Re: ssh from user account troubles
ключ хоста, описанного в /home/vitamin/.ssh/known_hosts сменился
(возможно переустановил ssh). лечится удалением строки с этим хостом из
/home/vitamin/.ssh/known_hosts
On Tue, Feb 11, 2003 at 10:44:07AM +0300, Alexey Zagarin wrote:
> Добрый день!
>
> SSH из Debian/woody из под юзера не логинится на хосты - пишет "Host key
> verification failed." и даже пароль не спрашивает. А из под рута
> работает нормально. В чём может быть дело? Самое забавное, что на точно
> такой же машине с таким же woody всё работает на ура. Как фиксить? Вот
> лог:
>
> vitamin@brandmauer:~$ ssh -l alexey -vvv 192.168.1.89
> OpenSSH_3.4p1 Debian 1:3.4p1-1, SSH protocols 1.5/2.0, OpenSSL
> 0x0090603f debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: Rhosts Authentication disabled, originating port will not be
> trusted. debug1: ssh_connect: needpriv 0
> debug1: Connecting to 192.168.1.89 [192.168.1.89] port 22.
> debug1: Connection established.
> debug1: identity file /home/vitamin/.ssh/identity type -1
> debug1: identity file /home/vitamin/.ssh/id_rsa type -1
> debug1: identity file /home/vitamin/.ssh/id_dsa type -1
> debug1: Remote protocol version 2.0, remote software version
> OpenSSH_3.4p1 Debian 1:3.4p1-1 debug1: match: OpenSSH_3.4p1 Debian
> 1:3.4p1-1 pat OpenSSH* Enabling compatibility mode for protocol 2.0
> debug1: Local version string SSH-2.0-OpenSSH_3.4p1 Debian 1:3.4p1-1
> debug1: SSH2_MSG_KEXINIT sent
> debug1: SSH2_MSG_KEXINIT received
> debug2: kex_parse_kexinit:
> diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 debug2:
> kex_parse_kexinit: ssh-rsa,ssh-dss debug2: kex_parse_kexinit:
> aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-
> cbc,rijndael-cbc@lysator.liu.se debug2: kex_parse_kexinit:
> aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-
> cbc,rijndael-cbc@lysator.liu.se debug2: kex_parse_kexinit:
> hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-
> 96,hmac-md5-96 debug2: kex_parse_kexinit:
> hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-
> 96,hmac-md5-96 debug2: kex_parse_kexinit: none
> debug2: kex_parse_kexinit: none
> debug2: kex_parse_kexinit:
> debug2: kex_parse_kexinit:
> debug2: kex_parse_kexinit: first_kex_follows 0
> debug2: kex_parse_kexinit: reserved 0
> debug2: kex_parse_kexinit:
> diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 debug2:
> kex_parse_kexinit: ssh-rsa,ssh-dss debug2: kex_parse_kexinit:
> aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-
> cbc,rijndael-cbc@lysator.liu.se debug2: kex_parse_kexinit:
> aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-
> cbc,rijndael-cbc@lysator.liu.se debug2: kex_parse_kexinit:
> hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-
> 96,hmac-md5-96 debug2: kex_parse_kexinit:
> hmac-md5,hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-
> 96,hmac-md5-96 debug2: kex_parse_kexinit: none,zlib
> debug2: kex_parse_kexinit: none,zlib
> debug2: kex_parse_kexinit:
> debug2: kex_parse_kexinit:
> debug2: kex_parse_kexinit: first_kex_follows 0
> debug2: kex_parse_kexinit: reserved 0
> debug2: mac_init: found hmac-md5
> debug1: kex: server->client aes128-cbc hmac-md5 none
> debug2: mac_init: found hmac-md5
> debug1: kex: client->server aes128-cbc hmac-md5 none
> debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
> debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
> debug1: dh_gen_key: priv key bits set: 120/256
> debug1: bits set: 1589/3191
> debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
> debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
> debug3: check_host_in_hostfile: filename /home/vitamin/.ssh/known_hosts
> debug3: check_host_in_hostfile: filename /etc/ssh/ssh_known_hosts
> Host key verification failed.
> debug1: Calling cleanup 0x8063a9c(0x0)
>
> --
> Alexey Zagarin
> Aquarius Consulting
> Phone: +7 (095) 745-3663 *170
> E-Mail: alexey@aqc.ru
>
>
> --
> To UNSUBSCRIBE, email to debian-russian-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
>
--
regards,
Dmitry
Reply to: