[prev in list] [next in list] [prev in thread] [next in thread]
List: aix-l
Subject: AIX 5.3 to 6.1 migration problems with ssh & krb5files
From: "Rugen, Len" <RugenL () MISSOURI ! EDU>
Date: 2011-09-06 17:38:33
Message-ID: 0AB500DD5C8068469C9A6E19EAA61B91168C099736 () UM-EMAIL05 ! um ! umsystem ! edu
[Download RAW message or body]
I have a few long time running, stable AIX 5.3 systems. I've done a migrat=
ion to 6.1 on one and have a few problems with add-on features that were wo=
rking before. I'm working through a longer list, but these have me stumped=
.
Ssh login with public key now fails. From a successful login:
debug1: Next authentication method: publickey
debug1: Offering RSA public key: /cygdrive/c/cyghome/.ssh/id_rsa
debug2: we sent a publickey packet, wait for reply
debug1: Server accepts key: pkalg ssh-rsa blen 277
debug2: input_userauth_pk_ok: fp 1f:whack:70
Failing login:
debug1: Next authentication method: publickey
debug1: Offering RSA public key: /cygdrive/c/cyghome/.ssh/id_rsa
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey,password,keyboard-inte=
racti
ve
debug1: Offering DSA public key: /cygdrive/c/cyghome/.ssh/id_dsa
Looks like the sshd server didn't like my rsa key, but.... Where would it p=
ut an error message?
The other problem MAY be related, but I haven't been able to find the trail=
yet. We were authenticating against Windows AD via KRB5files, now I get:
3004-619 Security method "KRB5Afiles" could not be loaded. It may be that =
the kerb problem is blocking my ssh logins.
Any ideas?
Thanks
[Attachment #3 (text/html)]
<html xmlns:v="urn:schemas-microsoft-com:vml" \
xmlns:o="urn:schemas-microsoft-com:office:office" \
xmlns:w="urn:schemas-microsoft-com:office:word" \
xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" \
xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type \
content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 \
(filtered medium)"><style><!-- /* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div \
class=WordSection1><p class=MsoNormal>I have a few long time running, stable AIX 5.3 \
systems. I’ve done a migration to 6.1 on one and have a few problems with \
add-on features that were working before. I’m working through a longer \
list, but these have me stumped.<o:p></o:p></p><p \
class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Ssh login with public key now \
fails. From a successful login:<o:p></o:p></p><p class=MsoNormal \
style='margin-left:.5in'>debug1: Next authentication method: \
publickey<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'>debug1: Offering \
RSA public key: /cygdrive/c/cyghome/.ssh/id_rsa<o:p></o:p></p><p class=MsoNormal \
style='margin-left:.5in'>debug2: we sent a publickey packet, wait for \
reply<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'>debug1: Server \
accepts key: pkalg ssh-rsa blen 277<o:p></o:p></p><p class=MsoNormal \
style='margin-left:.5in'>debug2: input_userauth_pk_ok: fp \
1f:whack:70<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p \
class=MsoNormal>Failing login:<o:p></o:p></p><p class=MsoNormal \
style='margin-left:.5in'>debug1: Next authentication method: \
publickey<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'>debug1: Offering \
RSA public key: /cygdrive/c/cyghome/.ssh/id_rsa<o:p></o:p></p><p class=MsoNormal \
style='margin-left:.5in'>debug2: we sent a publickey packet, wait for \
reply<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'>debug1: \
Authentications that can continue: \
publickey,password,keyboard-interacti<o:p></o:p></p><p class=MsoNormal \
style='margin-left:.5in'>ve<o:p></o:p></p><p class=MsoNormal \
style='margin-left:.5in'>debug1: Offering DSA public key: \
/cygdrive/c/cyghome/.ssh/id_dsa<o:p></o:p></p><p \
class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Looks like the sshd server \
didn’t like my rsa key, but…. Where would it put an error message? \
<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p \
class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The other problem MAY be \
related, but I haven’t been able to find the trail yet. We were \
authenticating against Windows AD via KRB5files, now I get:<o:p></o:p></p><p \
class=MsoNormal>3004-619 Security method "KRB5Afiles" could not be \
loaded. It may be that the kerb problem is blocking my ssh \
logins.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Any \
ideas? <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p \
class=MsoNormal>Thanks<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p \
class=MsoNormal><o:p> </o:p></p></div></body></html>
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic