Login or Register to Ask a Question and Join Our Community


HP-UX

SSH Authentication issue.

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Operating Systems HP-UX SSH Authentication issue.
# 8  
Old 05-23-2014
Quote:
Originally Posted by chacko193
Thanks for the reply, but from that other issue that you posted, I got to know that this is a default behavior. But it does not says how to avoid using "none" authentication method.

I tried with the NoneAuthentication option and it says it is not supported.
Code:
command-line: line 0: Bad configuration option: NoneAuthentication
Connection closed

What is your operating system.and what is your ssh version ?
To your ssh version then add the some options like below if it is has its in specs.
Code:
AllowedAuthentications hostbased,publickey,password

Last edited by ygemici; 05-23-2014 at 10:34 AM..
# 9  
Old 05-26-2014
My client is HP-UX and the remote server is windows 2008 server and in that I am running the vShell.

What I am doing now is to open a sftp session form the HP-UX to vShell.

I need to make changes in HPUX only.

I tried setting this option, but to no effect:
Code:
# allow the use of the none cipher
NoneEnabled no

# 10  
Old 05-26-2014
Quote:
Originally Posted by chacko193
My client is HP-UX and the remote server is windows 2008 server and in that I am running the vShell.

What I am doing now is to open a sftp session form the HP-UX to vShell.

I need to make changes in HPUX only.

I tried setting this option, but to no effect:
Code:
# allow the use of the none cipher
NoneEnabled no

chacko193,

1 - (open)-ssh client asks the server for auth-methods as in the normal ssh-client-work as userauth-request
(because almost ssh clients wants to know which auth methods that the server supports) )
and cannot change this behaviour with add parameters as far as i m know for the open-ssh client
and therefore you must change the server config

if there is possibility of use the different ssh clients and then may you can this.
for exa i tested bitvise ssh client with selected "initial method" option to any (password,pubkey,gssapi,keyboard-interactive..)
and this is SuCcess so "ssh-connection method none [preauth]" is not logging any mode (debug[1-3],verbose or any others)
lastly this ssh client allow the authenticaton methods which we want to choose any methods...

And you will not see the message that is "rejected ....." in your server logs.
this is just a choise.I dont know its applicability.


******************************************************

2 - i wanted to test the vshell server but i cant download it.

below is the answer to me from vandyke and they give late response.
Code:
Hello Yucel,

Thank you for your interest in VShell(R).

We apologize for the inconvenience, unfortunately, U.S.
export regulations do not allow automated downloads to some
countries.

However, by providing some additional information, you can
still download and evaluate VShell.

.............

Sincerely,


Leslie Tyk
Orders Department
VanDyke Software, Inc.
505-332-5710
505-332-5701 (fax)
sales@vandyke.com
www.vandyke.com


3 - u can check the loglevel on the server-side.*(sshd_config -> vshelld_config)

a-) what is output ?
Code:
# findstr /I Log "vshelld_config"

a-1) lets try - We have to change this
Code:
LogTopicAuthentication xxxx

to
Code:
LogTopicAuthentication false

b-) what is output ?
Code:
# findstr /I Authentications "vshelld_config"

b-1) lets try - We have to change this
Code:
AuthenticationsAllowed xxxx

to
Code:
AuthenticationsAllowed publickey, password

and
*
Code:
AuthenticationsRequired xxxx

to
Code:
AuthenticationsRequired publickey, password

******************************************************

4 - and ask*(open the case) the vandyke.com.
or check the syslog.conf for eliminate the this messages.

******************************************************

5 - and is not related the ssl-ciphers.


regards
ygemici
This User Gave Thanks to ygemici For This Post:
chacko193
# 11  
Old 05-27-2014
Thanks Ygemici for you reply!!

I have already tried out not logging the "auth" events in vShell and that seems to work.

I got to thinking that since the client is initiating the ssh session, it will be the client that sends the "none" auth method request and from my other searches was able to confirm this as well. So I came to the conclusion that there will be some option within the ssh config files which prevents sending out the "none" auth request and hence my futile searches.

