login about faq

I am trying to setup public key authentication between a windows server (tectia client Version 6.4) and a Linux server (tectia server - Version 5.3)

The set up fails for the public key authentication. I set the debugger level to 9 and captured the below log. Can someone please explain whats the issue with the setup?

11/06/2013 11:17:13:486 SecShPluginEnv/secsh_plugin_env.c:622: Starting app call in thread ba8.
11/06/2013 11:17:13:502 BrokerConnection/broker_connection.c:1816: Got broker connection data from SecSh connection 77f508.
11/06/2013 11:17:13:502 SecShPluginEnv/secsh_plugin_env.c:624: Ending app call.
11/06/2013 11:17:13:502 SecShKeyStore/secsh_keystore.c:5498: key_id=0, key_prov=778340[0], client=5, parent=-1
11/06/2013 11:17:13:502 SecShKeyStore/secsh_keystore.c:5498: key_id=0, key_prov=21cfac0[0], client=5, parent=-1
11/06/2013 11:17:13:502 SecShKeyStore/secsh_keystore.c:5498: key_id=1, key_prov=21cfac0[0], client=5, parent=-1
11/06/2013 11:17:13:502 SecShKeyStore/secsh_keystore.c:5711: 1 keys after client filter
11/06/2013 11:17:13:502 SecShKeyStore/secsh_keystore.c:5498: key_id=0, key_prov=778340[0], client=5, parent=-1
11/06/2013 11:17:13:502 SecShKeyStore/secsh_keystore.c:5498: key_id=0, key_prov=21cfac0[0], client=5, parent=-1
11/06/2013 11:17:13:502 SecShKeyStore/secsh_keystore.c:5498: key_id=1, key_prov=21cfac0[0], client=5, parent=-1
11/06/2013 11:17:13:502 SecShKeyStore/secsh_keystore.c:5821: key list entry 0: id=1, key_id=1, is_cert=FALSE, is_prepared=TRUE, has_duplicate=FALSE, is_duplicate_of=0
11/06/2013 11:17:13:502 SecShKeyStore/secsh_keystore.c:5831: returning 1 keys
11/06/2013 11:17:13:502 SecShPluginCPublickey/authc-publickey.c:1483: Server version SSH-2.0-5.3.11.2 SSH Tectia Server, considering signature algorithm ssh-dss-sha256@ssh.com
11/06/2013 11:17:13:502 SecShPluginCPublickey/authc-publickey.c:1449: Skipping signature algorithm ssh-dss-sha256@ssh.com as the server is a Tectia server older than 6.2.0
11/06/2013 11:17:13:518 SecShPluginCPublickey/authc-publickey.c:2409: Advancing to next key.
11/06/2013 11:17:13:518 SecShPluginCPublickey/authc-publickey.c:2077: Current: 1 [1] PASS: 1
11/06/2013 11:17:13:518 SecShPluginCPublickey/authc-publickey.c:2188: Key has been considered already
11/06/2013 11:17:13:518 SecShPluginCPublickey/authc-publickey.c:2077: Current: 1 [1] PASS: 2
11/06/2013 11:17:13:518 SecShPluginCPublickey/authc-publickey.c:2214: Key has been considered already
11/06/2013 11:17:13:518 SecShPluginCPublickey/authc-publickey.c:2077: Current: 1 [1] PASS: 3
11/06/2013 11:17:13:518 SecShPluginCPublickey/authc-publickey.c:2256: Key has been considered already.
11/06/2013 11:17:13:518 SecShPluginCPublickey/authc-publickey.c:2077: Current: 1 [1] PASS: 4
11/06/2013 11:17:13:518 SecShPluginCPublickey/authc-publickey.c:2111: No more keys, failing publickey auth permanently.
11/06/2013 11:17:13:518 SecShPlugin/secsh_plugin.c:208: Ending app call.
11/06/2013 11:17:13:518 SecShAuth/secsh_auth.c:703: Method `publickey' has permanently failed.

asked Jun 11 '13 at 22:57

Prasanna's gravatar image

Prasanna
1333

edited Aug 31 '13 at 14:26

Roman's gravatar image

Roman ♦♦
7735817


This debug shows that the client is trying public key authentication but the server has rejected it. Most likely the problem is on the server side. How was the public key uploaded? Can you check the permissions of the uploaded public key in the server?

What does running this command in the server show?

ls -al ~/.ssh2/
link

answered Aug 31 '13 at 14:41

Roman's gravatar image

Roman ♦♦
7735817

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or __italic__
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×54
×12

Asked: Jun 11 '13 at 22:57

Seen: 5,068 times

Last updated: Aug 31 '13 at 14:41

All user contributed content licensed under the cc-by-sa license.
Powered by OSQA.