SSH Hostbased Authentication not working

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP











up vote
0
down vote

favorite












I have been trying to setup host based auth between 2 of my servers and facing some issues.



My setup is:



Client




  1. Change in /etc/ssh/ssh_config:



    EnableSSHKeySign yes
    HostbasedAuthentication yes


Server




  1. Change in sshd_config:



    HostbasedAuthentication yes
    IgnoreRhosts no


  2. Created a file /etc/ssh/shosts.equiv with client IP and username


  3. created /etc/ssh/ssh_known_hosts with the host name IP address comma separated and public keys of client.

When I try to connect I get the error:



debug3: authmethod_lookup hostbased
debug3: remaining preferred:
debug1: No more authentication methods to try.
Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password,hostbased).


Any hints how to proceed further?







share|improve this question

























    up vote
    0
    down vote

    favorite












    I have been trying to setup host based auth between 2 of my servers and facing some issues.



    My setup is:



    Client




    1. Change in /etc/ssh/ssh_config:



      EnableSSHKeySign yes
      HostbasedAuthentication yes


    Server




    1. Change in sshd_config:



      HostbasedAuthentication yes
      IgnoreRhosts no


    2. Created a file /etc/ssh/shosts.equiv with client IP and username


    3. created /etc/ssh/ssh_known_hosts with the host name IP address comma separated and public keys of client.

    When I try to connect I get the error:



    debug3: authmethod_lookup hostbased
    debug3: remaining preferred:
    debug1: No more authentication methods to try.
    Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password,hostbased).


    Any hints how to proceed further?







    share|improve this question























      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      I have been trying to setup host based auth between 2 of my servers and facing some issues.



      My setup is:



      Client




      1. Change in /etc/ssh/ssh_config:



        EnableSSHKeySign yes
        HostbasedAuthentication yes


      Server




      1. Change in sshd_config:



        HostbasedAuthentication yes
        IgnoreRhosts no


      2. Created a file /etc/ssh/shosts.equiv with client IP and username


      3. created /etc/ssh/ssh_known_hosts with the host name IP address comma separated and public keys of client.

      When I try to connect I get the error:



      debug3: authmethod_lookup hostbased
      debug3: remaining preferred:
      debug1: No more authentication methods to try.
      Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password,hostbased).


      Any hints how to proceed further?







      share|improve this question













      I have been trying to setup host based auth between 2 of my servers and facing some issues.



      My setup is:



      Client




      1. Change in /etc/ssh/ssh_config:



        EnableSSHKeySign yes
        HostbasedAuthentication yes


      Server




      1. Change in sshd_config:



        HostbasedAuthentication yes
        IgnoreRhosts no


      2. Created a file /etc/ssh/shosts.equiv with client IP and username


      3. created /etc/ssh/ssh_known_hosts with the host name IP address comma separated and public keys of client.

      When I try to connect I get the error:



      debug3: authmethod_lookup hostbased
      debug3: remaining preferred:
      debug1: No more authentication methods to try.
      Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password,hostbased).


      Any hints how to proceed further?









      share|improve this question












      share|improve this question




      share|improve this question








      edited Apr 24 at 6:04









      U880D

      399314




      399314









      asked Apr 19 at 20:11









      user3260022

      31




      31




















          1 Answer
          1






          active

          oldest

          votes

















          up vote
          0
          down vote



          accepted










          Read the server log (/var/log/messages, /var/log/secure and/or /var/log/auth.log, depending on distribution and version) and see what sshd logged as the rejection reason.






          share|improve this answer





















            Your Answer







            StackExchange.ready(function()
            var channelOptions =
            tags: "".split(" "),
            id: "106"
            ;
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function()
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled)
            StackExchange.using("snippets", function()
            createEditor();
            );

            else
            createEditor();

            );

            function createEditor()
            StackExchange.prepareEditor(
            heartbeatType: 'answer',
            convertImagesToLinks: false,
            noModals: false,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: null,
            bindNavPrevention: true,
            postfix: "",
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            );



            );








             

            draft saved


            draft discarded


















            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f438813%2fssh-hostbased-authentication-not-working%23new-answer', 'question_page');

            );

            Post as a guest






























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes








            up vote
            0
            down vote



            accepted










            Read the server log (/var/log/messages, /var/log/secure and/or /var/log/auth.log, depending on distribution and version) and see what sshd logged as the rejection reason.






            share|improve this answer

























              up vote
              0
              down vote



              accepted










              Read the server log (/var/log/messages, /var/log/secure and/or /var/log/auth.log, depending on distribution and version) and see what sshd logged as the rejection reason.






              share|improve this answer























                up vote
                0
                down vote



                accepted







                up vote
                0
                down vote



                accepted






                Read the server log (/var/log/messages, /var/log/secure and/or /var/log/auth.log, depending on distribution and version) and see what sshd logged as the rejection reason.






                share|improve this answer













                Read the server log (/var/log/messages, /var/log/secure and/or /var/log/auth.log, depending on distribution and version) and see what sshd logged as the rejection reason.







                share|improve this answer













                share|improve this answer



                share|improve this answer











                answered Apr 24 at 6:36









                telcoM

                10.4k11032




                10.4k11032






















                     

                    draft saved


                    draft discarded


























                     


                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function ()
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f438813%2fssh-hostbased-authentication-not-working%23new-answer', 'question_page');

                    );

                    Post as a guest













































































                    Popular posts from this blog

                    How to check contact read email or not when send email to Individual?

                    Bahrain

                    Postfix configuration issue with fips on centos 7; mailgun relay