[25341] in Athena Bugs
sun4 9.2.25: /usr/athena/bin/ssh
daemon@ATHENA.MIT.EDU (oliver thomas)
Mon Dec 8 12:49:49 2003
Message-Id: <200312081749.hB8HnMPu017263@mufasa.mit.edu>
To: bugs@mit.edu
Date: Mon, 08 Dec 2003 12:49:22 -0500
From: oliver thomas <othomas@mit.edu>
Errors-To: bugs-bounces@mit.edu
System name: mufasa.mit.edu
Type and version: Sun-Blade-100 9.2.25 (with mkserv)
Display type: ifb
Shell: /bin/athena/tcsh
Window manager: unknown
What were you trying to do?
ssh and scp from a 9.2.25 athena solaris box to a 10.3.1 Mac OS X
machine.
What's wrong:
The command fails with:
mufasa% ssh othomas@gorillas-choice.mit.edu
17201: input_userauth_error: bad message during authentication: type 64
(ssh -v output is appended below.) Apple just added Kerberos
support to ssh in 10.3. It's worth noting that I have tried
turning off ticket forwarding (-k) but receive the same error.
What should have happened:
ssh connection should have been made.
Please describe any relevant documentation references:
I can use the vendor version of ssh (/bin/ssh) fine with username
and password auth.
Output of ssh -v othomas@gorillas-choice.mit.edu:
OpenSSH_3.5p1, SSH protocols 1.5/2.0, OpenSSL 0x0090703f
17261: debug1: Reading configuration data /etc/ssh_config
17261: debug1: Rhosts Authentication disabled, originating port will not be trusted.
17261: debug1: ssh_connect: needpriv 0
17261: debug1: Connecting to gorillas-choice.mit.edu [18.152.3.7] port 22.
17261: debug1: Connection established.
17261: debug1: identity file /mit/othomas/.ssh/identity type 0
17261: debug1: identity file /mit/othomas/.ssh/id_rsa type -1
17261: debug1: identity file /mit/othomas/.ssh/id_dsa type -1
17261: debug1: Remote protocol version 1.99, remote software version OpenSSH_3.6.1p1+CAN-2003-0693
17261: debug1: match: OpenSSH_3.6.1p1+CAN-2003-0693 pat OpenSSH*
17261: debug1: Enabling compatibility mode for protocol 2.0
17261: debug1: Local version string SSH-2.0-OpenSSH_3.5p1
17261: debug1: Miscellaneous failure
17261: debug1: Server not found in Kerberos database
17261: debug1: SSH2_MSG_KEXINIT sent
17261: debug1: SSH2_MSG_KEXINIT received
17261: debug1: kex: server->client aes128-cbc hmac-md5 none
17261: debug1: kex: client->server aes128-cbc hmac-md5 none
17261: debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
17261: debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
17261: debug1: dh_gen_key: priv key bits set: 134/256
17261: debug1: bits set: 1617/3191
17261: debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
17261: debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
17261: debug1: Host 'gorillas-choice.mit.edu' is known and matches the RSA host key.
17261: debug1: Found key in /mit/othomas/.ssh/known_hosts:44
17261: debug1: bits set: 1555/3191
17261: debug1: ssh_rsa_verify: signature correct
17261: debug1: kex_derive_keys
17261: debug1: newkeys: mode 1
17261: debug1: SSH2_MSG_NEWKEYS sent
17261: debug1: waiting for SSH2_MSG_NEWKEYS
17261: debug1: newkeys: mode 0
17261: debug1: SSH2_MSG_NEWKEYS received
17261: debug1: done: ssh_kex2.
17261: debug1: send SSH2_MSG_SERVICE_REQUEST
17261: debug1: service_accept: ssh-userauth
17261: debug1: got SSH2_MSG_SERVICE_ACCEPT
17261: debug1: authentications that can continue: gssapi,publickey,password,keyboard-interactive
17261: debug1: next auth method to try is gssapi
17261: input_userauth_error: bad message during authentication: type 64
17261: debug1: Calling cleanup 0x3e964(0x0)
