LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Tags used in this thread
Popular LQ Tags , , , ,

Reply
 
Thread Tools
Old 09-18-2009, 02:59 PM   #1
vielmaj
LQ Newbie
 
Registered: Jun 2009
Posts: 6
Blog Entries: 1
Thanked: 0
ssh secure file transfer fails


[Log in to get rid of this advertisement]
I run the server in the physics department at Oregon State University and some of the users want to transfer there files using a windows program called "SSH Secure Shell". I get the following messages in auth.log

Sep 18 10:29:18 wngr497-pc08 sshd[12206]: Accepted password for vpodolsk from 128.193.96.98 port 3901 ssh2
Sep 18 10:29:18 wngr497-pc08 sshd[12206]: pam_unix(sshd:session): session opened for user vpodolsk by (uid=0)
Sep 18 10:29:18 wngr497-pc08 sshd[12220]: subsystem request for sftp
Sep 18 10:29:21 wngr497-pc08 sshd[12206]: pam_unix(sshd:session): session closed for user vpodolsk

But this person is not able to log in. It works for me and I get the following message in auth.log

Sep 15 08:24:53 wngr497-pc08 sshd[8224]: Accepted publickey for vielmaj from 128.193.96.44 port 51379 ssh2
Sep 15 08:24:53 wngr497-pc08 sshd[8224]: pam_unix(sshd:session): session opened for user vielmaj by (uid=0)

We are running Ubuntu now, but we used to run Suse, so all the old RSA pub keys no longer work. Does this look like the problem?

Jason
linuxubuntu vielmaj is offline  
Tag This Post , , , ,
Reply With Quote
Old 09-18-2009, 09:08 PM   #2
jhwilliams
Member
 
Registered: Apr 2007
Location: Portland, Oregon
Distribution: Mostly Debian or some (exceptionally popular?) derivative thereof.
Posts: 615
Thanked: 47
Hey Jason,

It looks like you're logging in without a password via a copy of your id_dsa.pub key in the server's authorized_keys2 file, yea? The user is trying to login with a username/password and so is triggering a different authentication path.

Instead of going to the trouble of debugging that, I would:

(1) reinstall openssh-server
(2) regenerate public keys unless you have some good motivation not to do so (they are signed by some company who charges you cash is one such reason I suppose.)

In /etc/ssh/sshd_config, Set the LogLevel to something higher so you can gather more information about what's going on. From sshd_config(5):

Quote:
LogLevel
Gives the verbosity level that is used when logging messages from sshd(8). The possible values are: SILENT, QUIET, FATAL, ERROR, INFO, VERBOSE, DEBUG, DEBUG1,
DEBUG2, and DEBUG3. The default is INFO. DEBUG and DEBUG1 are equivalent. DEBUG2 and DEBUG3 each specify higher levels of debugging output. Logging with a DEBUG
level violates the privacy of users and is not recommended.
linuxdebian jhwilliams is offline     Reply With Quote
Old 09-19-2009, 12:30 AM   #3
Smartpatrol
Member
 
Registered: Sep 2009
Location: Northern Colorado
Distribution: Centos,RHEL,Ubuntu, Debian
Posts: 107
Thanked: 9
from another linux/unix machine try sftp -vv and it will give you detailed output on what its doing and authentication methods its using. Also double check permissions for each users .ssh directory.
windows_vista Smartpatrol is offline     Reply With Quote
Thanked by:

Reply

Bookmarks


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
SSH Secure File Transfer Client in rbash lth0721 Linux - Software 2 03-05-2009 05:09 AM
Secure file transfer through SSH session Simsam Hijjawi Linux - Security 2 11-21-2007 01:36 AM
Secure file transfer server - tools ? taphagreg Linux - Security 1 03-19-2007 11:52 PM
Building a Secure File Transfer Gateway - thoughts please taphagreg Linux - Server 2 03-15-2007 02:43 PM
LXer: University of Michigan Selects SSH Tectia for Secure System Administration and Secure File Transfers LXer Syndicated Linux News 0 04-25-2006 01:54 AM


All times are GMT -5. The time now is 09:13 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
RSS2  LQ Podcast
RSS2  LQ Radio
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: @linuxquestions
Open Source Consulting | Domain Registration