<div>I'm not sure what you're suggesting that but it didn't work. Could you explain?<br></div><div><br></div><div>Anyway, I've enclosed the verbose output if anyone is interested.</div><div><br></div><div>$ ssh -vvv -p 22000 remote_user@SomeIpAddress<br>
OpenSSH_5.1p1 Debian-6ubuntu2, OpenSSL 0.9.8g 19 Oct 2007<br>debug1: Reading configuration data /home/ants/.ssh/config<br>debug1: Reading configuration data /etc/ssh/ssh_config<br>debug1: Applying options for *<br>debug2: ssh_connect: needpriv 0<br>
debug1: Connecting to SomeIpAddress [SomeIpAddress] port 22000.<br>debug1: Connection established.<br>debug1: identity file /home/ants/.ssh/identity type -1<br>debug3: Not a RSA1 key file /home/ants/.ssh/id_rsa.<br>debug2: key_type_from_name: unknown key type '-----BEGIN'<br>
debug3: key_read: missing keytype<br>debug2: key_type_from_name: unknown key type 'Proc-Type:'<br>debug3: key_read: missing keytype<br>debug2: key_type_from_name: unknown key type 'DEK-Info:'<br>debug3: key_read: missing keytype<br>
debug3: key_read: missing whitespace<br></div><div>....<br></div><div>debug2: key_type_from_name: unknown key type '-----END'<br>debug3: key_read: missing keytype<br>debug1: identity file /home/ants/.ssh/id_rsa type 1<br>
debug1: Checking blacklist file /usr/share/ssh/blacklist.RSA-2048<br>debug1: Checking blacklist file /etc/ssh/blacklist.RSA-2048<br>debug1: identity file /home/ants/.ssh/id_dsa type -1<br>debug1: Remote protocol version 2.0, remote software version OpenSSH_5.1p1 Debian-6ubuntu2<br>
debug1: match: OpenSSH_5.1p1 Debian-6ubuntu2 pat OpenSSH*<br>debug1: Enabling compatibility mode for protocol 2.0<br>debug1: Local version string SSH-2.0-OpenSSH_5.1p1 Debian-6ubuntu2<br>debug2: fd 3 setting O_NONBLOCK<br>
debug1: SSH2_MSG_KEXINIT sent<br>debug1: SSH2_MSG_KEXINIT received<br>debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1<br>
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss<br>debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes192-cbc,aes256-cbc,<a href="mailto:rijndael-cbc@lysator.liu.se">rijndael-cbc@lysator.liu.se</a>,aes128-ctr,aes192-ctr,aes256-ctr<br>
debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes192-cbc,aes256-cbc,<a href="mailto:rijndael-cbc@lysator.liu.se">rijndael-cbc@lysator.liu.se</a>,aes128-ctr,aes192-ctr,aes256-ctr<br>
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,<a href="mailto:umac-64@openssh.com">umac-64@openssh.com</a>,hmac-ripemd160,<a href="mailto:hmac-ripemd160@openssh.com">hmac-ripemd160@openssh.com</a>,hmac-sha1-96,hmac-md5-96<br>
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,<a href="mailto:umac-64@openssh.com">umac-64@openssh.com</a>,hmac-ripemd160,<a href="mailto:hmac-ripemd160@openssh.com">hmac-ripemd160@openssh.com</a>,hmac-sha1-96,hmac-md5-96<br>
debug2: kex_parse_kexinit: none,<a href="mailto:zlib@openssh.com">zlib@openssh.com</a>,zlib<br>debug2: kex_parse_kexinit: none,<a href="mailto:zlib@openssh.com">zlib@openssh.com</a>,zlib<br>debug2: kex_parse_kexinit:<br>debug2: kex_parse_kexinit:<br>
debug2: kex_parse_kexinit: first_kex_follows 0<br>debug2: kex_parse_kexinit: reserved 0<br>debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1<br>
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss<br>debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes192-cbc,aes256-cbc,<a href="mailto:rijndael-cbc@lysator.liu.se">rijndael-cbc@lysator.liu.se</a>,aes128-ctr,aes192-ctr,aes256-ctr<br>
