[TriLUG] SSH "partial success"

[Jon Carnes]

You definately need to look at the config file for sshd.  Compare it from
the good server and the "bad" server.  I'm sure you will find that you have
password authentication turned off on the "bad" server (or you have a higher
level of security set for the install and something else is blocking the
login).

I think you have tried this, but do ssh in as an ordinary user and try that.
You may simply have password authentication turned off for root (that is one
of the option in the config for sshd).

   ssh jkizer at server3.ncsu.edu

Jon
----- Original Message -----
From: "Janyne Kizer" <janyne_kizer at ncsu.edu>
To: <trilug at trilug.org>
Sent: Tuesday, February 12, 2002 12:10 PM
Subject: Re: [TriLUG] SSH "partial success"


> I think that it has something to do with the authentication methods.
> When I do
>
> ssh destinationserver -v
>
> from both the "bad" server and a "good" one,  I the output appears to be
> the same up to
>
> bad server
> debug1: authentications that can continue:
> debug1: next auth method to try is publickey
> debug1: try privkey: /root/.ssh/identity
> debug1: try privkey: /root/.ssh/id_rsa
> debug1: try privkey: /root/.ssh/id_dsa
> debug1: next auth method to try is password
>
> good server
> debug1: authentications that can continue: publickey,password
> debug1: next auth method to try is publickey
> debug1: try privkey: /root/.ssh/identity
> debug1: try privkey: /root/.ssh/id_rsa
> debug1: try privkey: /root/.ssh/id_dsa
> debug1: next auth method to try is password
>
> So maybe it has no authenication methods available?
>
>
> "M. Mueller (bhu5nji)" wrote:
> >
> > I use SSH2 3.x.  I don't recognize those messages, but the first thing
that
> > popped into my head was about user id.  I have my identities defined in
my
> > normal user accounts.  Sometimes I try to ssh in somewhere when I am
root and
> > things "kind of work" but I get that repeated request for a password.
Once,
> > I think I got through by entering the user account password (not the SSH
> > passphrase).  Try going back to the account in which you setup the
> > authentication and try logging in from that account.  When I first
started
> > using SSH, that error would really lower my productivity for the day.
> >
> > Mike M.
> >
> > On Tuesday 12 February 2002 11:37 am, you wrote:
> > > What does "Authenticated with partial success" mean?  I installed
there
> > > beta servers in the past two days and two of them SSH fine but one is
> > > giving us grief.  I can duplicate the error from Raleigh (posted
> > > below).  Basically, the user is prompted for a password, they get the
> > > "Authenticated with partial success" message and they are prompted
> > > again, get the message again, they are prompted a third time, they get
a
> > > slightly different message (no please try again) and they are returned
> > > to the prompt.  This is a RH 7.2 installation that is pretty much "out
> > > of the box" using OpenSSH_2.9p2, SSH protocols 1.5/2.0, OpenSSL
> > > 0x0090602f.
> > >
> > > userid at servername's password:
> > > Authenticated with partial success.
> > > Permission denied, please try again.
> > >
> > > Unfortunately, I'm not 100% sure that we are getting the whole story
> > > (the server is up in the mountains).  This person who initially
reported
> > > the problem could well have tried to generate a new key or
something --
> > > or maybe this server had this particular problem from the get go.
> > >
> > > I did see something about reverse looking failure causing a similar
> > > problem but since I can go to the same servers via SSH from other
> > > machines, I don't feel that is the issue.
> > _______________________________________________
> > TriLUG mailing list
> > http://www.trilug.org/mailman/listinfo/trilug
>
> --
>
> Janyne Kizer
> CNE-3, CNE-4, CNE-5
> Systems Programmer Administrator I
> NC State University, College of Agriculture & Life Sciences
> Extension and Administrative Technology Services
> Phone: (919) 515-3609
> _______________________________________________
> TriLUG mailing list
> http://www.trilug.org/mailman/listinfo/trilug