Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT sources DOT redhat DOT com Delivered-To: mailing list cygwin AT sources DOT redhat DOT com Message-ID: <3A90B72C.E0974F8B@bulletproof.net.au> Date: Mon, 19 Feb 2001 17:03:24 +1100 From: Kim Lee X-Mailer: Mozilla 4.76 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: Kevin Wright CC: cygwin AT cygwin DOT com Subject: Re: sshd and RSA Authentication References: <000601c09a0d$260f1970$7074aa40 AT holstein-mobile DOT ASPECTDV DOT COM> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 19 Feb 2001 06:03:24.0281 (UTC) FILETIME=[AB38BE90:01C09A39] Kevin Wright wrote: > > Kim, > > I have you looked in /usr/doc? Here's a list of files there: > > bzip2-1.0.1.README jbigkit-1.2.README ncurses-5.2.README > vim-5.7.README > crypt.README jpeg-6b.README openssh-2.3.0p1.README > wget-1.6.README > cvs-1.11.0.README libpng-1.0.9.README perl-5.6.1.README > xpm-4.0.0.README > gdbm-1.8.0.README login.README readline-4.1.README > zip-2.3.README > gettext-0.10.35.README mt.README tiff-3.5.5.README > zlib-1.1.3.README > inetutils-1.3.2.README ncftp-3.0.2.README unzip-5.41.README > > check out the files for login, inetutils, openssh to begin with. And if you > still have a problem. Search the mailing list: > > http://cygwin.com/ml/cygwin/ Hi Kevin, Actually I did... BUT I was running an old version of sshd.exe in \winnt but I can't explain why on earth typing in sshd -d called the old version when it was in \d\winnt ie not in the path This will teach me to use full paths where possible when testing! Thanks! :) > --Kevin > > > -----Original Message----- > > From: cygwin-owner AT sources DOT redhat DOT com > > [mailto:cygwin-owner AT sources DOT redhat DOT com]On Behalf Of Kim Lee > > Sent: Sunday, February 18, 2001 6:25 PM > > To: cygwin AT cygwin DOT com > > Subject: sshd and RSA Authentication > > > > > > Hi there, > > > > if there is a step by step document specific to cygwin, sshd and > > getting RSA authentication to work please point me to it.. > > > > Please read on anyway... > > > > I'm having problems getting w2k server sshd to allow RSA login without > > a password from another W2k Server box > > > > Here are some detail: > > > > I'm using latest (as of today) cygwin tools (ran the setup.exe and updated > > from the internet) > > > > /etc/passwd has... > > > > Administrator::500:513:,S-1-5-21-3438086697-2421862272-1916658313- > > 500:/home/Administrator:/bin/sh > > > > > > This is the ssh client machine. > > > > > > administrator AT SHRIMP ~ > > $ ssh -v KRILL > > SSH Version OpenSSH_2.3.0p1, protocol versions 1.5/2.0. > > Compiled with SSL (0x0090581f). > > debug: Seeding random number generator > > debug: ssh_connect: getuid 500 geteuid 500 anon 0 > > debug: Connecting to KRILL [172.16.0.202] port 22. > > debug: Seeding random number generator > > debug: Allocated local port 946. > > debug: Connection established. > > debug: Remote protocol version 1.5, remote software version 1.2.26 > > debug: no match: 1.2.26 > > debug: Local version string SSH-1.5-OpenSSH_2.3.0p1 > > debug: Waiting for server public key. > > debug: Received server public key (768 bits) and host key (1024 bits). > > debug: Host 'krill' is known and matches the RSA host key. > > debug: Seeding random number generator > > debug: Encryption type: 3des > > debug: Sent encrypted session key. > > debug: Installing crc compensation attack detector. > > debug: Received encrypted confirmation. > > debug: Trying RSA authentication with key 'administrator AT SHRIMP' > > debug: Server refused our key. > > debug: Doing password authentication. > > administrator AT krill's password: > > debug: Requesting pty. > > debug: Requesting shell. > > debug: Entering interactive session. > > Environment: > > HOME=/home/Administrator > > USER=administrator > > LOGNAME=administrator > > SHELL=/bin/sh > > SSH_CLIENT=172.16.0.201 946 22 > > SSH_TTY=/dev/tty0 > > TERM=cygwin > > > > \[\033]0;\w\007 > > \033[32m\]\u@\h \[\033[33m\w\033[0m\] > > $ exit > > Connection to KRILL closed. > > debug: Transferred: stdin 0, stdout 247, stderr 29 bytes in 5.8 seconds > > debug: Bytes per second: stdin 0.0, stdout 42.8, stderr 5.0 > > debug: Exit status 1 > > > > > > > > > > Here's the server end. > > > > > > > > administrator AT KRILL ~ > > $ sshd -d > > debug: sshd version 1.2.26 [i586-pc-cygwin32] > > debug: Initializing random number generator; seed file ssh_random_seed > > log: Server listening on port 22. > > log: Generating 768 bit RSA key. > > Generating p: ..++ (distance 72) > > Generating q: ...................++ (distance 288) > > Computing the keys... > > Testing the keys... > > Key generation complete. > > log: RSA key generation complete. > > debug: Server will not fork when running in debugging mode. > > error: setsockopt IPTOS_LOWDELAY: Invalid argument > > log: Connection from 172.16.0.201 port 946 > > debug: Client protocol version 1.5; client software version > > OpenSSH_2.3.0p1 > > debug: Sent 768 bit public key and 1024 bit host key. > > debug: Encryption type: 3des > > debug: Received session key; encryption turned on. > > debug: Installing crc compensation attack detector. > > debug: Attempting authentication for administrator. > > debug: RSA authentication for administrator failed. > > log: Password authentication for administrator accepted. > > debug: Allocating pty. > > error: setsockopt IPTOS_LOWDELAY: Invalid argument > > debug: Forking shell. > > debug: Entering interactive session. > > debug: Received SIGCHLD. > > debug: End of interactive session; stdin 5, stdout (read 242, sent 242), > > stderr > > 0 bytes. > > debug: pty_cleanup_proc called > > debug: Command exited with status 1. > > debug: Received exit confirmation. > > log: Closing connection to 172.16.0.201 > > > > what is IPTOS_LOWDELAY, there is a rather long pause (10 seconds +) after > > the "connection is established" before the password prompt pops up. > > > > Note: the cygwin ssh client to a unix box with RSA authentication (no > > password) > > works fine and there is no delay. > > > > Another interesting thing is ssh client to a Windows 2000 Professional > > (NOT > > server) sshd doesn't have this delay but RSA authentication still doesn't > > work. > > > > What am I doing wrong? Any ideas or pointers? Thanks :) > > -- > > Cheers > > ---------------------------------------------------------------------- > > Kim Lee Senior Engineer - Bulletproof Networks > > ph: +61 (0) 416 212 025 http://www.bulletproof.net.au/ > > "When failure is not an option" > > > > -- > > Want to unsubscribe from this list? > > Check out: http://cygwin.com/ml/#unsubscribe-simple > > > > -- Cheers ---------------------------------------------------------------------- Kim Lee Senior Engineer - Bulletproof Networks ph: +61 (0) 416 212 025 http://www.bulletproof.net.au/ "When failure is not an option" -- Want to unsubscribe from this list? Check out: http://cygwin.com/ml/#unsubscribe-simple