[NTLUG:Discuss] ssh

Thu Mar 21 09:45:26 CST 2002

Here is the portion of my /var/log/messages log that encompasses the ssh
login session I was trying again today.  Is there another log that I need to
check as well?

Mar 21 08:00:26 webct2 sshd[24182]: Failed password for tjdavis from
172.16.2.24 port 32814 ssh2
Mar 21 08:00:39 webct2 last message repeated 2 times
Mar 21 08:00:39 webct2 sshd[24182]: Failed keyboard-interactive for tjdavis
from 172.16.2.24 port 32814 ssh2
Mar 21 08:00:39 webct2 last message repeated 2 times
Mar 21 08:00:39 webct2 sshd[24182]: Connection closed by 172.16.2.24
Mar 21 08:00:54 webct2 sshd[24407]: Failed password for ROOT from
172.16.2.24 port 32815 ssh2
Mar 21 08:01:02 webct2 last message repeated 2 times
Mar 21 08:01:02 webct2 sshd[24407]: Failed keyboard-interactive for ROOT
from 172.16.2.24 port 32815 ssh2
Mar 21 08:01:02 webct2 last message repeated 2 times
Mar 21 08:01:02 webct2 sshd[24407]: Connection closed by 172.16.2.24
Mar 21 08:02:12 webct2 sshd[24923]: Failed password for tjdavis from
172.16.2.24 port 32816 ssh2
Mar 21 08:02:17 webct2 last message repeated 2 times
Mar 21 08:02:17 webct2 sshd[24923]: Failed keyboard-interactive for tjdavis
from 172.16.2.24 port 32816 ssh2
Mar 21 08:02:17 webct2 last message repeated 2 times
Mar 21 08:02:17 webct2 sshd[24923]: Connection closed by 172.16.2.24
Mar 21 08:14:01 webct2 sshd[29483]: Failed password for tjdavis from
172.16.2.24 port 32817 ssh2
Mar 21 08:14:06 webct2 last message repeated 2 times
Mar 21 08:14:06 webct2 sshd[29483]: Failed keyboard-interactive for tjdavis
from 172.16.2.24 port 32817 ssh2
Mar 21 08:14:06 webct2 last message repeated 2 times
Mar 21 08:14:06 webct2 sshd[29483]: Connection closed by 172.16.2.24
Mar 21 08:14:22 webct2 sshd[29841]: Failed password for tjdavis from
172.16.2.24 port 32818 ssh2
Mar 21 08:14:27 webct2 last message repeated 2 times
Mar 21 08:14:27 webct2 sshd[29841]: Failed keyboard-interactive for tjdavis
from 172.16.2.24 port 32818 ssh2
Mar 21 08:14:27 webct2 last message repeated 2 times
Mar 21 08:14:27 webct2 sshd[29841]: Connection closed by 172.16.2.24
Mar 21 08:14:40 webct2 sshd[29984]: Failed password for tjdavis from
172.16.2.24 port 32819 ssh2
Mar 21 08:14:46 webct2 last message repeated 2 times
Mar 21 08:14:46 webct2 sshd[29984]: Failed keyboard-interactive for tjdavis
from 172.16.2.24 port 32819 ssh2
Mar 21 08:14:46 webct2 last message repeated 2 times
Mar 21 08:14:46 webct2 sshd[29984]: Connection closed by 172.16.2.24
Mar 21 08:14:58 webct2 sshd[30125]: Failed password for tjdavis from
172.16.2.24 port 32820 ssh2
Mar 21 08:14:59 webct2 last message repeated 2 times
Mar 21 08:14:59 webct2 sshd[30125]: Failed keyboard-interactive for tjdavis
from 172.16.2.24 port 32820 ssh2
Mar 21 08:14:59 webct2 last message repeated 2 times
Mar 21 08:14:59 webct2 sshd[30125]: Connection closed by 172.16.2.24
Mar 21 08:15:19 webct2 sshd[30276]: Failed password for tjdavis from
172.16.2.24 port 32821 ssh2
Mar 21 08:15:20 webct2 last message repeated 2 times
Mar 21 08:15:20 webct2 sshd[30276]: Failed keyboard-interactive for tjdavis
from 172.16.2.24 port 32821 ssh2
Mar 21 08:15:20 webct2 last message repeated 2 times
Mar 21 08:15:20 webct2 sshd[30276]: Connection closed by 172.16.2.24

T.J. Davis
Southwestern A/G University
Information Technology
tjdavis at sagu.edu
(972) 937-4010 ext. 1255
1 Timothy 4:12

-----Original Message-----
From: Jack-I-Need-a-Job-Snodgrass [mailto:idiotboy+ntlug at cybermail.net]
Sent: Thursday, March 21, 2002 9:22 AM
To: discuss at ntlug.org
Subject: Re: [NTLUG:Discuss] ssh

ssh
What's the log file say? SSH can be configured not to do passwords
or can be configured to only work with certain IPs. The log should
give more help on what's wrong.

jack

----- Original Message -----
From: TJ Davis
To: 'discuss at ntlug.org'
Sent: Thursday, March 21, 2002 8:28 AM
Subject: [NTLUG:Discuss] ssh

I am trying to ssh a Linux server and have never had any trouble with ssh
(on other servers) in the past but, on this one, I type the following at
another Linux boxes shell:
$ ssh -2 tjdavis at 172.16.2.25
tjdavis at 172.16.2.25's password:
Permission denied, please try again.
$ ssh -2 tjdavis at 172.16.2.25
tjdavis at 172.16.2.25's password:
Permission denied, please try again.
$ ssh -2 tjdavis at 172.16.2.25
tjdavis at 172.16.2.25's password:
Permission denied (publickey, password, keyboard-interactive).
$
This is a Redhat box.  It seems to have started happening when I updated my
Gnome to Ximian Gnome (a mistake on my part but I hardly ever boot to GUI so
that's not big deal).  Before Ximian it worked fine.  It seems like
somewhere it has disallowed me to login remotely.  For the records, root is
not able to login either but that is a good thing.  Anyways, I was wondering
if anyone had any suggestions.  I have had this problem for quite awhile and
not been able to figure it out.  I do know that I am using the correct
password because I go login at the console regularly and have no problems.
Thank you for your help in advance.

Eagerly awaiting the next NTLUG meeting,
T.J. Davis
Southwestern A/G University
Information Technology
tjdavis at sagu.edu
(972) 937-4010 ext. 1255
1 Timothy 4:12

_______________________________________________
http://www.ntlug.org/mailman/listinfo/discuss
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://ntlug.org/pipermail/discuss/attachments/20020321/8a0167cc/attachment.html