Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Message-ID:	<021101c234eb$a85050f0$0100a8c0@wdg.uk.ibm.com>
From:	"Max Bowsher" <maxb AT ukf DOT net>
To:	<pablo DOT milano AT datatransfer DOT com DOT ar>, <cygwin AT cygwin DOT com>
References:	<IFEHJOPLDENDFBLHDBOCKEGLCCAA DOT pablo DOT milano AT datatransfer DOT com DOT ar>
Subject:	Re: Openssh 3.0.2-p15: Can't validate public key when accesing from cron
Date:	Fri, 26 Jul 2002 19:42:21 +0100
MIME-Version:	1.0
X-Priority:	3
X-MSMail-Priority:	Normal
X-MimeOLE:	Produced By Microsoft MimeOLE V6.00.2600.0000

Pablo Milano wrote:
>> I am using Cygwin with openssh 3.0.2p1-5 and openssl 0.9.6c-2
>> The sshd is running in a windows 2000 server computer.
>> I use rsa keys to authenticate the users who access the ssh server
>> from linux machines (kernel 2.4.18).
>> Authentication works fine if the "ssh -i user.key user AT server" is
>> run from a linux console, but it fails if the same command is run
>> from cron. The following error is returned to the standard error
>> console: "Host key verification failed."
>>
>> This happens only when trying to connect to the cygwin ssh server.
>> It works fine among linux servers.
>> Any hint?

1. Upgrade openssh - 3.0.x is: a) ancient, b) known to have security problems.

2. The problem is likely to be that the server's host key is not in the ssh
known_hosts file for the user that cron is running ssh as. Since ssh is running
non-interatively, it can't prompt 'Do you wat to trust this host key?'.


Max.


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -