<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2653.12">
<TITLE>RE: [NTLUG:Discuss] ssh</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>Here is the portion of my /var/log/messages log that encompasses the ssh login session I was trying again today. Is there another log that I need to check as well?</FONT></P>
<P><FONT SIZE=2>Mar 21 08:00:26 webct2 sshd[24182]: Failed password for tjdavis from 172.16.2.24 port 32814 ssh2</FONT>
<BR><FONT SIZE=2>Mar 21 08:00:39 webct2 last message repeated 2 times</FONT>
<BR><FONT SIZE=2>Mar 21 08:00:39 webct2 sshd[24182]: Failed keyboard-interactive for tjdavis from 172.16.2.24 port 32814 ssh2</FONT>
<BR><FONT SIZE=2>Mar 21 08:00:39 webct2 last message repeated 2 times</FONT>
<BR><FONT SIZE=2>Mar 21 08:00:39 webct2 sshd[24182]: Connection closed by 172.16.2.24</FONT>
<BR><FONT SIZE=2>Mar 21 08:00:54 webct2 sshd[24407]: Failed password for ROOT from 172.16.2.24 port 32815 ssh2</FONT>
<BR><FONT SIZE=2>Mar 21 08:01:02 webct2 last message repeated 2 times</FONT>
<BR><FONT SIZE=2>Mar 21 08:01:02 webct2 sshd[24407]: Failed keyboard-interactive for ROOT from 172.16.2.24 port 32815 ssh2</FONT>
<BR><FONT SIZE=2>Mar 21 08:01:02 webct2 last message repeated 2 times</FONT>
<BR><FONT SIZE=2>Mar 21 08:01:02 webct2 sshd[24407]: Connection closed by 172.16.2.24</FONT>
<BR><FONT SIZE=2>Mar 21 08:02:12 webct2 sshd[24923]: Failed password for tjdavis from 172.16.2.24 port 32816 ssh2</FONT>
<BR><FONT SIZE=2>Mar 21 08:02:17 webct2 last message repeated 2 times</FONT>
<BR><FONT SIZE=2>Mar 21 08:02:17 webct2 sshd[24923]: Failed keyboard-interactive for tjdavis from 172.16.2.24 port 32816 ssh2</FONT>
<BR><FONT SIZE=2>Mar 21 08:02:17 webct2 last message repeated 2 times</FONT>
<BR><FONT SIZE=2>Mar 21 08:02:17 webct2 sshd[24923]: Connection closed by 172.16.2.24</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:01 webct2 sshd[29483]: Failed password for tjdavis from 172.16.2.24 port 32817 ssh2</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:06 webct2 last message repeated 2 times</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:06 webct2 sshd[29483]: Failed keyboard-interactive for tjdavis from 172.16.2.24 port 32817 ssh2</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:06 webct2 last message repeated 2 times</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:06 webct2 sshd[29483]: Connection closed by 172.16.2.24</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:22 webct2 sshd[29841]: Failed password for tjdavis from 172.16.2.24 port 32818 ssh2</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:27 webct2 last message repeated 2 times</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:27 webct2 sshd[29841]: Failed keyboard-interactive for tjdavis from 172.16.2.24 port 32818 ssh2</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:27 webct2 last message repeated 2 times</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:27 webct2 sshd[29841]: Connection closed by 172.16.2.24</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:40 webct2 sshd[29984]: Failed password for tjdavis from 172.16.2.24 port 32819 ssh2</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:46 webct2 last message repeated 2 times</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:46 webct2 sshd[29984]: Failed keyboard-interactive for tjdavis from 172.16.2.24 port 32819 ssh2</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:46 webct2 last message repeated 2 times</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:46 webct2 sshd[29984]: Connection closed by 172.16.2.24</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:58 webct2 sshd[30125]: Failed password for tjdavis from 172.16.2.24 port 32820 ssh2</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:59 webct2 last message repeated 2 times</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:59 webct2 sshd[30125]: Failed keyboard-interactive for tjdavis from 172.16.2.24 port 32820 ssh2</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:59 webct2 last message repeated 2 times</FONT>
<BR><FONT SIZE=2>Mar 21 08:14:59 webct2 sshd[30125]: Connection closed by 172.16.2.24</FONT>
<BR><FONT SIZE=2>Mar 21 08:15:19 webct2 sshd[30276]: Failed password for tjdavis from 172.16.2.24 port 32821 ssh2</FONT>
<BR><FONT SIZE=2>Mar 21 08:15:20 webct2 last message repeated 2 times</FONT>
<BR><FONT SIZE=2>Mar 21 08:15:20 webct2 sshd[30276]: Failed keyboard-interactive for tjdavis from 172.16.2.24 port 32821 ssh2</FONT>
<BR><FONT SIZE=2>Mar 21 08:15:20 webct2 last message repeated 2 times</FONT>
<BR><FONT SIZE=2>Mar 21 08:15:20 webct2 sshd[30276]: Connection closed by 172.16.2.24</FONT>
</P>
<P><FONT SIZE=2>T.J. Davis</FONT>
<BR><FONT SIZE=2>Southwestern A/G University</FONT>
<BR><FONT SIZE=2>Information Technology</FONT>
<BR><FONT SIZE=2>tjdavis@sagu.edu</FONT>
<BR><FONT SIZE=2>(972) 937-4010 ext. 1255</FONT>
<BR><FONT SIZE=2>1 Timothy 4:12</FONT>
</P>
<BR>
<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: Jack-I-Need-a-Job-Snodgrass [<A HREF="mailto:idiotboy+ntlug@cybermail.net">mailto:idiotboy+ntlug@cybermail.net</A>]</FONT>
<BR><FONT SIZE=2>Sent: Thursday, March 21, 2002 9:22 AM</FONT>
<BR><FONT SIZE=2>To: discuss@ntlug.org</FONT>
<BR><FONT SIZE=2>Subject: Re: [NTLUG:Discuss] ssh</FONT>
</P>
<BR>
<P><FONT SIZE=2>ssh</FONT>
<BR><FONT SIZE=2>What's the log file say? SSH can be configured not to do passwords</FONT>
<BR><FONT SIZE=2>or can be configured to only work with certain IPs. The log should</FONT>
<BR><FONT SIZE=2>give more help on what's wrong.</FONT>
</P>
<P><FONT SIZE=2>jack</FONT>
</P>
<BR>
<BR>
<P><FONT SIZE=2>----- Original Message -----</FONT>
<BR><FONT SIZE=2>From: TJ Davis</FONT>
<BR><FONT SIZE=2>To: 'discuss@ntlug.org'</FONT>
<BR><FONT SIZE=2>Sent: Thursday, March 21, 2002 8:28 AM</FONT>
<BR><FONT SIZE=2>Subject: [NTLUG:Discuss] ssh</FONT>
</P>
<BR>
<P><FONT SIZE=2>I am trying to ssh a Linux server and have never had any trouble with ssh</FONT>
<BR><FONT SIZE=2>(on other servers) in the past but, on this one, I type the following at</FONT>
<BR><FONT SIZE=2>another Linux boxes shell:</FONT>
<BR><FONT SIZE=2>$ ssh -2 tjdavis@172.16.2.25</FONT>
<BR><FONT SIZE=2>tjdavis@172.16.2.25's password:</FONT>
<BR><FONT SIZE=2>Permission denied, please try again.</FONT>
<BR><FONT SIZE=2>$ ssh -2 tjdavis@172.16.2.25</FONT>
<BR><FONT SIZE=2>tjdavis@172.16.2.25's password:</FONT>
<BR><FONT SIZE=2>Permission denied, please try again.</FONT>
<BR><FONT SIZE=2>$ ssh -2 tjdavis@172.16.2.25</FONT>
<BR><FONT SIZE=2>tjdavis@172.16.2.25's password:</FONT>
<BR><FONT SIZE=2>Permission denied (publickey, password, keyboard-interactive).</FONT>
<BR><FONT SIZE=2>$</FONT>
<BR><FONT SIZE=2>This is a Redhat box. It seems to have started happening when I updated my</FONT>
<BR><FONT SIZE=2>Gnome to Ximian Gnome (a mistake on my part but I hardly ever boot to GUI so</FONT>
<BR><FONT SIZE=2>that's not big deal). Before Ximian it worked fine. It seems like</FONT>
<BR><FONT SIZE=2>somewhere it has disallowed me to login remotely. For the records, root is</FONT>
<BR><FONT SIZE=2>not able to login either but that is a good thing. Anyways, I was wondering</FONT>
<BR><FONT SIZE=2>if anyone had any suggestions. I have had this problem for quite awhile and</FONT>
<BR><FONT SIZE=2>not been able to figure it out. I do know that I am using the correct</FONT>
<BR><FONT SIZE=2>password because I go login at the console regularly and have no problems.</FONT>
<BR><FONT SIZE=2>Thank you for your help in advance.</FONT>
</P>
<BR>
<P><FONT SIZE=2>Eagerly awaiting the next NTLUG meeting,</FONT>
<BR><FONT SIZE=2>T.J. Davis</FONT>
<BR><FONT SIZE=2>Southwestern A/G University</FONT>
<BR><FONT SIZE=2>Information Technology</FONT>
<BR><FONT SIZE=2>tjdavis@sagu.edu</FONT>
<BR><FONT SIZE=2>(972) 937-4010 ext. 1255</FONT>
<BR><FONT SIZE=2>1 Timothy 4:12</FONT>
</P>
<BR>
<P><FONT SIZE=2>_______________________________________________</FONT>
<BR><FONT SIZE=2><A HREF="http://www.ntlug.org/mailman/listinfo/discuss" TARGET="_blank">http://www.ntlug.org/mailman/listinfo/discuss</A></FONT>
</P>
</BODY>
</HTML>