Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: ssh problems for certain hosts



I apologize if this is cross-posted to the wrong list.  There are a lot of ssh questions on x11-users, and I know some Apple people read it, so I'm hoping to reach the right people.  

Well, I fixed my ssh problem.  The fix was to put the following in $HOME/.ssh/config: 

PreferredAuthentications hostbased,publickey,password

It's the keyboard-interactive which is failing, so I just left it out.  It looks to me like Apple's install of ssh is broken.  They need to include ssh-askpass, it's a pretty standard tool, or else they need to change their /etc/ssh_config to reflect their policy of leaving this out.  

On Jun 16, 2006, at 8:48 AM, Rich Cook wrote:

I need help figuring this one out.  Sometimes, when ssh'ing to some hosts, I cannot log in, due to the following error.   

 ssh -l rich 207.225.108.162 cvs server
ssh_askpass: exec(/usr/libexec/ssh-askpass): No such file or directory
ssh_askpass: exec(/usr/libexec/ssh-askpass): No such file or directory
ssh_askpass: exec(/usr/libexec/ssh-askpass): No such file or directory

I tried moving my .ssh directory out of the way, and it has no effect.   I never get prompted for a password, it just failed.  It's as if the remote host is not allowing password authentication for some reason, but I know I have logged into it before, even recently.  Here's a verbose output.

rcook@richcookmac (CRRS): ssh -v -l rich 207.225.108.162
OpenSSH_3.8.1p1, OpenSSL 0.9.7i 14 Oct 2005
debug1: Reading configuration data /etc/ssh_config
debug1: Connecting to 207.225.108.162 [207.225.108.162] port 22.
debug1: Connection established.
debug1: identity file /Users/rcook/.ssh/identity type -1
debug1: identity file /Users/rcook/.ssh/id_rsa type -1
debug1: identity file /Users/rcook/.ssh/id_dsa type -1
debug1: Remote protocol version 1.99, remote software version OpenSSH_3.7.1p2
debug1: match: OpenSSH_3.7.1p2 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.8.1p1
debug1: Miscellaneous failure
No credentials cache found

debug1: Miscellaneous failure
No credentials cache found

debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host '207.225.108.162' is known and matches the RSA host key.
debug1: Found key in /Users/rcook/.ssh/known_hosts:1
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Offering public key: /Users/rcook/.ssh/id_rsa
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: Offering public key: /Users/rcook/.ssh/id_dsa
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: Trying private key: /Users/rcook/.ssh/identity
debug1: Trying private key: /Users/rcook/.ssh/id_rsa
debug1: Trying private key: /Users/rcook/.ssh/id_dsa
debug1: Next authentication method: keyboard-interactive
ssh_askpass: exec(/usr/libexec/ssh-askpass): No such file or directory
debug1: Authentications that can continue: publickey,keyboard-interactive
ssh_askpass: exec(/usr/libexec/ssh-askpass): No such file or directory
debug1: Authentications that can continue: publickey,keyboard-interactive
ssh_askpass: exec(/usr/libexec/ssh-askpass): No such file or directory
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: No more authentication methods to try.
Permission denied (publickey,keyboard-interactive).



-- 
"There's no time to stop for gas, we're already late"-- Karin Donker
--
Rich "wealthychef" Cook
925-784-3077
--




-- 
"There's no time to stop for gas, we're already late"-- Karin Donker
--
Rich "wealthychef" Cook
925-784-3077
--



 _______________________________________________
Do not post admin requests to the list. They will be ignored.
X11-users mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/x11-users/email@hidden

This email sent to email@hidden



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.