<html><body bgcolor="#FFFFFF"><div>Intuition makes me suspect StrictModes for some reason.</div><div><br></div><div>What I'd suggest is to spin up sshd with -d -p 922 -vvv and hit it with an ssh with -vvv to see who's unhappy.</div><div><br><br>On Jul 19, 2011, at 14:42, Greg Brown <<a href="mailto:gwbrown1@gmail.com">gwbrown1@gmail.com</a>> wrote:<br><br></div><div></div><blockquote type="cite"><div>Ok, so I've got a test and dev system I use for writing scripts and whatnot. Someone changed sshd_config or ssh_config and I can't for the life of me figure out what or where but it's causing my perl/Net::SSH::Expect scripts to fail. EACH and EVERY time I try to log into something with Net::SSH::Expect it hangs and barfs back:<div>
<br></div><div><div>"Enter passphrase for key '/home/netadmin/.ssh/id_dsa':</div></div><div><br></div><div>...where it did not before which leads me to believe someone has turned strict host key checking off. That turns out not to be the case, at least according to the ssh config files. I've got as far as creating a 2nd VM on another machine and comparing and copying the ssh_config and sshd_config files back to the broken test machine (and restarting ssh and later just rebooting the damn thing).</div>
<div><br></div><div>System is: Linux debian 2.6.26-2-686 #1 SMP Thu Jan 27 00:28:05 UTC 2011 i686 GNU/Linux</div><div><br></div><div>I'm missing something very basic and very rudimentary. Does anyone know what?</div>
<div><br></div><div>Here are the files in question stripped of comments (and commented out lines) and blanks:</div><div><br></div><div><span class="Apple-style-span" style="font-family: arial, sans-serif; font-size: 13px; border-collapse: collapse; "><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
cat ssh_config | grep -v "#" | grep -v "^$"<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Host *<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
SendEnv LANG LC_*<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "> HashKnownHosts yes<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
GSSAPIAuthentication yes<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "> GSSAPIDelegateCredentials no<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
<u></u> <u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">cat sshd_config | grep -v "#" | grep -v "^$"<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
Port 22<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Protocol 2<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
HostKey /etc/ssh/ssh_host_rsa_key<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">HostKey /etc/ssh/ssh_host_dsa_key<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
UsePrivilegeSeparation yes<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">KeyRegenerationInterval 3600<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
ServerKeyBits 768<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">SyslogFacility AUTH<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
LogLevel INFO<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">LoginGraceTime 120<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
PermitRootLogin yes<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">StrictModes yes<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
RSAAuthentication yes<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">PubkeyAuthentication yes<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
IgnoreRhosts yes<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">RhostsRSAAuthentication no<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
HostbasedAuthentication no<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">PermitEmptyPasswords no<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
ChallengeResponseAuthentication no<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">X11Forwarding yes<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
X11DisplayOffset 10<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">PrintMotd no<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
PrintLastLog yes<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">TCPKeepAlive yes<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
AcceptEnv LANG LC_*<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Subsystem sftp /usr/lib/openssh/sftp-server<u></u><u></u></p><p class="MsoNormal" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
UsePAM yes</p></span></div><div><br></div><div>Greg</div>
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Trilug-ontopic mailing list</span><br><span><a href="mailto:Trilug-ontopic@trilug.org">Trilug-ontopic@trilug.org</a></span><br><span><a href="http://www.trilug.org/mailman/listinfo/trilug-ontopic">http://www.trilug.org/mailman/listinfo/trilug-ontopic</a></span><br></div></blockquote></body></html>