method none
debug1: attempt 0 failures 0
debug1: Starting up PAM with username "pej"
debug1: Trying to reverse map address 195.184.44.160.
debug1: PAM setting rhost to "x10.euroconnect.dk"
Failed none for pej from 195.184.44.160 port 644 ssh2
Connection closed by 195.184.44.160
debug1: Calling cleanup 0x8051b50(0x0)
debug1: Calling cleanup 0x8063f70(0x0)

jeg kan se at den laver en fejl i 4 sidste linje , man jeg kan ikke rigtig
tyde fejlen

/Per Jørgensen



Troels Arvin wrote:

> On Mon, 12 Mar 2001 10:38:31 +0100, "Per Jørgensen" <perj@xxxxxxxxxxxxxx>
> wrote:
>
> > hvad går jeg galt siden jeg ikke kan får scp til at kopirer uden at
> > komme og spørge efter passphrase
>
> En typisk fejl er forkerte rettigheder/fil-modes for fx. .ssh-kataloget
> eller authorized_keys2 filen på den fjerne server. Har du mulighed for
> at kigge i systemloggen på den fjerne server for at se, hvad der er galt?
>
> --
> Greetings from Troels Arvin, Copenhagen, Denmark





References