[Eisfair] SSH Keylog?==?utf-8?Q?in nicht möglich immer Kennwortab?==?utf-8?Q?frage

Mario Reisinger internet.mail at gmx.at
Mo Aug 23 12:16:19 CEST 2021


Hallo Olaf,

Olaf Jaehrling schrieb am Mon, 23 August 2021 11:49
> Hallo Mario,
> 
> Hast du noch eine 2.linuxmaschine? Wenn ja. Probiere mal von dorr
> ein 
> ssh -v dein-eis

Ich hab einige Linuxmaschinen, aber leider keine die kurzfristig über
die Firewall an diese Maschine kann und/oder ich meinen Yubikey dran
Stecken könnte damit ich den Private Key auf dieser zur Verfügung
hätte.

Habe über Cygwin folgende Ausgabe aber ohne zugriff auf den Yubikey,
somit natürlich keine positive Authoriesierung:

$ ssh -v meine.ip
OpenSSH_for_Windows_8.1p1, LibreSSL 3.0.2
debug1: Connecting to meine.ip [meine.ip] port 22.
debug1: Connection established.
debug1: identity file C:\\Users\\meinuser/.ssh/id_rsa type -1
debug1: identity file C:\\Users\\meinuser/.ssh/id_rsa-cert type -1
debug1: identity file C:\\Users\\meinuser/.ssh/id_dsa type -1
debug1: identity file C:\\Users\\meinuser/.ssh/id_dsa-cert type -1
debug1: identity file C:\\Users\\meinuser/.ssh/id_ecdsa type -1
debug1: identity file C:\\Users\\meinuser/.ssh/id_ecdsa-cert type -1
debug1: identity file C:\\Users\\meinuser/.ssh/id_ed25519 type -1
debug1: identity file C:\\Users\\meinuser/.ssh/id_ed25519-cert type -1
debug1: identity file C:\\Users\\meinuser/.ssh/id_xmss type -1
debug1: identity file C:\\Users\\meinuser/.ssh/id_xmss-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_for_Windows_8.1
debug1: Remote protocol version 2.0, remote software version
OpenSSH_8.4
debug1: match: OpenSSH_8.4 pat OpenSSH* compat 0x04000000
debug1: Authenticating to meine.ip:22 as 'meinuser'
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: algorithm: mailto:curve25519-sha256 at libssh.org
debug1: kex: host key algorithm: ssh-ed25519
debug1: kex: server->client cipher: mailto:chacha20-poly1305 at openssh.com
MAC: <implicit> compression: none
debug1: kex: client->server cipher: mailto:chacha20-poly1305 at openssh.com
MAC: <implicit> compression: none
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: Server host key: ssh-ed25519
SHA256:ZsCMk4kWu1Yu44AZYrChnNqx3vNaY5/PXVS1GopXX4s
debug1: read_passphrase: can't open /dev/tty: No such file or directory
The authenticity of host 'meine.ip (meine.ip)' can't be established.
ED25519 key fingerprint is
SHA256:ZsCMk4kWu1Yu44AZYrChnNqx3vNaY5/PXVS1GopXX4s.
Are you sure you want to continue connecting (yes/no/[fingerprint])?
yes
Warning: Permanently added 'meine.ip' (ED25519) to the list of known
hosts.
debug1: rekey out after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: rekey in after 134217728 blocks
debug1: pubkey_prepare: ssh_get_authentication_socket: No such file or
directory
debug1: Will attempt key: C:\\Users\\meinuser/.ssh/id_rsa
debug1: Will attempt key: C:\\Users\\meinuser/.ssh/id_dsa
debug1: Will attempt key: C:\\Users\\meinuser/.ssh/id_ecdsa
debug1: Will attempt key: C:\\Users\\meinuser/.ssh/id_ed25519
debug1: Will attempt key: C:\\Users\\meinuser/.ssh/id_xmss
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info:
server-sig-algs=<ssh-ed25519,mailto:sk-ssh-ed25519 at openssh.com,ssh-rsa,rsa-sha2-256,rsa-sha2-512,ssh-dss,ecdsa-sha2-nistp256,
ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,mailto:sk-ecdsa-sha2-nistp256 at openssh.com,mailto:webauthn-sk-ecdsa-sha2-nistp256 at openssh.com>
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue:
publickey,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: C:\\Users\\meinuser/.ssh/id_rsa
debug1: Trying private key: C:\\Users\\meinuser/.ssh/id_dsa
debug1: Trying private key: C:\\Users\\meinuser/.ssh/id_ecdsa
debug1: Trying private key: C:\\Users\\meinuser/.ssh/id_ed25519
debug1: Trying private key: C:\\Users\\meinuser/.ssh/id_xmss
debug1: Next authentication method: keyboard-interactive
debug1: Authentications that can continue:
publickey,keyboard-interactive
debug1: No more authentication methods to try.
mailto:meinuser at meine.ip: Permission denied
(publickey,keyboard-interactive).



Mehr Informationen über die Mailingliste Eisfair