X-Recipient: archive-cygwin AT delorie DOT com
X-Spam-Check-By: sourceware.org
Message-ID: <4716A6E2.4050904@cygwin.com>
Date: Wed, 17 Oct 2007 20:20:50 -0400
From: "Larry Hall (Cygwin)" <reply-to-list-only-lh AT cygwin DOT com>
Reply-To: cygwin AT cygwin DOT com
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.3) Gecko/20070505 Remi/2.0.0.0-3.fc4.remi Thunderbird/2.0.0.0 Mnenhy/0.7.5.0
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: OpenSSH for windows issue
References: <7c852e580710171614h69260c0en656fffa50bc4b4b9 AT mail DOT gmail DOT com>
In-Reply-To: <7c852e580710171614h69260c0en656fffa50bc4b4b9@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Mick Ken wrote:
> Friends,
> I am trying to install SSH on a Windows 2003 server since last 3 days
> and still no luck.
> 
> I have tried literally everything and searched 100s of google  pages
> but I am getting this error.I would greatly appreciate if someone can
> help me resolve this.
> 
> Here's the trace from the server end:
> 
> E:\Program Files\OpenSSH\usr\sbin>sshd -d

Bad idea unless this shell is owned by 'sshd_server'.  So if you don't know
what you're doing, you may be better off wiping your installation directory
and starting over.

<snip>

> debug1: attempt 1 failures 1
> debug1: test whether pkalg/pkblob are acceptable
> debug1: temporarily_use_uid: 500/513 (e=500/513)
> debug1: trying public key file /home/Administrator/OpenSSH/.ssh/authorized_keys
> debug1: restore_uid: (unprivileged)
> debug1: temporarily_use_uid: 500/513 (e=500/513)
> debug1: trying public key file /home/Administrator/OpenSSH/.ssh/authorized_keys2
> 
> debug1: restore_uid: (unprivileged)
> Failed publickey for Administrator from 10.11.12.13 port 2715 ssh2
> debug1: userauth-request for user Administrator service ssh-connection method ke
> yboard-interactive
> debug1: attempt 2 failures 2
> debug1: keyboard-interactive devs
> debug1: auth2_challenge: user=Administrator devs=
> debug1: kbdint_alloc: devices ''
> Failed keyboard-interactive for Administrator from 10.11.12.13 port 2715 ssh2
> Received disconnect from 10.11.12.13: 14: No supported authentication methods a
> vailable
> debug1: do_cleanup
> 
> After researching,people mentioned that it looks like a permission
> issue with either one of the following:
> E:/Documents and Settings/Administrator/OpenSSH
> E:/Documents and Settings/Administrator/OpenSSH/.ssh
> E:/Documents and Settings/Administrator/OpenSSH.ssh/authorized_keys
> 
> And they say to set 700 or some permissions to them,but how can i do
> that in Windows ???


chmod 700 .ssh
chmod 600 .ssh/authorized_keys

You should do this on every file under .ssh that's not a .pub file.
.pub files should be 644.


> I have given full control to all these files to the "Administrator"
> and the "System" account.
> 
> My /etc/passwd and /etc/group files look proper and also have full
> control by "Administrator" and "System" accounts.I have also changed
> the Administrator home to point to /home/Administrator/OpenSSH
> 
> I have generated my private/public key on the client end(windows box)
> using puttygen and copied my public key into the E:/Documents and
> Settings/Administrator/OpenSSH/.ssh/authorized_keys file.


So you have '/home' mounting 'E:/Documents and Settings'?  Otherwise you're
comparing apples and oranges here.

-- 
Larry Hall                              http://www.rfk.com
RFK Partners, Inc.                      (508) 893-9779 - RFK Office
216 Dalton Rd.                          (508) 893-9889 - FAX
Holliston, MA 01746

_____________________________________________________________________

A: Yes.
 > Q: Are you sure?
 >> A: Because it reverses the logical flow of conversation.
 >>> Q: Why is top posting annoying in email?

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/