IT分销/经销

ssh配置双机信任后,为何任然要输入密码?

执行 
ssh-keygen -t dsa
ssh-keygen -t rsa

生成公鈅、私鈅后,将公鈅上传到对端服务器,并追加到authorized_keys 中。用ssh远程登陆对端机器时,仍然提示要输入密码。


实验环境是aix 5.3 + openssh 4.7 。 同样的操作,同样的sshd_config配置,在hp-unix + openssh 4.1上执行成功。 请问这会跟系统平台有关吗?


以下附上两种环境的debug结果。在aix上调试时,提示Failed dlopen: /usr/krb5/lib/libkrb5.a(libkrb5.a.so):   请问这是什么意思?


========================================hp-unix+openssh 4.1==================================
$ ssh -v 3410b
OpenSSH_4.1, OpenSSL 0.9.7e 25 Oct 2004
HP-UX Secure Shell-A.04.00.000, HP-UX Secure Shell version
debug1: Reading configuration data /opt/ssh/etc/ssh_config
debug1: Connecting to 3410b [132.97.32.225] port 22.
debug1: Connection established.
debug1: identity file /export/home/tomcat/.ssh/id_rsa type -1
debug1: identity file /export/home/tomcat/.ssh/id_dsa type 2
debug1: Remote protocol version 2.0, remote software version OpenSSH_4.1
debug1: match: OpenSSH_4.1 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host '3410b' is known and matches the RSA host key.
debug1: Found key in /export/home/tomcat/.ssh/known_hosts:1
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: /export/home/tomcat/.ssh/id_rsa
debug1: Offering public key: /export/home/tomcat/.ssh/id_dsa
debug1: Server accepts key: pkalg ssh-dss blen 434
debug1: read PEM private key done: type DSA
debug1: Authentication succeeded (publickey).



===============================================AIX + openssh 4.7===============================
ssh -v gz_bstDB2
OpenSSH_4.7p1, OpenSSL 0.9.8f 11 Oct 2007
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Failed dlopen: /usr/krb5/lib/libkrb5.a(libkrb5.a.so):   0509-022 Cannot load module /usr/krb5/lib/libkrb5.a(libkrb5.a.so).
        0509-026 System error: A file or directory in the path name does not exist.
debug1: Error loading Kerberos, disabling Kerberos auth.
debug1: Connecting to gz_bstDB2 [132.97.183.99] port 22.
debug1: Connection established.
debug1: identity file /oracle/.ssh/identity type -1
debug1: identity file /oracle/.ssh/id_rsa type 1
debug1: identity file /oracle/.ssh/id_dsa type 2
debug1: Remote protocol version 2.0, remote software version OpenSSH_4.7
debug1: match: OpenSSH_4.7 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.7
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: ENC->NAME:aes128-cbc
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: ENC->NAME:aes128-cbc
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: TYPE :31,Expected Type:0
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: TYPE :33,Expected Type:0
debug1: Host 'gz_bstdb2' is known and matches the RSA host key.
debug1: Found key in /oracle/.ssh/known_hosts:1
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: TYPE :21,Expected Type:0
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: /oracle/.ssh/identity
debug1: Offering public key: /oracle/.ssh/id_rsa
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Offering public key: /oracle/.ssh/id_dsa
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Next authentication method: keyboard-interactive
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Next authentication method: password
参与25

25同行回答

锅净锅净系统管理员交通银行陕西分行信息技术部
不光是目录,权限也要对才行。显示全部
不光是目录,权限也要对才行。收起
金融其它 · 2010-09-10
浏览2133
wangguangliwangguangli软件开发工程师和哈
只有碰到具体问题,才能深刻理解显示全部
只有碰到具体问题,才能深刻理解收起
互联网服务 · 2010-09-10
浏览2151
saudisaudi信息技术经理its
呵呵,计算机就是按规矩办事,不能像人一样灵活变通啊显示全部
呵呵,计算机就是按规矩办事,不能像人一样灵活变通啊收起
系统集成 · 2010-09-10
浏览2225
xianming1314xianming1314项目经理上海天玑
一个无心的改动有些时候确实会英气比较大的问题!@显示全部
一个无心的改动有些时候确实会英气比较大的问题!@收起
IT咨询服务 · 2010-09-08
浏览2104
maat402maat402项目经理北京宇信易诚科技有限公司
狂顶:lol显示全部
狂顶:lol收起
系统集成 · 2010-07-13
浏览2131
colin0608colin0608系统工程师long
信任没配好显示全部
信任没配好收起
互联网服务 · 2010-06-28
浏览2269
lzj65166lzj65166软件开发工程师北京九合尚品科技有限公司
这个是要在默认目录下的,现在老大也挺厉害啊。呵呵显示全部
这个是要在默认目录下的,现在老大也挺厉害啊。呵呵收起
互联网服务 · 2010-04-07
浏览2210
wangguangliwangguangli软件开发工程师和哈
只有遇到问题,才会了解基础的重要性啊显示全部
只有遇到问题,才会了解基础的重要性啊收起
互联网服务 · 2010-04-07
浏览2288
michael1983michael1983联盟成员技术总监某证券
学习了:lol显示全部
学习了:lol收起
证券 · 2010-03-25
浏览2264
zhenzongjianzhenzongjian软件开发工程师na
又学习了一下.........显示全部
又学习了一下.........收起
互联网服务 · 2010-03-25
浏览2214

提问者

skylar
工程师广东电信

问题状态

  • 发布时间:2008-06-27
  • 关注会员:0 人
  • 问题浏览:27921
  • 最近回答:2010-09-10
  • X社区推广