debug2: kex_parse_kexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes192-cbc,aes256-cbc,<a href="mailto:rijndael-cbc@lysator.liu.se">rijndael-cbc@lysator.liu.se</a>,aes128-ctr,aes192-ctr,aes256-ctr<br>
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,<a href="mailto:umac-64@openssh.com">umac-64@openssh.com</a>,hmac-ripemd160,<a href="mailto:hmac-ripemd160@openssh.com">hmac-ripemd160@openssh.com</a>,hmac-sha1-96,hmac-md5-96<br>
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,<a href="mailto:umac-64@openssh.com">umac-64@openssh.com</a>,hmac-ripemd160,<a href="mailto:hmac-ripemd160@openssh.com">hmac-ripemd160@openssh.com</a>,hmac-sha1-96,hmac-md5-96<br>
</div><div>debug2: kex_parse_kexinit: none,<a href="mailto:zlib@openssh.com">zlib@openssh.com</a><br>debug2: kex_parse_kexinit: none,<a href="mailto:zlib@openssh.com">zlib@openssh.com</a><br>debug2: kex_parse_kexinit:<br>
debug2: kex_parse_kexinit:<br>debug2: kex_parse_kexinit: first_kex_follows 0<br>debug2: kex_parse_kexinit: reserved 0<br>debug2: mac_setup: found hmac-md5<br>debug1: kex: server->client aes128-cbc hmac-md5 none<br>debug2: mac_setup: found hmac-md5<br>
debug1: kex: client->server aes128-cbc hmac-md5 none<br>debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent<br>debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP<br>debug2: dh_gen_key: priv key bits set: 126/256<br>
debug2: bits set: 512/1024<br>debug1: SSH2_MSG_KEX_DH_GEX_INIT sent<br>debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY<br>debug3: put_host_port: [SomeIpAddress]:22000<br>debug3: put_host_port: [SomeIpAddress]:22000<br>debug3: check_host_in_hostfile: filename /home/ants/.ssh/known_hosts<br>
debug3: check_host_in_hostfile: match line 12<br>debug3: check_host_in_hostfile: filename /home/ants/.ssh/known_hosts<br>debug3: check_host_in_hostfile: match line 12<br>debug1: Host '[SomeIpAddress]:22000' is known and matches the RSA host key.<br>
debug1: Found key in /home/ants/.ssh/known_hosts:12<br>debug2: bits set: 513/1024<br>debug1: ssh_rsa_verify: signature correct<br>debug2: kex_derive_keys<br>debug2: set_newkeys: mode 1<br>debug1: SSH2_MSG_NEWKEYS sent<br>
debug1: expecting SSH2_MSG_NEWKEYS<br>debug2: set_newkeys: mode 0<br>debug1: SSH2_MSG_NEWKEYS received<br>debug1: SSH2_MSG_SERVICE_REQUEST sent<br>debug2: service_accept: ssh-userauth<br>debug1: SSH2_MSG_SERVICE_ACCEPT received<br>
debug2: key: /home/ants/.ssh/id_rsa (0x1713a70)<br>debug2: key: /home/ants/.ssh/identity ((nil))<br>debug2: key: /home/ants/.ssh/id_dsa ((nil))<br>debug1: Authentications that can continue: publickey<br>debug3: start over, passed a different list publickey<br>
</div><div>debug3: preferred gssapi-keyex,gssapi-with-mic,gssapi,publickey,keyboard-interactive,password<br>debug3: authmethod_lookup publickey<br>debug3: remaining preferred: keyboard-interactive,password<br>debug3: authmethod_is_enabled publickey<br>
debug1: Next authentication method: publickey<br>debug1: Offering public key: /home/ants/.ssh/id_rsa<br>debug3: send_pubkey_test<br>debug2: we sent a publickey packet, wait for reply<br>debug1: Authentications that can continue: publickey<br>
debug1: Trying private key: /home/ants/.ssh/identity<br>debug3: no such identity: /home/ants/.ssh/identity<br>debug1: Trying private key: /home/ants/.ssh/id_dsa<br>debug3: no such identity: /home/ants/.ssh/id_dsa<br>debug2: we did not send a packet, disable method<br>
