<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:10pt"><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 10pt;"><span>Hi Alex </span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 13px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span><br></span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 13px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span>I had tried tshoot and so i have changed GSSAPIAuthentication to no </span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 13px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span>because i was getting</span></div><div><span><div><font size="2" style="background-color: rgb(255, 255, 0);">debug1: Unspecified GSS failure. Minor code may provide more information</font></div><div><font size="2" style="background-color: rgb(255, 255, 0);">Ticket expired</font></div><div><span style="background-color: rgb(255, 255, 0); font-size: 13px;">debug1: Unspecified GSS failure. Minor code may provide more information</span><br></div><div><font size="2" style="background-color: rgb(255, 255, 0);">Ticket expired</font></div><div><span style="background-color: rgb(255, 255, 0); font-size: 13px;">debug1: Unspecified GSS failure. Minor code may provide more information</span><br></div><div><span style="background-color: rgb(255, 255, 0); font-size: 13px;">debug1: Unspecified GSS failure. Minor code may provide more information</span><br></div><div><font size="2" style="background-color: rgb(255, 255, 0);">Matching credential not found</font></div></span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 10pt;"></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 10pt;"> </div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 10pt;">now i uninstalled the ipa client and reinstlled it and joined the ipa domain</div><div><span style="font-size: 10pt;">and now sshd config is to its default </span></div><div><span style="font-size: 10pt;"><br></span></div><div><span style="font-size: 10pt;">Please suggest</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;">[root@ldap1-eng-switchlab-net ipa]# ipa-client-install --hostname=ldap1.eng.switchlab.net</span></div><div><span style="font-size: 13px;">WARNING: ntpd time&date synchronization service will not be configured as</span></div><div><span style="font-size: 13px;">conflicting service (chronyd) is enabled</span></div><div><span style="font-size: 13px;">Use --force-ntpd option to disable it and force configuration of ntpd</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;">DNS discovery failed to determine your DNS domain</span></div><div><span style="font-size: 13px;">Provide the domain name of your IPA server (ex: example.com): eng.switchlab.net</span></div><div><span style="font-size: 13px;">Provide your IPA server name (ex: ipa.example.com): ldap0.eng.switchlab.net</span></div><div><span style="font-size: 13px;">The failure to use DNS to find your IPA server indicates that your resolv.conf file is not properly configured.</span></div><div><span style="font-size: 13px;">Autodiscovery of servers for failover cannot work with this configuration.</span></div><div><span style="font-size: 13px;">If you proceed with the installation, services will be configured to always access the discovered server for all operations and will not fail over to other servers in case of failure.</span></div><div><span style="font-size: 13px;">Proceed with fixed values and no DNS discovery? [no]: yes</span></div><div><span style="font-size: 13px;">Hostname: ldap1.eng.switchlab.net</span></div><div><span style="font-size: 13px;">Realm: ENG.SWITCHLAB.NET</span></div><div><span style="font-size: 13px;">DNS Domain: eng.switchlab.net</span></div><div><span style="font-size: 13px;">IPA Server: ldap0.eng.switchlab.net</span></div><div><span style="font-size: 13px;">BaseDN: dc=eng,dc=switchlab,dc=net</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;">Continue to configure the system with these values? [no]: yes</span></div><div><span style="font-size: 13px;">User authorized to enroll computers: admin</span></div><div><span style="font-size: 13px;">Synchronizing time with KDC...</span></div><div><span style="font-size: 13px;">Password for admin@ENG.SWITCHLAB.NET:</span></div><div><span style="font-size: 13px;">Enrolled in IPA realm ENG.SWITCHLAB.NET</span></div><div><span style="font-size: 13px;">Created /etc/ipa/default.conf</span></div><div><span style="font-size: 13px;">New SSSD config will be created</span></div><div><span style="font-size: 13px;">Configured /etc/sssd/sssd.conf</span></div><div><span style="font-size: 13px;">Configured /etc/krb5.conf for IPA realm ENG.SWITCHLAB.NET</span></div><div><span style="font-size: 13px;">trying https://ldap0.eng.switchlab.net/ipa/xml</span></div><div><span style="font-size: 13px;">Adding SSH public key from /etc/ssh/ssh_host_dsa_key.pub</span></div><div><span style="font-size: 13px;">Adding SSH public key from /etc/ssh/ssh_host_rsa_key.pub</span></div><div><span style="font-size: 13px;">Forwarding 'host_mod' to server u'https://ldap0.eng.switchlab.net/ipa/xml'</span></div><div><span style="font-size: 13px;">Could not update DNS SSHFP records.