I've installed Openssh 2.5.2p2 with OpenSSL 0.9.6 on a machine 
running Solaris 2.6, but I'm unable to get host authentication to 
work. Even though the /usr/local/etc/ssh_config is set to

RhostsAuthentication yes
RhostsRSAAuthentication yes
RSAAuthentication yes

ssh -v shows "Rhosts Authentication disabled" (see below). I need 
host-based authentication for several automated processes that I run. 
Has something changed in this build, or is there some other option 
that has to be specified in the config or at the time I make the 
binary? This machine's name is in the .shosts files on the machines 
it needs to connect to, I copied the new key over and when it was 
running ssh 1.2.27 it had no problem with this.

Thanks,
Jane

OpenSSH_2.5.2p2, SSH protocols 1.5/2.0, OpenSSL 0x0090600f
debug1: Seeded RNG with 43 bytes from programs
debug1: Seeded RNG with 3 bytes from system calls
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: ssh_connect: getuid 0 geteuid 0 anon 1
debug1: Connecting to xxx.nyu.edu [xxx.xxx.xxx.xxx] port 22.
debug1: Connection established.
debug1: identity file //.ssh/identity type 0
debug1: unknown identity file //.ssh/id_rsa
debug1: identity file //.ssh/id_rsa type -1
debug1: identity file //.ssh/id_dsa type 2
debug1: Remote protocol version 1.99, remote software version OpenSSH_2.2.0p1
debug1: match: OpenSSH_2.2.0p1 pat ^OpenSSH[-_]2\.[012]
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_2.5.2p2
debug1: send KEXINIT
debug1: done
debug1: wait KEXINIT
debug1: got kexinit: diffie-hellman-group1-sha1
debug1: got kexinit: ssh-dss
debug1: got kexinit: 3des-cbc,blowfish-cbc,arcfour,cast128-cbc
debug1: got kexinit: 3des-cbc,blowfish-cbc,arcfour,cast128-cbc
debug1: got kexinit: hmac-sha1,hmac-md5,[EMAIL PROTECTED]
debug1: got kexinit: hmac-sha1,hmac-md5,[EMAIL PROTECTED]
debug1: got kexinit: zlib,none
debug1: got kexinit: zlib,none
debug1: got kexinit:
debug1: got kexinit:
debug1: first kex follow: 0
debug1: reserved: 0
debug1: done
debug1: kex: server->client 3des-cbc hmac-md5 none
debug1: kex: client->server 3des-cbc hmac-md5 none
debug1: Sending SSH2_MSG_KEXDH_INIT.
debug1: dh_gen_key: priv key bits set: 190/384
debug1: bits set: 526/1024
debug1: Wait SSH2_MSG_KEXDH_REPLY.
debug1: Got SSH2_MSG_KEXDH_REPLY.
debug1: Host 'id.acf.nyu.edu' is known and matches the DSA host key.
debug1: Found key in //.ssh/known_hosts2:1
debug1: bits set: 516/1024
debug1: len 55 datafellows 144
debug1: ssh_dss_verify: signature correct
debug1: Wait SSH2_MSG_NEWKEYS.
debug1: GOT SSH2_MSG_NEWKEYS.
debug1: send SSH2_MSG_NEWKEYS.
debug1: done: send SSH2_MSG_NEWKEYS.
debug1: done: KEX2.
debug1: send SSH2_MSG_SERVICE_REQUEST
debug1: service_accept: ssh-userauth
debug1: got SSH2_MSG_SERVICE_ACCEPT
debug1: authentications that can continue: publickey,password
debug1: next auth method to try is publickey
debug1: try privkey: //.ssh/id_rsa
debug1: try pubkey: //.ssh/id_dsa
debug1: authentications that can continue: publickey,password
debug1: next auth method to try is password
[EMAIL PROTECTED] password:
debug1: ssh-userauth2 successful: method password
debug1: channel 0: new [client-session]
debug1: send channel open 0
debug1: Entering interactive session.
debug1: client_init id 0 arg 0
debug1: channel request 0: shell
debug1: channel 0: open confirm rwindow 0 rmax 32768

Reply via email to