Bug#314596: Cannot ssh OUT from host as non-root user

[Alistair Cockeram <deb-bugs@imf2000.org>]

Package: ssh
Version: 1:3.8.1p1-8.sarge.4
Severity: important


Since carefully upgrading to Sarge from an uptodate Woody install I can no 
longer ssh out as a non root user to any other host. I can still ssh out
as root with no issues. The installation in question is running in a
vserver. Another vserver on the same box does not have the same
behaviour. The working  vserver was running testing prior to sarge being
released and was then upgraded to sarge with no issues. 

Note: ssh IN to the server is working ok.

Example behaviour:

$ssh -o 'StrictHostKeyChecking no' 127.0.0.1
Permission denied (publickey,keyboard-interactive).
$


$ ssh -o 'StrictHostKeyChecking no' xxx.xxx.org
Permission denied, please try again.
Permission denied, please try again.
Permission denied (publickey,password,keyboard-interactive).
$

And the auth.log for that host:

Jun 17 11:11:34 foo sshd[9616]: Failed password for alistair from
xxx.xxx.xxx.xxx port 33491 ssh2


-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.4.31epia+lvm+vs
Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1)

Versions of packages ssh depends on:
ii  adduser                     3.63         Add and remove users and groups
ii  debconf                     1.4.30.13    Debian configuration management sy
ii  dpkg                        1.10.28      Package maintenance system for Deb
ii  libc6                       2.3.2.ds1-22 GNU C Library: Shared libraries an
ii  libpam-modules              0.76-22      Pluggable Authentication Modules f
ii  libpam-runtime              0.76-22      Runtime support for the PAM librar
ii  libpam0g                    0.76-22      Pluggable Authentication Modules l
ii  libssl0.9.7                 0.9.7e-3     SSL shared libraries
ii  libwrap0                    7.6.dbs-8    Wietse Venema's TCP wrappers libra
ii  zlib1g                      1:1.2.2-4    compression library - runtime

-- debconf information:
  ssh/insecure_rshd:
  ssh/ssh2_keys_merged:
  ssh/user_environment_tell:
* ssh/forward_warning:
  ssh/insecure_telnetd:
  ssh/new_config: true
* ssh/use_old_init_script: true
* ssh/protocol2_only: true
  ssh/encrypted_host_key_but_no_keygen:
* ssh/run_sshd: true
* ssh/SUID_client: false
  ssh/disable_cr_auth: false