</span></div><div><span style="font-size: 13px;">SSSD enabled</span></div><div><span style="font-size: 13px;">Configured /etc/openldap/ldap.conf</span></div><div><span style="font-size: 13px;">Configured /etc/ssh/ssh_config</span></div><div><span style="font-size: 13px;">Configured /etc/ssh/sshd_config</span></div><div><span style="font-size: 13px;">Client configuration complete.</span></div><div><br></div><div><br></div><div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;">[root@ldap1-eng-switchlab-net ipa]# cat Configured /etc/ssh/sshd_config</span></div><div><span style="font-size: 13px;">cat: Configured: No such file or directory</span></div><div><span style="font-size: 13px;"># $OpenBSD: sshd_config,v 1.87 2012/07/10 02:19:15 djm Exp $</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># This is the sshd server system-wide configuration file. See</span></div><div><span style="font-size: 13px;"># sshd_config(5) for more information.</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># This sshd was compiled with PATH=/usr/local/bin:/usr/bin</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># The strategy used for options in the default sshd_config shipped with</span></div><div><span style="font-size: 13px;"># OpenSSH is to specify options with their default value where</span></div><div><span style="font-size: 13px;"># possible, but leave them commented. Uncommented options override the</span></div><div><span style="font-size: 13px;"># default value.</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># If you want to change the port on a SELinux system, you have to tell</span></div><div><span style="font-size: 13px;"># SELinux about this change.</span></div><div><span style="font-size: 13px;"># semanage port -a -t ssh_port_t -p tcp #PORTNUMBER</span></div><div><span style="font-size: 13px;">#</span></div><div><span style="font-size: 13px;">Port 22</span></div><div><span style="font-size: 13px;">#AddressFamily any</span></div><div><span style="font-size: 13px;">#ListenAddress 0.0.0.0</span></div><div><span style="font-size: 13px;">#ListenAddress ::</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># The default requires explicit activation of protocol 1</span></div><div><span style="font-size: 13px;">#Protocol 2</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># HostKey for protocol version 1</span></div><div><span style="font-size: 13px;">#HostKey /etc/ssh/ssh_host_key</span></div><div><span style="font-size: 13px;"># HostKeys for protocol version 2</span></div><div><span style="font-size: 13px;">#HostKey /etc/ssh/ssh_host_rsa_key</span></div><div><span style="font-size: 13px;">#HostKey /etc/ssh/ssh_host_dsa_key</span></div><div><span style="font-size: 13px;">#HostKey /etc/ssh/ssh_host_ecdsa_key</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># Lifetime and size of ephemeral version 1 server key</span></div><div><span style="font-size: 13px;">#KeyRegenerationInterval 1h</span></div><div><span style="font-size: 13px;">#ServerKeyBits 1024</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># Logging</span></div><div><span style="font-size: 13px;"># obsoletes QuietMode and FascistLogging</span></div><div><span style="font-size: 13px;">#SyslogFacility AUTH</span></div><div><span style="font-size: 13px;">SyslogFacility AUTHPRIV</span></div><div><span style="font-size: 13px;">#LogLevel INFO</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># Authentication:</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;">#LoginGraceTime 2m</span></div><div><span style="font-size: 13px;">#PermitRootLogin yes</span></div><div><span style="font-size: 13px;">#StrictModes yes</span></div><div><span style="font-size: 13px;">#MaxAuthTries 6</span></div><div><span style="font-size: 13px;">#MaxSessions 10</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;">#RSAAuthentication yes</span></div><div><span style="font-size: 13px;">#PubkeyAuthentication yes</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2</span></div><div><span style="font-size: 13px;"># but this is overridden so installations will only check .ssh/authorized_keys</span></div><div><span style="font-size: 13px;">AuthorizedKeysFile .ssh/authorized_keys</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;">#AuthorizedKeysCommand none</span></div><div><span style="font-size: 13px;">#AuthorizedKeysCommandUser nobody</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;">#AuthorizedPrincipalsFile none</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># For this to work you will also need host keys in /etc/ssh/ssh_known_hosts</span></div><div><span style="font-size: 13px;">#RhostsRSAAuthentication no</span></div><div><span style="font-size: 13px;"># similar for protocol version 2</span></div><div><span style="font-size: 13px;">#HostbasedAuthentication no</span></div><div><span style="font-size: 13px;"># Change to yes if you don't trust ~/.ssh/known_hosts for</span></div><div><span style="font-size: 13px;"># RhostsRSAAuthentication and HostbasedAuthentication</span></div><div><span style="font-size: 13px;">#IgnoreUserKnownHosts no</span></div><div><span style="font-size: 13px;"># Don't read the user's ~/.rhosts and ~/.shosts files</span></div><div><span style="font-size: 13px;">#IgnoreRhosts yes</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># To disable tunneled clear text passwords, change to no here!</span></div><div><span style="font-size: 13px;">#PasswordAuthentication yes</span></div><div><span style="font-size: 13px;">#PermitEmptyPasswords no</span></div><div><span style="font-size: 13px;">PasswordAuthentication yes</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># Change to no to disable s/key passwords</span></div><div><span style="font-size: 13px;">#ChallengeResponseAuthentication yes</span></div><div><span style="font-size: 13px;">ChallengeResponseAuthentication no</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># Kerberos options</span></div><div><span style="font-size: 13px;">#KerberosAuthentication no</span></div><div><span style="font-size: 13px;">#KerberosOrLocalPasswd yes</span></div><div><span style="font-size: 13px;">#KerberosTicketCleanup yes</span></div><div><span style="font-size: 13px;">#KerberosGetAFSToken no</span></div><div><span style="font-size: 13px;">#KerberosUseKuserok yes</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># GSSAPI options</span></div><div><span style="font-size: 13px;">#GSSAPIAuthentication no</span></div><div><span style="font-size: 13px;">#GSSAPICleanupCredentials yes</span></div><div><span style="font-size: 13px;">GSSAPICleanupCredentials yes</span></div><div><span style="font-size: 13px;">#GSSAPIStrictAcceptorCheck yes</span></div><div><span style="font-size: 13px;">#GSSAPIKeyExchange no</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># Set this to 'yes' to enable PAM authentication, account processing,</span></div><div><span style="font-size: 13px;"># and session processing. If this is enabled, PAM authentication will</span></div><div><span style="font-size: 13px;"># be allowed through the ChallengeResponseAuthentication and</span></div><div><span style="font-size: 13px;"># PasswordAuthentication. Depending on your PAM configuration,</span></div><div><span style="font-size: 13px;"># PAM authentication via ChallengeResponseAuthentication may bypass</span></div><div><span style="font-size: 13px;"># the setting of "PermitRootLogin without-password".</span></div><div><span style="font-size: 13px;"># If you just want the PAM account and session checks to run without</span></div><div><span style="font-size: 13px;"># PAM authentication, then enable this but set PasswordAuthentication</span></div><div><span style="font-size: 13px;"># and ChallengeResponseAuthentication to 'no'.</span></div><div><span style="font-size: 13px;"># WARNING: 'UsePAM no' is not supported in Fedora and may cause several</span></div><div><span style="font-size: 13px;"># problems.</span></div><div><span style="font-size: 13px;">#UsePAM no</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;">#AllowAgentForwarding yes</span></div><div><span style="font-size: 13px;">#AllowTcpForwarding yes</span></div><div><span style="font-size: 13px;">#GatewayPorts no</span></div><div><span style="font-size: 13px;">#X11Forwarding no</span></div><div><span style="font-size: 13px;">X11Forwarding yes</span></div><div><span style="font-size: 13px;">#X11DisplayOffset 10</span></div><div><span style="font-size: 13px;">#X11UseLocalhost yes</span></div><div><span style="font-size: 13px;">#PrintMotd yes</span></div><div><span style="font-size: 13px;">#PrintLastLog yes</span></div><div><span style="font-size: 13px;">#TCPKeepAlive yes</span></div><div><span style="font-size: 13px;">#UseLogin no</span></div><div><span style="font-size: 13px;">UsePrivilegeSeparation sandbox # Default for new installations.</span></div><div><span style="font-size: 13px;">#PermitUserEnvironment no</span></div><div><span style="font-size: 13px;">#Compression delayed</span></div><div><span style="font-size: 13px;">#ClientAliveInterval 0</span></div><div><span style="font-size: 13px;">#ClientAliveCountMax 3</span></div><div><span style="font-size: 13px;">#ShowPatchLevel no</span></div><div><span style="font-size: 13px;">#UseDNS yes</span></div><div><span style="font-size: 13px;">#PidFile /var/run/sshd.pid</span></div><div><span style="font-size: 13px;">#MaxStartups 10</span></div><div><span style="font-size: 13px;">#PermitTunnel no</span></div><div><span style="font-size: 13px;">#ChrootDirectory none</span></div><div><span style="font-size: 13px;">#VersionAddendum