The time now is Sun 26 May 2013, 03:25
All times are UTC - 4 |
| Author |
Message |
snayak
Joined: 14 Sep 2011 Posts: 191
|
Posted: Mon 06 Feb 2012, 09:14 Post subject:
How to start sshd in Wary 5.2.2? |
|
Hi,
I installed opessh from wary 5.2.2 package manager.
I tried to start /usr/bin/sshd.
It gave error "host keys not available."
I generated keys for rsa1, rsa and dsa using ssh-keygen.
Changed /etc/ssh/sshd_config to allow "Protocol 2,1"
When I executed /usr/bin/sshd, it is running.
But when I try to connect to puppy machine from putty on windows, it says "server unexpectedly closed connection" and doesn't allow me to login.
Please help.
Srinivas Nayak
_________________ Machine: Wary 530, AMD Athlon 2000+, ASUS A7N266-VM board, 512MB DDR RAM, 40GB HDD, 52xCDRW, PS/2 Mouse/Keyboard, USB 2.0.
Home: http://www.mathmeth.com/sn/
Blog: http://srinivas-nayak.blogspot.com/
|
|
Back to top
|
|
 |
emil
Joined: 10 Nov 2009 Posts: 547 Location: Austria
|
Posted: Mon 06 Feb 2012, 15:46 Post subject:
|
|
Can you post your sshd_config file? - this could give a clue.
You can also ssh from puppy to puppy (usefull for testing) - what happens if you do in puppy console:
|
|
Back to top
|
|
 |
snayak
Joined: 14 Sep 2011 Posts: 191
|
Posted: Tue 07 Feb 2012, 01:39 Post subject:
|
|
Hi,
| Quote: | | ssh root@localhost |
gives
| Quote: | # ssh root@localhost
The authenticity of host 'localhost (127.0.0.1)' can't be established.
RSA key fingerprint is 75:9e:be:f5:dc:6d:e1:bd:76:04:e6:24:be:6f:dd:12.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'localhost' (RSA) to the list of known hosts.
root@localhost's password:
# pwd
/root
# |
So works fine. asks for login password, accepts password "woofwoof". and comes to # prompt.
However from other machine's putty, I am not able to login.
my sshd_config is:
| Quote: | # cat /etc/ssh/sshd_config
# $OpenBSD: sshd_config,v 1.82 2010/09/06 17:10:19 naddy Exp $
# This is the sshd server system-wide configuration file. See
# sshd_config(5) for more information.
# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin
# The strategy used for options in the default sshd_config shipped with
# OpenSSH is to specify options with their default value where
# possible, but leave them commented. Uncommented options change a
# default value.
Port 22
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::
# The default requires explicit activation of protocol 1
Protocol 2,1
# HostKey for protocol version 1
#HostKey /etc/ssh/ssh_host_key
# HostKeys for protocol version 2
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key
#HostKey /etc/ssh/ssh_host_ecdsa_key
# Lifetime and size of ephemeral version 1 server key
#KeyRegenerationInterval 1h
#ServerKeyBits 1024
# Logging
# obsoletes QuietMode and FascistLogging
#SyslogFacility AUTH
#LogLevel INFO
# Authentication:
LoginGraceTime 2m
PermitRootLogin yes
StrictModes yes
#MaxAuthTries 6
#MaxSessions 10
RSAAuthentication yes
PubkeyAuthentication yes
#AuthorizedKeysFile .ssh/authorized_keys
# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
#RhostsRSAAuthentication no
# similar for protocol version 2
#HostbasedAuthentication no
# Change to yes if you don't trust ~/.ssh/known_hosts for
# RhostsRSAAuthentication and HostbasedAuthentication
#IgnoreUserKnownHosts no
# Don't read the user's ~/.rhosts and ~/.shosts files
#IgnoreRhosts yes
# To disable tunneled clear text passwords, change to no here!
#PasswordAuthentication yes
#PermitEmptyPasswords no
# Change to no to disable s/key passwords
#ChallengeResponseAuthentication yes
# Kerberos options
#KerberosAuthentication no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
#KerberosGetAFSToken no
# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes
# Set this to 'yes' to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will
# be allowed through the ChallengeResponseAuthentication and
# PasswordAuthentication. Depending on your PAM configuration,
# PAM authentication via ChallengeResponseAuthentication may bypass
# the setting of "PermitRootLogin without-password".
# If you just want the PAM account and session checks to run without
# PAM authentication, then enable this but set PasswordAuthentication
# and ChallengeResponseAuthentication to 'no'.
#UsePAM no
#AllowAgentForwarding yes
#AllowTcpForwarding yes
#GatewayPorts no
X11Forwarding yes
#X11DisplayOffset 10
#X11UseLocalhost yes
#PrintMotd yes
#PrintLastLog yes
#TCPKeepAlive yes
#UseLogin no
UsePrivilegeSeparation yes
#PermitUserEnvironment no
#Compression delayed
#ClientAliveInterval 0
#ClientAliveCountMax 3
#UseDNS yes
#PidFile /var/run/sshd.pid
#MaxStartups 10
#PermitTunnel no
#ChrootDirectory none
# no default banner path
#Banner none
# override default of no subsystems
Subsystem sftp /usr/libexec/sftp-server
# Example of overriding settings on a per-user basis
#Match User anoncvs
# X11Forwarding no
# AllowTcpForwarding no
# ForceCommand cvs server
#
|
_________________ Machine: Wary 530, AMD Athlon 2000+, ASUS A7N266-VM board, 512MB DDR RAM, 40GB HDD, 52xCDRW, PS/2 Mouse/Keyboard, USB 2.0.
Home: http://www.mathmeth.com/sn/
Blog: http://srinivas-nayak.blogspot.com/
|
|
Back to top
|
|
 |
emil
Joined: 10 Nov 2009 Posts: 547 Location: Austria
|
Posted: Wed 08 Feb 2012, 02:58 Post subject:
|
|
Hm. nothing obvious. Maybe disable "Strict Mode"
and add
| Code: | | PasswordAuthentication yes |
check also your /etc/host.deny file.
if there is ALL:ALL then remove it - that blocks all connections ...
anybody else?
|
|
Back to top
|
|
 |
snayak
Joined: 14 Sep 2011 Posts: 191
|
Posted: Thu 09 Feb 2012, 00:24 Post subject:
|
|
Dear emil,
Many thanks for help.
| Quote: | check also your /etc/host.deny file.
if there is ALL:ALL then remove it - that blocks all connections ... |
my sshd worked with adding "sshd : ALL : allow" in host.allow file.
Sincerely,
Srinivas Nayak
_________________ Machine: Wary 530, AMD Athlon 2000+, ASUS A7N266-VM board, 512MB DDR RAM, 40GB HDD, 52xCDRW, PS/2 Mouse/Keyboard, USB 2.0.
Home: http://www.mathmeth.com/sn/
Blog: http://srinivas-nayak.blogspot.com/
|
|
Back to top
|
|
 |
|
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
|
Powered by phpBB © 2001, 2005 phpBB Group
|