debug1: No more authentication methods to try.<br>Permission denied (publickey).<br></div><div><br></div><div class="gmail_quote">2010/1/13 born <span dir="ltr"><<a href="mailto:linuxbqj@gmail.com">linuxbqj@gmail.com</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">try rename this file<br>mv /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt.bak<br><br>and have a try<br>
<div><br>
</div>
<div><br><br></div><br><br><div class="gmail_quote">2010/1/13 Anthony Gardner <span dir="ltr"><<a href="mailto:antsmailinglist@gmail.com" target="_blank">antsmailinglist@gmail.com</a>></span><br><blockquote class="gmail_quote" style="border-left:1px solid rgb(204, 204, 204);margin:0pt 0pt 0pt 0.8ex;padding-left:1ex">
<div><div class="h5">
<div>I received the following while trying to SSH onto a machine I haven't accessed for a while.</div><div><br></div><div>the key on the remote machine is good and a friend is able to connect using Putty.</div><div><br>
</div><div>Both the remote machine and mine are 9.10 and have the latest updates.</div><div><br></div><div>Does anyone have a clue? I have googled and this is the only real info I've found (<a href="http://ubuntuforums.org/showthread.php?t=1323517" target="_blank">http://ubuntuforums.org/showthread.php?t=1323517</a>) He talks about libpam-unix2 being the culprit but as far as I can investigate, I don't have that package installed. I can't check the remote machine to see if it has it installed.</div>
<div><br clear="all">Jan 11 23:01:35 ants gnome-keyring-daemon[1542]: unsupported key algorithm in certificate: 1.2.840.10045.2.1<br>Jan 11 23:01:35 ants gnome-keyring-daemon[1542]: invalid subject public-key info<br>Jan 11 23:01:35 ants gnome-keyring-daemon[1542]: couldn't parse certificate key data<br>
Jan 11 23:01:35 ants gnome-keyring-daemon[1542]: couldn't parse certificate(s): /etc/ssl/certs/COMODO_ECC_Certification_Authority.pem<br>Jan 11 23:01:35 ants gnome-keyring-daemon[1542]: couldn't parse certificate data<br>
Jan 11 23:01:35 ants gnome-keyring-daemon[1542]: couldn't parse certificate(s): /etc/ssl/certs/COMODO_ECC_Certification_Authority.pem<br>Jan 11 23:01:36 ants gnome-keyring-daemon[1542]: unsupported key algorithm in certificate: 1.2.840.10045.2.1<br>
Jan 11 23:01:36 ants gnome-keyring-daemon[1542]: invalid subject public-key info<br>Jan 11 23:01:36 ants gnome-keyring-daemon[1542]: couldn't parse certificate key data<br>Jan 11 23:01:36 ants gnome-keyring-daemon[1542]: couldn't parse certificate(s): /etc/ssl/certs/ca-certificates.crt<br>
</div><div><br></div><div>CIA</div><div><br></div><div>-Ants</div><br><font color="#888888">-- <br>100% naturally selected. 0% designed.<br>
</font><br></div></div>--<br>
ubuntu-users mailing list<br>
<a href="mailto:ubuntu-users@lists.ubuntu.com" target="_blank">ubuntu-users@lists.ubuntu.com</a><br>
Modify settings or unsubscribe at: <a href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-users" target="_blank">https://lists.ubuntu.com/mailman/listinfo/ubuntu-users</a><br>
<br></blockquote></div><br>
<br>--<br>
ubuntu-users mailing list<br>
<a href="mailto:ubuntu-users@lists.ubuntu.com">ubuntu-users@lists.ubuntu.com</a><br>
Modify settings or unsubscribe at: <a href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-users" target="_blank">https://lists.ubuntu.com/mailman/listinfo/ubuntu-users</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br>100% naturally selected. 0% designed.<br>