UNIX for Dummies Questions & Answers

Hi All,
I have followed the steps to set up the public and private keys for SFTP setup. Somehow the SFTP is not working and I get following errors:


==> sftp -v remote_user@remote_host_name_changed
OpenSSH_5.4p1, OpenSSL 0.9.8m 25 Feb 2010
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Failed dlopen: /usr/krb5/lib/libkrb5.a(libkrb5.a.so): Could not load module /usr/krb5/lib/b5.a(libkrb5.a.so).
System error: No such file or directory

debug1: Error loading Kerberos, disabling Kerberos auth.
debug1: Connecting to ftwaxdevd001 [170.49.18.117] port 22.
debug1: Connection established.
debug1: identity file /home/user/.ssh/id_rsa type -1
debug1: identity file /home/user/.ssh/id_rsa-cert type -1
debug1: identity file /home/user/.ssh/id_dsa type 2
debug1: identity file /home/user/.ssh/id_dsa-cert type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_5.2
debug1: match: OpenSSH_5.2 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_5.4
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-ctr hmac-md5 none
debug1: kex: client->server aes128-ctr hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'remote_host_name_changed' is known and matches the RSA host key.
debug1: Found key in /home/user/.ssh/known_hosts:1
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: /home/user/.ssh/id_rsa
debug1: Offering public key: /home/user/.ssh/id_dsa
debug1: Server accepts key: pkalg ssh-dss blen 433
debug1: read PEM private key done: type DSA
debug1: Authentication succeeded (publickey).
debug1: channel 0: new [client-session]
debug1: Requesting no-more-sessions@openssh.com
debug1: Entering interactive session.
debug1: Sending subsystem: sftp
debug1: client_input_channel_req: channel 0 rtype exit-status reply 0
debug1: client_input_channel_req: channel 0 rtype eow@openssh.com reply 0
debug1: channel 0: free: client-session, nchannels 1
debug1: fd 0 clearing O_NONBLOCK
Transferred: sent 2392, received 2304 bytes, in 2.8 seconds
Bytes per second: sent 854.2, received 822.7
debug1: Exit status 1
Connection closed


Initially I suspected that it might be following line:
debug1: Failed dlopen: /usr/krb5/lib/libkrb5.a(libkrb5.a.so): Could not load module /usr/krb5/lib/b5.a(libkrb5.a.so).

but SFTP works when we enter the password.

Any ideas???

sounds like the remote public key is not setup properly.

what are the permissions for $HOME/.ssh and $HOME/.ssh/authorized_keys. make sure the public key is one line.

1. on the remote box as the user you are connecting to:

Code:

# remote name = user remote home directory = /home/user
#
chmod 755 /home/user
chmod 700 /home/user/.ssh

On the remote server, permissions on home dir is 755 and $HOME/.ssh dir is 700.

---------- Post updated at 02:25 PM ---------- Previous update was at 09:56 AM ----------


Any ideas????

So what is the issue here?

When you do sftp <remotehost> it is asking for a password instead of logging you in with the keys? Is that the issue?

I am looking at the debug you posted, does not look like keys are the issues, and it looks it is logging you in with the keys, so i am not seeing any issue here, but maybe I don't understand it, pardon me if that is the case.

Code:

debug1: Server accepts key: pkalg ssh-dss blen 433
debug1: read PEM private key done: type DSA
debug1: Authentication succeeded (publickey).

The above looks like server accepted the public key so no issue here.

Code:

debug1: Entering interactive session.
debug1: Sending subsystem: sftp

This looks like you got into SFTP as well and were able to transfer data and then you closed the connection. I am not seeing any issue.

Code:

Transferred: sent 2392, received 2304 bytes, in 2.8 seconds
Bytes per second: sent 854.2, received 822.7
debug1: Exit status 1
Connection closed

It is not asking for any password.

Usually when I say SFTP USER@SERVER then I go into the SFTP prompt and from there I can get/put any file.

So SFTP prompt is not coming. Yes I also saw the bytes received and sent and then connection was closed.

I am trying to set up SFTP from SERVER_A to SERVER_B. Users on these servers are different.

So I have generated the pub/private keys for USER_A on SERVER_A. I then SFTP'ed the PUB file for USER_A on SERVER_B using password and copied this public file to authorized_keys file.

USER_B is the FTP Userid only.


========================
Please not that I have my userid on both the servers say USER_PERSONAL and I am able to set up SFTP without asking for password going from SERVER_A to SERVER_B.
========================

So looks like USER_A's login profile must be screwed up. What OS are you on? And what shell is userA using?