script please.
Greg Hauptmann wrote:
> Hi guys,
>
> I'm stuck on this. I can ssh my target prod server (call it server
> A), and from there ssh into my repo server (say server B) fine. When
> I run some scripts that are accessing server B from server A via ssh
> however they get a a "failed password". Any ideas? What is the
> difference from server B's perspective how the ssh connection is being
> established? Here's a tail of the secure.log from Server B for both
> cases.
>
> ---------- server B log when "manually ssh'ing in " -------------------
> Feb 6 15:23:18 Macintosh-2 com.apple.SecurityServer[21]: checkpw()
> succeeded, creating credential for user greg
> Feb 6 15:23:18 Macintosh-2 com.apple.SecurityServer[21]: checkpw()
> succeeded, creating shared credential for user greg
> Feb 6 15:23:18 Macintosh-2 com.apple.SecurityServer[21]: Succeeded
> authorizing right system.login.tty by client /usr/sbin/sshd for
> authorization created by /usr/sbin/sshd.
> Feb 6 15:23:18 Macintosh-2 sshd[2372]: Accepted
> keyboard-interactive/pam for greg from 10.1.1.1 port 49636 ssh2
>
> --------- server B log when scripts are trying to access ------------
> Feb 6 15:23:53 Macintosh-2 sshd[2414]: error: PAM: Authentication
> failure for greg from home.gregsdomainname.org
> Feb 6 15:23:53: --- last message repeated 2 times ---
> Feb 6 15:23:53 Macintosh-2 sshd[2414]: Failed password for greg from
> 10.1.1.1 port 50366 ssh2
>
> Not sure if it's significant, however I acutally trigger the scripts
> running on Server A from Server B itself. Hence end-to-end it is:
>
> Server A (run capistrano init) ==ssh==> Sever B (run scripts)
> ====ssh===>Server A
>
> Server B ssh config (/etc/ssh_config)
> =========================
> Macintosh-2:etc greg$ cat /etc/ssh_config
> # Host *
> # ForwardAgent no
> # ForwardX11 no
> # RhostsRSAAuthentication no
> # RSAAuthentication yes
> PasswordAuthentication yes
> # HostbasedAuthentication no
> # GSSAPIAuthentication yes
> # GSSAPIDelegateCredentials no
> # GSSAPIKeyExchange yes
> # GSSAPITrustDNS no
> # BatchMode no
> # CheckHostIP yes
> # AddressFamily any
> # ConnectTimeout 0
> # StrictHostKeyChecking ask
> # IdentityFile ~/.ssh/identity
> # IdentityFile ~/.ssh/id_rsa
> # IdentityFile ~/.ssh/id_dsa
> # Port 22
> # Protocol 2,1
> # Cipher 3des
> # Ciphers
> aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc
> # EscapeChar ~
> # Tunnel no
> # TunnelDevice any:any
> # PermitLocalCommand no
>
>
>
>
> Thanks
>
>
