Re: [TCLUG:15482] OpenSSH

["Thomas T. Veldhouse" <veldy@veldy.net>]

How about "FallBackToRsh yes"?

Tom Veldhouse
veldy@veldy.net

----- Original Message -----
From: "Adam Maloney" <adam@iexposure.com>
To: <tclug-list@mn-linux.org>
Sent: Monday, April 03, 2000 3:38 PM
Subject: Re: [TCLUG:15482] OpenSSH


> It's the same as all the other machines:
> Host *
>         ForwardAgent no
>         ForwardX11 no
>         FallBackToRsh no
>
> I tried setting PasswordAuthentication to yes, but that didn't make any
> difference.
>
> "Thomas T. Veldhouse" wrote:
> >
> > Is the default authentication set to RSA instead of text?  You will have
to
> > have exchanged RSA keys to make it work - or change the authentication
> > mechanism
> >
> > /usr/local/etc/ssh_config (I took this from my FreeBSD server (3.4) and
> > everything is commented - and works)
> >
> > # This is ssh client systemwide configuration file.  This file provides
> > # defaults for users, and the values can be changed in per-user
> > configuration
> > # files or on the command line.
> >
> > # Configuration data is parsed as follows:
> > #  1. command line options
> > #  2. user-specific file
> > #  3. system-wide file
> > # Any configuration value is only changed the first time it is set.
> > # Thus, host-specific definitions should be at the beginning of the
> > # configuration file, and defaults at the end.
> >
> > # Site-wide defaults for various options
> >
> > # Host *
> > #   ForwardAgent yes
> > #   ForwardX11 yes
> > #   RhostsAuthentication yes
> > #   RhostsRSAAuthentication yes
> > #   RSAAuthentication yes
> > #   PasswordAuthentication yes
> > #   FallBackToRsh yes
> > #   UseRsh no
> > #   BatchMode no
> > #   CheckHostIP yes
> > #   StrictHostKeyChecking no
> > #   IdentityFile ~/.ssh/identity
> > #   Port 22
> > #   Cipher blowfish
> > #   EscapeChar ~
> >
> > ----- Original Message -----
> > From: Adam Maloney <adam@iexposure.com>
> > To: <tclug-list@mn-linux.org>
> > Sent: Monday, April 03, 2000 2:23 PM
> > Subject: [TCLUG:15482] OpenSSH
> >
> > > So I'm standardizing all of our servers and workstations to OpenSSH.
I
> > > have 2 questions.
> > >
> > > First, when I install openssh I have to run ssh-keygen to create the
> > > server keys.  It asks me for a passphrase.  What is this passphrase
used
> > > for?  It apparently happens after the key is generated.  Does it
matter
> > > if I enter one or not?  It says I can just leave it blank, and if I do
> > > it doesn't complain.
> > >
> > > Also, I've installed it on about 10 machines so far and it's worked
> > > flawlessly.  No problems with any of them.  Now I'm installing it on
one
> > > more server, similar configuration to the others (Slack-7) and there
are
> > > no problems during compile, but when I ssh in after doing keygen and
> > > running sshd, it says "Permission denied, please try again".  I tried
it
> > > with many different accounts, I know it's not an incorrect password
> > > problem.  When I look at the message logs it says Failed password for
> > > <user> from <ip>
> > >
> > >
> > > I have no idea how to trace the problem back.  Anyone seen this?
> > >
> > > --
> > > Adam Maloney
> > > Systems Administrator
> > > Internet Exposure, Inc.
> > >
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: tclug-list-unsubscribe@mn-linux.org
> > > For additional commands, e-mail: tclug-list-help@mn-linux.org
> > >
> > >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tclug-list-unsubscribe@mn-linux.org
> > For additional commands, e-mail: tclug-list-help@mn-linux.org
>
> --
> Adam Maloney
> Systems Administrator
> Internet Exposure, Inc.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tclug-list-unsubscribe@mn-linux.org
> For additional commands, e-mail: tclug-list-help@mn-linux.org
>
>