I will try out the rest of your suggestions and get back to when I have some results.

---------- Post updated at 11:30 PM ---------- Previous update was at 11:26 AM ----------

I tried changing the AuthenticationsAllowed and AuthenticationsRequired to "password" only in vShell, but still it is using the "none" authentication first and then only it is going for password.

---------- Post updated 05-27-14 at 04:42 AM ---------- Previous update was 05-26-14 at 11:30 PM ----------

I have one query. You said you were able to connect to server with any initial auth method using bitvise client. I also tried that and noticed the same,i.e , I am not getting that "none rejected" message.

So how is this bitvise client able to choose the initial auth method? If they are able to do it, why cannot we do the same. After all they too will be using the same open-ssh only(may be with some modifications). And I think it is the only one were none is listed as an auth method.

---------- Post updated at 07:42 AM ---------- Previous update was at 04:42 AM ----------

Quote:
Originally Posted by Perderabo
Look at your sshd_config file. Is PermitEmptyPasswords set to yes? If so, try turning it off.
It is set to no. Initially it was commented out. Tried with that parameter set to "no" and still the it is taking "none" as initial authentication method.
Last edited by chacko193; 05-27-2014 at 01:42 AM..
# 12  
Old 05-28-2014
Quote:
Originally Posted by chacko193
Thanks Ygemici for you reply!!

I have already tried out not logging the "auth" events in vShell and that seems to work.

I got to thinking that since the client is initiating the ssh session, it will be the client that sends the "none" auth method request and from my other searches was able to confirm this as well. So I came to the conclusion that there will be some option within the ssh config files which prevents sending out the "none" auth request and hence my futile searches.

I will try out the rest of your suggestions and get back to when I have some results.

---------- Post updated at 11:30 PM ---------- Previous update was at 11:26 AM ----------

I tried changing the AuthenticationsAllowed and AuthenticationsRequired to "password" only in vShell, but still it is using the "none" authentication first and then only it is going for password.

---------- Post updated 05-27-14 at 04:42 AM ---------- Previous update was 05-26-14 at 11:30 PM ----------

I have one query. You said you were able to connect to server with any initial auth method using bitvise client. I also tried that and noticed the same,i.e , I am not getting that "none rejected" message.

So how is this bitvise client able to choose the initial auth method? If they are able to do it, why cannot we do the same. After all they too will be using the same open-ssh only(may be with some modifications). And I think it is the only one were none is listed as an auth method.

---------- Post updated at 07:42 AM ---------- Previous update was at 04:42 AM ----------
it has differ codes in the bitvise ssh client ( executable) and it does not send to ssh-server with none-method as in its source code files for know the auth-methods.(written in that way)
and it does not use the openssh sources, it uses FlowSsh libraries and compiled from c++ platform for windows.
# 13  
Old 05-28-2014
Well I always knew that was not going to work. But worth a try.

Thanks for clearing it up
# 14  
Old 06-07-2014
Quote:
Originally Posted by chacko193
Well I always knew that was not going to work. But worth a try.

Thanks for clearing it up
Then u can go this way so ;

-> download the source code openssh 6.x.x tar.gz
(for exa openssh-6.4p1)

-> change the line is like below from the "sshconnect2.c"
Code:
int
userauth_none(Authctxt *authctxt)
{
        /* initial userauth request */
/* debug(" --> i am in userauth_none fonksiyonundayim" ); */
        packet_start(SSH2_MSG_USERAUTH_REQUEST);
        packet_put_cstring(authctxt->server_user);
        packet_put_cstring(authctxt->service);
  packet_put_cstring(authctxt->method->name);  -> packet_put_cstring("");
        packet_put_cstring("");
        packet_send();
        return 1;
}

-> compile it..
Code:
# cd openssh-6.4p1 && chmod +x ./configure ./mkinstalldirs && ./configure --with-md5-passwords --with-pam --with-ssl-dir=/YOUR_OPENSSL_PATH/ 
--with-zlib=/YOUR_ZLIB_DIRECTORY/ -with-libs --prefix=/usr/local/sshwithoutnone/ && make && make install

