Re: SSH: Permission denied (publickey, password, keyboard-interactive)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Andy

I just had the same problem, and solved it changing the permisssions
following your suggestion.

Speaking with our security group, they explained me that like ssh
works with root group privileges, it needs that the rw flag for the
group be enabled. If you ls -l /dev/tty*, you can see that...

1.- Any non-active terminal is owned by root:root
2.- Any active terminal is owned by the associated user and by the tty
group, ans has an 620 permissions. These settings are assigned
dinamically.

They told me telefonically that in a first look, like the owner and
permissions of an active terminal are changed dinamically, there are
not security problems for an active tty (nobody can read the tty
traffic), but in any case they will study the case and answer me.

They suggested me to set the permissions for /dev/tty* to 660. Now my
ssh is working.

Best regards,
   Pedro

On Mon, 14 Feb 2005 21:37:52 -0500, Andrew Alsup <andy@xxxxxxxxxxxxxxxx> wrote:
> It appears that my Fedora box had mode 644 set on /dev/tty*.  I found this
> out by executing the following:
> 
> ssh andy@debian    -- didn't work.
> sudo ssh andy@debian     -- works!
> 
> After chmod a+rw /dev/tty* everything is working as expected.  Is it pretty
> safe to have all the tty devices RW for all?
> 
> Thanks for the help,
> Andy
> 
> "Chadley Wilson" <chadley@xxxxxxxxxxxx> wrote in message
> news:200502142020.12375.chadley@xxxxxxxxxxxxxxx
> > On Monday 14 February 2005 17:09, Andrew Alsup wrote:
> > > I'm trying to SSH from one Linux server to another.  I can ssh from
> A->B,
> > > but not from B->A.  I can successfully SSH to both servers from my
> > > workstation (using password authentication).
> > >
> > > Server A: Debian Sarge (testing)
> > > Server B: Fedora Core 1
> > >
> > > Since I can successfully SSH to both servers (from my workstation),
> > > something must be dorked with Server B's /etc/ssh_config file (I think).
> > > On both servers, I have no customizations entered in the ssh_config
> file.
> > > See below:
> > >
> > > debian:>ssh -v
> > > OpenSSH_3.8.1p1 Debian-8.sarge.4, OpenSSL 0.9.7e 25 Oct 2004
> > > debian:>cat /etc/ssh/ssh_config
> > > # all settings are default (nothing changed)
> > > debian:>ssh user@serverB
> > > User's Password for Server Fedora: xxx
> > > *** Welcome to Server Fedora ***
> > > fedora:>exit
> > > debian:>
> > >
> > > fedora:>ssh -v
> > > OpenSSH_3.6.1p2, SSH protocols 1.5/2.0, OpenSSL 0x0090701f
> > > fedora:>cat /etc/ssh/ssh_config
> > > # all settings are default (nothing changed)
> > > fedora:>ssh user@serverA
> > > Permission denied, please try again.
> > > Permission denied, please try again.
> > > Permission denied (publickey,password,keyboard-interactive).
> > > fedora:>
> > >
> > > It didn't even prompt me for the password!  Any suggestions?
> > >
> > > Thanks,
> > > Andy
> >
> > Two things :
> > check the ~/.ssh/known_hosts for an existing entry for the conflicting box
> > and check that your firewall settings allow connections on port 22
> > Get back to me if your still stuck I often get errors with ssh and have to
> > resolve them
> >
> >
> >
> > --
> > --
> > Chadley Wilson
> > Redhat Certified Technician
> > Cert Number: 603004708291270
> > Pinnacle Micro
> > Manufacturers of Proline Computers
> > Proudly South African
> > ISO9001:2000 Certified Production Line
> > =======================================
> > LINUX - becuase I can do it my way.
> > ========================================
> >
> > --
> > fedora-list mailing list
> > fedora-list@xxxxxxxxxx
> > To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
> >
> 
> --
> fedora-list mailing list
> fedora-list@xxxxxxxxxx
> To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
>


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux