This is the mail archive of the
cygwin@cygwin.com
mailing list for the Cygwin project.
RE: Openssh 3.0.2-p15: Can't validate public key when accesing from cron
- From: "Pablo Milano" <pablo dot milano at datatransfer dot com dot ar>
- To: "Max Bowsher" <maxb at ukf dot net>,<cygwin at cygwin dot com>
- Date: Mon, 29 Jul 2002 18:17:59 -0300
- Subject: RE: Openssh 3.0.2-p15: Can't validate public key when accesing from cron
- Reply-to: <pablo dot milano at datatransfer dot com dot ar>
Max,
The problem is not the authorized_keys2, because I can connect with the same
user cron runs the command as, and it works fine (provided I do it from a
console).
I tried to upgrade to openssh 3.4p1-4 but I got new problems (explained in
another mail).
-----Mensaje original-----
De: Max Bowsher [mailto:maxb@ukf.net]
Enviado el: Viernes, 26 de Julio de 2002 15:42
Para: pablo.milano@datatransfer.com.ar; cygwin@cygwin.com
Asunto: Re: Openssh 3.0.2-p15: Can't validate public key when accesing
from cron
Pablo Milano wrote:
>> I am using Cygwin with openssh 3.0.2p1-5 and openssl 0.9.6c-2
>> The sshd is running in a windows 2000 server computer.
>> I use rsa keys to authenticate the users who access the ssh server
>> from linux machines (kernel 2.4.18).
>> Authentication works fine if the "ssh -i user.key user@server" is
>> run from a linux console, but it fails if the same command is run
>> from cron. The following error is returned to the standard error
>> console: "Host key verification failed."
>>
>> This happens only when trying to connect to the cygwin ssh server.
>> It works fine among linux servers.
>> Any hint?
1. Upgrade openssh - 3.0.x is: a) ancient, b) known to have security
problems.
2. The problem is likely to be that the server's host key is not in the ssh
known_hosts file for the user that cron is running ssh as. Since ssh is
running
non-interatively, it can't prompt 'Do you wat to trust this host key?'.
Max.
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Bug reporting: http://cygwin.com/bugs.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/