Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Message-ID: <021101c234eb$a85050f0$0100a8c0@wdg.uk.ibm.com>
From: "Max Bowsher" <maxb AT ukf DOT net>
To: <pablo DOT milano AT datatransfer DOT com DOT ar>, <cygwin AT cygwin DOT com>
References: <IFEHJOPLDENDFBLHDBOCKEGLCCAA DOT pablo DOT milano AT datatransfer DOT com DOT ar>
Subject: Re: Openssh 3.0.2-p15: Can't validate public key when accesing from cron
Date: Fri, 26 Jul 2002 19:42:21 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Pablo Milano wrote:
>> I am using Cygwin with openssh 3.0.2p1-5 and openssl 0.9.6c-2
>> The sshd is running in a windows 2000 server computer.
>> I use rsa keys to authenticate the users who access the ssh server
>> from linux machines (kernel 2.4.18).
>> Authentication works fine if the "ssh -i user.key user AT server" is
>> run from a linux console, but it fails if the same command is run
>> from cron. The following error is returned to the standard error
>> console: "Host key verification failed."
>>
>> This happens only when trying to connect to the cygwin ssh server.
>> It works fine among linux servers.
>> Any hint?

1. Upgrade openssh - 3.0.x is: a) ancient, b) known to have security problems.

2. The problem is likely to be that the server's host key is not in the ssh
known_hosts file for the user that cron is running ssh as. Since ssh is running
non-interatively, it can't prompt 'Do you wat to trust this host key?'.


Max.


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/