> I was using openssh 2.5.2 and a root .shosts file, with the
> known_hosts in root's .ssh/ directory to achieve root logins
> from certain hosts to others. Upon upgrading to the 2.9 line,
> it was quite broken. I tried all the same options that you have
> in your config files - and I have not had any luck.

Just to re-iterate my request for help, and post my configs under
2.9 openssh. 

My sshd_config:

Port 22
ListenAddress 0.0.0.0
HostKey /etc/ssh_host_key
HostKey /etc/ssh_host_dsa_key
HostKey /etc/ssh_host_rsa_key
ServerKeyBits 768
LoginGraceTime 600
KeyRegenerationInterval 3600

PermitRootLogin yes
PermitRootLogin without-password
IgnoreRhosts no
IgnoreUserKnownHosts no

StrictModes yes
# QuietMode no
X11Forwarding yes
X11DisplayOffset 10
# FascistLogging no
PrintMotd yes
KeepAlive yes
SyslogFacility DAEMON

RhostsAuthentication no
RhostsRSAAuthentication yes
HostbasedAuthentication yes
PubkeyAuthentication yes
RSAAuthentication yes
PasswordAuthentication yes
PermitEmptyPasswords yes

My ssh_config:

Host *
   ForwardAgent yes
   ForwardX11 yes
#   RhostsAuthentication yes
   RhostsRSAAuthentication yes
   RSAAuthentication yes
#   TISAuthentication no
   PasswordAuthentication yes
   FallBackToRsh no
   UseRsh no
   UsePrivilegedPort yes
   HostbasedAuthentication yes
   PreferredAuthentications hostbased,publickey,keyboard-interactive,password
   Port 22

I had both hosts in the known_hosts and known_hosts2, their
keys were known to one another. I even added them by FQDN, and
IP to see if that would help. 

According to my config files, this should work. Right?

I have set HostbasedAuthentication, I have allowed
RhostsRSAAuthentication, I have set the necessary config
options on BOTH the client and server, WHY won't this work?

-- 
MaTThew Hall                    | Life isn't fair.
[EMAIL PROTECTED]       | But the root password helps.
System Test/Product Support/MIS | 
408-895-1572                    | I speak for myself.


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to