| View previous topic :: View next topic |
| Author |
Message |
hanj
Veteran
Joined: 19 Aug 2003
Posts: 1500
|
 Posted: Tue Aug 31, 2010 2:23 pm Post subject: sshd -> correct key but not from a permitted host problem |
 |
|
I'm starting to see this on several boxes. I run offsite backups using dirvish, and I connect via SSH to these boxes. Now in my logs I'm starting to see something like this:
| Code: | | sshd[4724]: Authentication tried for xxxx with correct key but not from a permitted host (host=xxxx, ip=xxx.xxx.xxx.xxx). |
I tried adding the hostname to the key, but the message continues:
| Code: | | from="hostname,xxx.xxx.xxx.xxx" |
I'm running the following openssh on all boxes:
| Code: | | net-misc/openssh-5.5_p1-r2 USE="pam tcpd -X -X509 -hpn -kerberos -ldap -libedit (-selinux) -skey -static" |
Any ideas?
Thanks!
hanji
_________________
Server Admin Blog - Uno-Code.com |
|
| Back to top |
|
 |
bjlockie
Veteran
Joined: 18 Oct 2002
Posts: 1186
Location: Canada
|
| Posted: Thu Sep 02, 2010 4:13 am Post subject: Re: sshd -> correct key but not from a permitted host pro |
|
|
| hanj wrote: | I'm starting to see this on several boxes. I run offsite backups using dirvish, and I connect via SSH to these boxes. Now in my logs I'm starting to see something like this:
| Code: | | sshd[4724]: Authentication tried for xxxx with correct key but not from a permitted host (host=xxxx, ip=xxx.xxx.xxx.xxx). |
I tried adding the hostname to the key, but the message continues:
| Code: | | from="hostname,xxx.xxx.xxx.xxx" |
I'm running the following openssh on all boxes:
| Code: | | net-misc/openssh-5.5_p1-r2 USE="pam tcpd -X -X509 -hpn -kerberos -ldap -libedit (-selinux) -skey -static" |
Any ideas?
Thanks!
hanji |
Regenerate a key and put the pub on the remote box.
_________________
AMD FX6100 CPU, 16 GiB RAM, OCZ Vertex 3 SSD
ASRock 970 Extreme3 motherboard with S/PDIF audio
Galaxy-NVidia GeForce 8800GT video card, Cyber Power CP550HG USB UPS |
|
| Back to top |
|
|
cwr
Veteran
Joined: 17 Dec 2005
Posts: 1969
|
| Posted: Thu Sep 02, 2010 7:28 am Post subject: |
|
|
Well, you could start by checking the known_hosts file, but it would be
nice to know why the setup has suddenly changed.
Will |
|
| Back to top |
|
|
cach0rr0
Bodhisattva
Joined: 13 Nov 2008
Posts: 4123
Location: Houston, Republic of Texas
|
|
| Back to top |
|
|
|
Networking & Security
