I've been trying to setup my SunBlade as an SSH server. I configured the sshd_config file, but I cannot get the keys to exchange properly. I generate a key pair in Putty on my laptop (the host, running Win2K), exported the Private key as OpenSSH and then copied the public key to the a file I created named authorized_keys, in the /.ssh directory of the server (the SunBlade). Oh, I'm running Solaris9 too. So then I load the private key in Putty and connect, but I just get the following output in my Putty log file:


Event Log: Host key fingerprint is:
Event Log: ssh-rsa 1024
--output admitted for security by me--
Outgoing packet type 21 / 0x15 (SSH2_MSG_NEWKEYS)
Incoming packet type 21 / 0x15 (SSH2_MSG_NEWKEYS)
Event Log: Initialised triple-DES client->server encryption
Event Log: Initialised triple-DES server->client encryption
Outgoing packet type 5 / 0x05 (SSH2_MSG_SERVICE_REQUEST)
00000000 00 00 00 0c 73 73 68 2d 75 73 65 72 61 75 74 68 ....ssh-userauth
Incoming packet type 6 / 0x06 (SSH2_MSG_SERVICE_ACCEPT)
00000000 00 00 00 0c 73 73 68 2d 75 73 65 72 61 75 74 68 ....ssh-userauth
Outgoing packet type 50 / 0x32 (SSH2_MSG_USERAUTH_REQUEST)
00000000 00 00 00 07 61 61 72 6d 6f 75 72 00 00 00 0e 73 ....aarmour....s
00000010 73 68 2d 63 6f 6e 6e 65 63 74 69 6f 6e 00 00 00 sh-connection...
00000020 04 6e 6f 6e 65 .none
Event Log: Reading private key file "D:\Documents and Settings\aarmour\Desktop\solarisPrivateKey.ppk"
Incoming packet type 51 / 0x33 (SSH2_MSG_USERAUTH_FAILURE)
00000000 00 00 00 09 70 75 62 6c 69 63 6b 65 79 00 ....publickey.
Event Log: Pageant is running. Requesting keys.
Event Log: Pageant has 1 SSH2 keys
Event Log: Trying Pageant key #0
Event Log: This key matches configured key file
Outgoing packet type 50 / 0x32 (SSH2_MSG_USERAUTH_REQUEST)
00000000 00 00 00 07 61 61 72 6d 6f 75 72 00 00 00 0e 73 ....aarmour....s
00000010 73 68 2d 63 6f 6e 6e 65 63 74 69 6f 6e 00 00 00 sh-connection...
00000020 09 70 75 62 6c 69 63 6b 65 79 00 00 00 00 07 73 .publickey.....s
00000030 73 68 2d 72 73 61 00 00 00 95 00 00 00 07 73 73 sh-rsa........ss
00000040 68 2d 72 73 61 00 00 00 01 23 00 00 00 81 00 a2 h-rsa....#......
00000050 7a 9a 1f f1 ee 21 12 0d 8e 07 87 28 e5 56 ad 97 z....!.....(.V..
00000060 96 bc 92 95 6c 9f eb 3e ec 9f 42 8e 7b 0f 80 18 ....l..>..B.{...
00000070 2f d4 c8 b6 19 b9 b1 c6 41 bf a8 7f d6 12 06 d7 /.......A.......
00000080 8b 40 4a f9 5b 14 d8 aa 5b 6a 5b 73 12 2b 14 c9 .@J.[...[j[s.+..
00000090 d7 bd e0 98 91 ae f2 d0 00 3e d2 d8 02 df 6d 04 .........>....m.
000000a0 53 91 ae 9b c8 be 2b e3 c0 99 4b e9 e4 37 ea 8a S.....+...K..7..
000000b0 54 fb 7d ca cf c0 dd d7 e8 2b aa d0 bf 27 6b 8c T.}......+...'k.
000000c0 ae a8 66 f9 44 0c 0c d9 60 af fb b4 64 c1 6f ..f.D...`...d.o
Incoming packet type 51 / 0x33 (SSH2_MSG_USERAUTH_FAILURE)
00000000 00 00 00 09 70 75 62 6c 69 63 6b 65 79 00 ....publickey.
Event Log: Key refused
Event Log: No supported authentications offered. Disconnecting
Outgoing packet type 1 / 0x01 (SSH2_MSG_DISCONNECT)
00000000 00 00 00 0b 00 00 00 2d 4e 6f 20 73 75 70 70 6f .......-No suppo
00000010 72 74 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 rted authenticat
00000020 69 6f 6e 20 6d 65 74 68 6f 64 73 20 61 76 61 69 ion methods avai
00000030 6c 61 62 6c 65 00 00 00 02 65 6e lable....en



The problem part I can't get past is:

Event Log: Key refused
Event Log: No supported authentications offered. Disconnecting

It's in the above output towards the end. I'm not sure if I am missing files in certain directories or what. I can connect if I leave on the password enabled feature of the server, but it won't exchange key files, so it's basically a telnet session. Any suggestions on how to make this work?--AJ

well using a password instead of relying on the public and private key transfer is still secure and over an encrypted channel....so its not like a telnet session.

when connecting are you sure your using the right cipher? im pretty sure that they have to be listed in the config in the same order as the clients config.

Are you talking about the keys being exchanged? I think what you are saying is that my server has to have generated a key pair and so does my client and then both have to know about the other's public keys in order to start a key exchange session. Am I correct?--thanks--AJ

i dont know the putty equivalent, but if you were to look in /etc/ssh/ssh_config and /etc/ssh/sshd_config (or similar)

there will be a list of ciphers for you to use, i think but am not sure, that they have to be in the same order.