none</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># no default banner path</span></div><div><span style="font-size: 13px;">#Banner none</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># Accept locale-related environment variables</span></div><div><span style="font-size: 13px;">AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES</span></div><div><span style="font-size: 13px;">AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT</span></div><div><span style="font-size: 13px;">AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE</span></div><div><span style="font-size: 13px;">AcceptEnv XMODIFIERS</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># override default of no subsystems</span></div><div><span style="font-size: 13px;">Subsystem sftp /usr/libexec/openssh/sftp-server</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># Uncomment this if you want to use .local domain</span></div><div><span style="font-size: 13px;">#Host *.local</span></div><div><span style="font-size: 13px;"># CheckHostIP no</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"># Example of overriding settings on a per-user basis</span></div><div><span style="font-size: 13px;">#Match User anoncvs</span></div><div><span style="font-size: 13px;"># X11Forwarding no</span></div><div><span style="font-size: 13px;"># AllowTcpForwarding no</span></div><div><span style="font-size: 13px;"># ForceCommand cvs server</span></div><div><span style="font-size: 13px;">KerberosAuthentication no</span></div><div><span style="font-size: 13px;">PubkeyAuthentication yes</span></div><div><span style="font-size: 13px;">UsePAM yes</span></div><div><span style="font-size: 13px;">GSSAPIAuthentication yes</span></div><div><span style="font-size: 13px;">AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys</span></div><div><br></div><div><span style="background-color: rgb(255, 127, 0);">on the remote eng</span></div><div><span style="background-color: rgb(255, 127, 0);"><div>[root@ldap1-eng-switchlab-net ipa]# /usr/bin/sss_ssh_authorizedkeys np@eng.switchlab.net</div><div>ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzvpxxxxxxxxx+xxxxxxxxxxxxxmNd/SA35njqNlsUbtBAR9ZokruAwAVVZqrfQw== np@ldap.eng.switchlab.net</div><div>ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxErb0QPyVHPM8r4yb3prkr4oobGuyKJj/yd+S4Pf7OUzZT2xXzpy0TZAjiLnqlioxnhyZqgLO/Rdg5o+wt3R7H7L9kGDfMtAyBqUBrRqQeYgfGWvoVrm2UhkTcq/jxxACbYZq0Jg7OTFXodV40uAuRKqVgev6W4V+ozrTxpeVRElqTM4cEJ96V0UxLUpZUHvT1exFKk4F1crZ2hLEuPVWOlOj8NS/sQX3DDuDS69+CH89z5ftzZZCmohY89y2AsJXfA0piHxg2XE+n np@ubuntu</div><div>ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxwR8Ps5m6sYsB/hx3gm2fIoKq6fm0g976L26oAmclDi12CpVFYbI/osIjsq6mIpr9de5Qus/n9kIoxTZLHTRuoCEj7xc4PSPG78oE7JoWKLMvBDiwyhXNa+O9X1RgYhfYmS2m+1nGJYC9DG4xo7K60nO6WogBg3T+EwuDjYrVIfB5Rfe4D8iWKqOTNlJ+MzK4Dk8W8hqSJvuQFq5155DsbeqDy00EY1dMaGYVUq81lHEM91oznp@ldap0.eng.switchlab.net</div><div><br></div></span></div><div>so the keys are bein </div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 10pt;"><br></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 10pt;"><span style="background-color: rgb(255, 127, 0);"><br></span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 10pt;"><span style="background-color: rgb(255, 127, 0);">debug ssh sesssion</span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 10pt;"><br></div><div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;">OpenSSH_6.1p1, OpenSSL 1.0.1e-fips 11 Feb 2013</span></div><div><span style="font-size: 13px;">debug1: Reading configuration data /etc/ssh/ssh_config</span></div><div><span style="font-size: 13px;">debug1: /etc/ssh/ssh_config line 55: Applying options for *</span></div><div><span style="font-size: 13px;">debug2: ssh_connect: needpriv 0</span></div><div><span style="font-size: 13px;">debug1: Connecting to ldap1.eng.switchlab.net [10.30.1.135] port 22.</span></div><div><span style="font-size: 13px;">debug1: Connection established.</span></div><div><span style="font-size: 13px;">debug3: Incorrect RSA1 identifier</span></div><div><span style="font-size: 13px;">debug3: Could not load "/home/np/.ssh/id_rsa" as a RSA1 public key</span></div><div><span style="font-size: 13px;">debug1: identity file /home/np/.ssh/id_rsa type 1</span></div><div><span style="font-size: 13px;">debug1: identity file /home/np/.ssh/id_rsa-cert type -1</span></div><div><span style="font-size: 13px;">debug1: identity file /home/np/.ssh/id_dsa type -1</span></div><div><span style="font-size: 13px;">debug1: identity file /home/np/.ssh/id_dsa-cert type -1</span></div><div><span style="font-size: 13px;">debug1: Remote protocol version 2.0, remote software version OpenSSH_6.1</span></div><div><span style="font-size: 13px;">debug1: match: OpenSSH_6.1 pat OpenSSH*</span></div><div><span style="font-size: 13px;">debug1: Enabling compatibility mode for protocol 2.0</span></div><div><span style="font-size: 13px;">debug1: Local version string