Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Date:	Thu, 9 Oct 2003 10:12:47 -0500 (CDT)
From:	hayward AT slothmud DOT org
To:	cygwin AT cygwin DOT com
Subject:	Re: Key-based auth fails - OpenSSH 3.7.1p2
In-Reply-To:	<Pine.LNX.4.44.0310090955410.15495-100000@lotus.slothmud.org>
Message-ID:	<Pine.LNX.4.44.0310091008440.15495-100000@lotus.slothmud.org>
MIME-Version:	1.0

More information on file permissions:
ls -ld /
drwxrwxrwt+   9 Administ ????????     4096 Oct  9 08:57 /

ls -ld /home
drwxr-xr-x+   5 Administ SYSTEM          0 Oct  9 10:07 /home

ls -ld /home/hayward
drwx------+   3 hayward  Administ        0 Oct  9 10:07 /home/hayward

ls -altr /home/hayward/.ssh
total 4
-rw-------    1 hayward  Administ      618 Oct  9 09:40 authorized_keys
-rw-r--r--    1 hayward  Administ     1228 Oct  9 09:40 known_hosts
drwx------+   2 hayward  Administ     4096 Oct  9 09:41 .
-rw-------    1 hayward  Administ      618 Oct  9 09:41 authorized_keys2
drwx------+   3 hayward  Administ        0 Oct  9 10:07 ..

Here are the sshd_config params not commented out:

Port 22
StrictModes no
Subsystem sftp /usr/sbin/sftp-server

Thanks!
Brian Hayward


>
>I'm not sure if this should be directed at the cygwin or ssh lists.  
>Because I haven't had any troubles with ssh keys in the past on Unix, I 
>figured I'd start here.
>
>No matter what I do with filesystem permissions, I can't get ssh key-based 
>authentication to work.  I have tried both with StrictModes no and yes.
>
>I've reconfigured my sshd.exe to run through services with the arguments:
>"-D -ddd" -1 /tmp/sshd.1 -2 /tmp/sshd.2, so I can get the debugging 
>information necessary.
>
>debug1: userauth-request for user hayward service ssh-connection method 
>publickey
>debug1: attempt 1 failures 1
>debug2: input_userauth_request: try method publickey
>debug1: test whether pkalg/pkblob are acceptable
>debug3: mm_key_allowed entering
>debug3: mm_request_send entering: type 20
>debug3: mm_key_allowed: waiting for MONITOR_ANS_KEYALLOWED
>debug3: mm_request_receive_expect entering: type 21
>debug3: mm_request_receive entering
>debug3: monitor_read: checking request 20
>debug3: mm_answer_keyallowed entering
>debug3: mm_answer_keyallowed: key_from_blob: 0x100f4158
>debug1: temporarily_use_uid: 132690/513 (e=18/544)
>debug1: trying public key file /home/hayward/.ssh/authorized_keys
>debug1: restore_uid: (unprivileged)
>debug1: temporarily_use_uid: 132690/513 (e=18/544)
>debug1: trying public key file /home/hayward/.ssh/authorized_keys
>debug1: restore_uid: (unprivileged)
>debug3: mm_answer_keyallowed: key 0x100f4158 is disallowed
>debug3: mm_request_send entering: type 21
>debug3: mm_request_receive entering
>debug2: userauth_pubkey: authenticated 0 pkalg ssh-dss
>Failed publickey for hayward from 10.10.10.10 port 57461 ssh2
>
>Does anyone have any suggestions?
>
>Thanks,
>Brian Hayward
>
>
>--
>Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
>Problem reports:       http://cygwin.com/problems.html
>Documentation:         http://cygwin.com/docs.html
>FAQ:                   http://cygwin.com/faq/
>



--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -