[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

openssh-3.3 reports wrong auth method



OpenSSH-3.3 reports in /var/log/authlog

Jun 25 21:46:12 <hostname> sshd[13787]: Accepted hostbased for <username>
from xxx.xxx.xxx.xxx port 32773 ssh2

instead of (line from logs before update)

Jun 25 16:32:39 <hostname> sshd[29946]: Accepted publickey for <username>
from xxx.xxx.xxx.xxx port 34299 ssh2

In /etc/ssh/sshd_config I keep the default

#HostbasedAuthentication no

and there are no .rhosts or .shosts files on my system. It's simply
impossible that it could authenticate based on the host IP.

Also, a debug run during ssh session indicates that really a publickey
session succeeded:

$ ssh -v hostname
...
debug1: next auth method to try is publickey
debug1: userauth_pubkey_agent: testing agent key /home/<username>/.ssh/id_rsa
debug1: input_userauth_pk_ok: pkalg ssh-rsa blen 149 lastkey 0x80905a0 hint -1
debug1: ssh-userauth2 successful: method publickey
...

Could there possibly be a bug in openssh-3.3 regarding authlog?

-- 
Zvezdan Petkovic <zvezdan_(_at_)_cs_(_dot_)_wm_(_dot_)_edu>
http://www.cs.wm.edu/~zvezdan/



Visit your host, monkey.org