Hello, I can not get host based authentication to work with GSI-OpenSSH:
I keep getting this error: debug3: authmethod_lookup hostbased debug3: remaining preferred: publickey,keyboard-interactive,password debug3: authmethod_is_enabled hostbased debug1: Next authentication method: hostbased debug2: userauth_hostbased: chost wg0. debug2: ssh_keysign called debug3: ssh_msg_send: type 2 debug3: ssh_msg_recv entering debug1: permanently_drop_suid: 500169 972326:/usr/local/globus-4.0.7_gsi-openssh//libexec/ssh-keysign: /sbin/loader: Fatal Error: Cannot map library libglobus_gss_assist_vendorcc64.so.0 ssh_keysign: no reply key_sign failed debug2: we did not send a packet, disable method Using: OpenSSH_4.7p1-hpn12v18 NCSA_GSSAPI_GPT_4.2 GSI, OpenSSL 0.9.7d 17 Mar 2004 on a Tru64 5.1B system Everything else seems to work fine I seem to be able to execute ssh-keysign as root if I run it directly, whereas if I run it as a non-root user I get the same error: # /usr/local/globus-4.0.7_gsi-openssh//libexec/ssh-keysign 972882:/usr/local/globus-4.0.7_gsi-openssh//libexec/ssh-keysign: /sbin/loader: Fatal Error: Cannot map library libglobus_gss_assist_vendorcc64.so.0 Running a "ldd" on the command is succesful when running as root AND non-root user. ldd /usr/local/globus-4.0.7_gsi-openssh//libexec/ssh-keysign Main => /usr/local/globus-4.0.7_gsi-openssh//libexec/ssh-keysign librt.so => /usr/shlib/librt.so libz.so.1.2.3 => /usr/local/lib/libz.so.1.2.3 libsecurity.so => /usr/shlib/libsecurity.so libdb-3.1.so => /usr/local/lib/libdb-3.1.so libm.so => /usr/shlib/libm.so libaud.so => /usr/shlib/libaud.so libglobus_gss_assist_vendorcc64.so.0 => /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_gss_assist_vendorcc64.so.0 libglobus_gssapi_gsi_vendorcc64.so.0 => /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_gssapi_gsi_vendorcc64.so.0 libglobus_gsi_proxy_core_vendorcc64.so.0 => /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_gsi_proxy_core_vendorcc64.so.0 libglobus_gsi_credential_vendorcc64.so.0 => /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_gsi_credential_vendorcc64.so.0 libglobus_gsi_callback_vendorcc64.so.0 => /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_gsi_callback_vendorcc64.so.0 libglobus_oldgaa_vendorcc64.so.0 => /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_oldgaa_vendorcc64.so.0 libglobus_gsi_sysconfig_vendorcc64.so.0 => /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_gsi_sysconfig_vendorcc64.so.0 libglobus_gsi_cert_utils_vendorcc64.so.0 => /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_gsi_cert_utils_vendorcc64.so.0 libglobus_openssl_vendorcc64.so.0 => /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_openssl_vendorcc64.so.0 libglobus_openssl_error_vendorcc64.so.0 => /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_openssl_error_vendorcc64.so.0 libglobus_callout_vendorcc64.so.0 => /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_callout_vendorcc64.so.0 libglobus_proxy_ssl_vendorcc64.so.0 => /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_proxy_ssl_vendorcc64.so.0 libglobus_common_vendorcc64.so.0 => /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_common_vendorcc64.so.0 libssl_vendorcc64.so.0 => /usr/local/globus-4.0.7_gsi-openssh//lib/libssl_vendorcc64.so.0 libcrypto_vendorcc64.so.0 => /usr/local/globus-4.0.7_gsi-openssh//lib/libcrypto_vendorcc64.so.0 libltdl_vendorcc64.so.3 => /usr/local/globus-4.0.7_gsi-openssh//lib/libltdl_vendorcc64.so.3 libc.so => /usr/shlib/libc.so libexc.so => /usr/shlib/libexc.so libclu.so => /usr/shlib/libclu.so libdb.so => /usr/shlib/libdb.so libpthread.so => /shlib/libpthread.so Permissions seem OK: -rwsr-xr-x 1 root system 357296 Apr 9 11:13 /usr/local/globus-4.0.7_gsi-openssh//libexec/ssh-keysign -rw-r--r-- 1 bin bin 93056 Sep 28 2003 /usr/shlib/librt.so -rwxr-xr-x 1 root system 144464 Jun 15 2006 /usr/local/lib/libz.so.1.2.3 -rw-r--r-- 1 bin bin 1847168 Jun 15 2004 /usr/shlib/libsecurity.so -rw-r--r-- 1 root system 1630480 Aug 19 2003 /usr/local/lib/libdb-3.1.so -rw-r--r-- 1 bin bin 679280 Oct 16 2002 /usr/shlib/libm.so -rw-r--r-- 1 bin bin 55584 Oct 16 2002 /usr/shlib/libaud.so -rwxr-xr-x 1 root system 76576 Apr 9 11:07 /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_gss_assist_vendorcc64.so.0 -rwxr-xr-x 1 root system 162624 Apr 9 11:06 /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_gssapi_gsi_vendorcc64.so.0 -rwxr-xr-x 1 root system 97184 Apr 9 11:05 /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_gsi_proxy_core_vendorcc64.so.0 -rwxr-xr-x 1 root system 104288 Apr 9 11:05 /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_gsi_credential_vendorcc64.so.0 -rwxr-xr-x 1 root system 68512 Apr 9 11:04 /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_gsi_callback_vendorcc64.so.0 -rwxr-xr-x 1 root system 61888 Apr 9 11:04 /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_oldgaa_vendorcc64.so.0 -rwxr-xr-x 1 root system 83216 Apr 9 11:03 /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_gsi_sysconfig_vendorcc64.so.0 -rwxr-xr-x 1 root system 39168 Apr 9 11:03 /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_gsi_cert_utils_vendorcc64.so.0 -rwxr-xr-x 1 root system 19776 Apr 9 11:03 /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_openssl_vendorcc64.so.0 -rwxr-xr-x 1 root system 31600 Apr 9 11:02 /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_openssl_error_vendorcc64.so.0 -rwxr-xr-x 1 root system 29856 Apr 9 11:04 /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_callout_vendorcc64.so.0 -rwxr-xr-x 1 root system 40736 Apr 9 11:02 /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_proxy_ssl_vendorcc64.so.0 -rwxr-xr-x 1 root system 385792 Apr 9 11:02 /usr/local/globus-4.0.7_gsi-openssh//lib/libglobus_common_vendorcc64.so.0 -rwxr-xr-x 1 root system 332688 Apr 9 11:00 /usr/local/globus-4.0.7_gsi-openssh//lib/libssl_vendorcc64.so.0 -rwxr-xr-x 1 root system 1969632 Apr 9 10:59 /usr/local/globus-4.0.7_gsi-openssh//lib/libcrypto_vendorcc64.so.0 -rwxr-xr-x 1 root system 57552 Apr 9 11:01 /usr/local/globus-4.0.7_gsi-openssh//lib/libltdl_vendorcc64.so.3 -rw-r--r-- 2 bin bin 2393280 Jun 15 2004 /usr/shlib/libc.so -rw-r--r-- 1 bin bin 41680 Oct 16 2002 /usr/shlib/libexc.so -rw-r--r-- 1 bin bin 24960 Oct 16 2002 /usr/shlib/libclu.so -rw-r--r-- 1 bin bin 125872 Oct 16 2002 /usr/shlib/libdb.so -rw-r--r-- 1 bin bin 724256 Jun 15 2004 /shlib/libpthread.so Any help is appreciated! Thanks, Steve -- Stephen Cartwright - [EMAIL PROTECTED] HPC/Research Support - Information Technologies University of Calgary - Calgary, Alberta, Canada Phone: (403) 220-2101 | Fax: (403) 282-9199
