j'ai crée ma clé, rajouté tout ca dans mon authorized_keys, et là j'obtiens:
Pourtant, le labas.pub est bien correct dans le ~/.ssh/known_hosts du serveur.
Voici mon sshd_config sur le serv:
Code :
- # Logging
- SyslogFacility AUTH
- LogLevel INFO
- # Authentication:
- LoginGraceTime 120
- PermitRootLogin no
- StrictModes yes
- RSAAuthentication yes
- PubkeyAuthentication yes
- AuthorizedKeysFile home/serveur/.ssh/authorized_keys
- # Don't read the user's ~/.rhosts and ~/.shosts files
- IgnoreRhosts yes
- # For this to work you will also need host keys in /etc/ssh_known_hosts
- RhostsRSAAuthentication no
- # similar for protocol version 2
- HostbasedAuthentication no
- # Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
- #IgnoreUserKnownHosts yes
- # To enable empty passwords, change to yes (NOT RECOMMENDED)
- PermitEmptyPasswords no
- # Change to yes to enable challenge-response passwords (beware issues with
- # some PAM modules and threads)
- ChallengeResponseAuthentication no
- # Change to no to disable tunnelled clear text passwords
- #PasswordAuthentication yes
- # Kerberos options
- #KerberosAuthentication no
- #KerberosGetAFSToken no
- #KerberosOrLocalPasswd yes
- #KerberosTicketCleanup yes
- # GSSAPI options
- #GSSAPIAuthentication no
- #GSSAPICleanupCredentials yes
- X11Forwarding no
- X11DisplayOffset 10
- PrintMotd no
- PrintLastLog yes
- TCPKeepAlive yes
- #UseLogin no
- #MaxStartups 10:30:60
- #Banner /etc/issue.net
- # Allow client to pass locale environment variables
- AcceptEnv LANG LC_*
- Subsystem sftp /usr/lib/openssh/sftp-server
- UsePAM yes
|
Voila les logs:
Code :
- Oct 7 10:52:14 localhost sshd[6404]: reverse mapping checking getaddrinfo for l **-bzn-51f-62-**-**-69.adsl.proxad.net failed - POSSIBLE BREAK-IN ATTEMPT!
- Oct 7 10:52:43 localhost sshd[6406]: reverse mapping checking getaddrinfo for l **-bzn-51f-62-**-**-69.adsl.proxad.net failed - POSSIBLE BREAK-IN ATTEMPT!
- Oct 7 11:04:55 localhost sshd[6422]: Accepted password for serveur from 192.168.2.11 port 3059 ssh2
- Oct 7 11:04:55 localhost sshd[6424]: (pam_unix) session opened for user serveurby (uid=0)
- Oct 7 11:05:41 localhost sshd[6424]: (pam_unix) session closed for user serveur
- Oct 7 12:13:11 localhost sshd[6494]: Accepted password for serveur from 192.168.2.11 port 4364 ssh2
- Oct 7 12:13:11 localhost sshd[6496]: (pam_unix) session opened for user serveurby (uid=0)
- Oct 7 12:14:08 localhost sshd[6517]: reverse mapping checking getaddrinfo for l **-bzn-51f-62-**-**-69.adsl.proxad.net failed - POSSIBLE BREAK-IN ATTEMPT!
- Oct 7 12:15:25 localhost sshd[6526]: error: Bind to port 22 on 0.0.0.0 failed:Permission denied.
- Oct 7 12:15:25 localhost sshd[6526]: fatal: Cannot bind any address.
- Oct 7 12:15:46 localhost sshd[2828]: Received signal 15; terminating.
- Oct 7 12:15:46 localhost sshd[6536]: Server listening on :: port 22.
- Oct 7 12:15:52 localhost sshd[6496]: (pam_unix) session closed for user serveur
- Oct 7 14:24:17 localhost sshd[6370]: (pam_unix) session closed for user serveur
- Oct 7 15:05:31 localhost sshd[6639]: reverse mapping checking getaddrinfo for l **-bzn-51f-62-**-**-69.adsl.proxad.net failed - POSSIBLE BREAK-IN ATTEMPT!
- Oct 7 16:56:51 localhost sshd[6710]: (pam_unix) authentication failure; logname = uid=0 euid=0 tty=ssh ruser= rhost=192.168.2.11 user=serveur
- Oct 7 16:56:53 localhost sshd[6710]: Failed password for serveur from 192.168.2 .11 port 4801 ssh2
- Oct 7 16:56:57 localhost sshd[6710]: Accepted password for serveur from 192.168.2.11 port 4801 ssh2
- Oct 7 16:56:57 localhost sshd[6712]: (pam_unix) session opened for user serveur by (uid=0)
- Oct 7 16:57:10 localhost sshd[6740]: error: Bind to port 22 on 0.0.0.0 failed: Permission denied.
- Oct 7 16:57:10 localhost sshd[6740]: fatal: Cannot bind any address.
- Oct 7 16:57:24 localhost sshd[6536]: Received signal 15; terminating.
- Oct 7 16:57:24 localhost sshd[6750]: Server listening on :: port 22.
|
A savoir que:
l'adresse 62.**.**.69 est l'adresse IP du poste (en même celle du serveur qui est chez moi pour le moment, mais ca ne marche quand même pas sur une autre IP) et la 192.168.2.11 est celle ou je me connecte par password.
Alors la ssh du serveur:
Code :
- ssh -v
- OpenSSH_4.3p2 Debian-9, OpenSSL 0.9.8c 05 Sep 2006
|
Donc, il me fait un reverse DNS, je ne sais pas pourquoi grr..
J'ai tenté:
de rajouter HostbasedUsesNameFromPacketOnly yes dans ma config de ssh
et de rajouer mon IP dans le /etc/hosts.
Je ne vois vraiment pas ou est le probleme, j'ai testé en me connectant directement sur le reseau et en tapant l'IP du style 192.168.*.*, et j'ai le même résultat.
Je suis un peu inquiet, il faudrait que cela marche lundi soir 
Please Help
A+