-> and the run
Code:
# /usr/local/sshwithoutnone/bin/ssh -l sshuser remotehost

Note : "--with-pam" options requires the pam-devel package.

regards
ygemici
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Ssh passwordless authentication

Hey team I have to enable password less authentication betweeen A to B server and A to C server and A to D server. For this I generated a ssh key on server A using ssh-keygen command and copied the key using ssh-copy-id command to B, C and D server. Everything is working fine as of now but... (5 Replies)
Discussion started by: Sandeep_sandy
5 Replies

2. UNIX for Advanced & Expert Users

Is SSH Key Authentication Disabled?

I setup passwordless authentication on a Ubuntu vm by ssh'ing into the localhost. I'm trying to do the same thing on another machine but it's not working. I believe I have the permissions setup properly and keygen'd. Is there a way to disable passwordless authentication? I have permission to... (4 Replies)
Discussion started by: MaindotC
4 Replies

3. UNIX for Dummies Questions & Answers

SSH Keys Authentication keeps asking for password

Hi! Im trying to set access from ServerA(SunOS) to ServerB(Some custom Linux with Keyboard Interactive login) with SSH Keys. As a proof of concept I was able to do it between 2 virtual machines. Now in my real life scenario it isnt working. I created the keys in ServerA, copied them to... (7 Replies)
Discussion started by: RedSpyder
7 Replies

4. Solaris

Solaris 8 ssh public key authentication issue - Server refused our key

Hi, I've used the following way to set ssh public key authentication and it is working fine on Solaris 10, RedHat Linux and SuSE Linux servers without any problem. But I got error 'Server refused our key' on Solaris 8 system. Solaris 8 uses SSH2 too. Why? Please help. Thanks. ... (1 Reply)
Discussion started by: aixlover
1 Replies

5. Shell Programming and Scripting

ssh into another machine without authentication

If another machine has the same account how to ssh into that machine as the same user without re-typing password? Thanks (2 Replies)
Discussion started by: stevensw
2 Replies

6. Red Hat

SSH Public key Authentication Issue

Hi All; I have an issue with password less authentication via ssh ( v2) I have two servers Server A and Server B, following are the server details Server A OS - HP UX B.11.11 U 9000/800 SSH - OpenSSH_4.3p2-hpn, OpenSSL 0.9.7i 14 Oct 2005 HP-UX Secure Shell-A.04.30.000, HP-UX... (3 Replies)
Discussion started by: maverick_here
3 Replies

7. AIX

Passwordless authentication via SSH

I am trying to implement passwordless authentication via ssh2. I have used the well documented technique of generating a key pair with a blank passphrase on my client machine, and installing the public key on the destination server (AIX 5.3) in the user's .ssh2 directory. I have used this technique... (1 Reply)
Discussion started by: RegX
1 Replies

8. UNIX for Advanced & Expert Users

ssh RSA authentication failure

I am using an ssh pub key on two remote servers to allow ssh session without authentication. Both servers have the same id_rsa.pub copied from the host into the remote servers ~user/.ssh/authorized_keys. There is no passphrase for this key either. The problem is that I am able to ssh into one... (2 Replies)
Discussion started by: prkfriryce
2 Replies

9. UNIX for Advanced & Expert Users

passphrase and ssh authentication

In which case could be better don't use a passphrase creating an authentication key for ssh comunications? Thanks in advance. (1 Reply)
Discussion started by: Minguccio75
1 Replies

10. UNIX for Dummies Questions & Answers

SSH key authentication

Hi all, I have got a Solaris machine and I have several user account setup up with the .ssh and authorized_keys file in their home directories. I have check all the permission and ownership and they are all indentical and belongs to the user ID and group respectively. However one of the... (3 Replies)
Discussion started by: stancwong
3 Replies
Login or Register to Ask a Question