SSH-2.0-OpenSSH_6.1</span></div><div><span style="font-size: 13px;">debug2: fd 3 setting O_NONBLOCK</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: loading entries for host "ldap1.eng.switchlab.net" from file "/home/np/.ssh/known_hosts"</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: found key type RSA in file /home/np/.ssh/known_hosts:1</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: loaded 1 keys</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: loading entries for host "ldap1.eng.switchlab.net" from file "/var/lib/sss/pubconf/known_hosts"</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: found key type RSA in file /var/lib/sss/pubconf/known_hosts:1</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: found key type DSA in file /var/lib/sss/pubconf/known_hosts:2</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: loaded 2 keys</span></div><div><span style="font-size: 13px;">debug3: order_hostkeyalgs: prefer hostkeyalgs: ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ssh-rsa-cert-v00@openssh.com,ssh-dss-cert-v00@openssh.com,ssh-rsa,ssh-dss</span></div><div><span style="font-size: 13px;">debug1: SSH2_MSG_KEXINIT sent</span></div><div><span style="font-size: 13px;">debug1: SSH2_MSG_KEXINIT received</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ssh-rsa-cert-v00@openssh.com,ssh-dss-cert-v00@openssh.com,ssh-rsa,ssh-dss,</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit:</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit:</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: first_kex_follows 0</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: reserved 0</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: ssh-rsa,ssh-dss</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: none,zlib@openssh.com</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: none,zlib@openssh.com</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit:</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit:</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: first_kex_follows 0</span></div><div><span style="font-size: 13px;">debug2: kex_parse_kexinit: reserved 0</span></div><div><span style="font-size: 13px;">debug2: mac_setup: found hmac-md5</span></div><div><span style="font-size: 13px;">debug1: kex: server->client aes128-ctr hmac-md5 none</span></div><div><span style="font-size: 13px;">debug2: mac_setup: found hmac-md5</span></div><div><span style="font-size: 13px;">debug1: kex: client->server aes128-ctr hmac-md5 none</span></div><div><span style="font-size: 13px;">debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent</span></div><div><span style="font-size: 13px;">debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP</span></div><div><span style="font-size: 13px;">debug2: dh_gen_key: priv key bits set: 127/256</span></div><div><span style="font-size: 13px;">debug2: bits set: 510/1024</span></div><div><span style="font-size: 13px;">debug1: SSH2_MSG_KEX_DH_GEX_INIT sent</span></div><div><span style="font-size: 13px;">debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY</span></div><div><span style="font-size: 13px;">debug1: Server host key: RSA 22:fd:38:1c:25:80:fc:15:87:31:7b:b9:7b:59:f6:07</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: loading entries for host "ldap1.eng.switchlab.net" from file "/home/np/.ssh/known_hosts"</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: found key type RSA in file /home/np/.ssh/known_hosts:1</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: loaded 1 keys</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: loading entries for host "ldap1.eng.switchlab.net" from file "/var/lib/sss/pubconf/known_hosts"</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: found key type RSA in file /var/lib/sss/pubconf/known_hosts:1</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: found key type DSA in file /var/lib/sss/pubconf/known_hosts:2</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: loaded 2 keys</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: loading entries for host "10.30.1.135" from file "/home/np/.ssh/known_hosts"</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: found key type RSA in file /home/np/.ssh/known_hosts:2</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: loaded 1 keys</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: loading entries for host "10.30.1.135" from file "/var/lib/sss/pubconf/known_hosts"</span></div><div><span style="font-size: 13px;">debug3: load_hostkeys: loaded 0 keys</span></div><div><span style="font-size: 13px;">debug1: Host 'ldap1.eng.switchlab.net' is known and matches the RSA host key.</span></div><div><span style="font-size: 13px;">debug1: Found key in /home/np/.ssh/known_hosts:1</span></div><div><span style="font-size: 13px;">debug2: bits set: 489/1024</span></div><div><span style="font-size: 13px;">debug1: ssh_rsa_verify: signature correct</span></div><div><span style="font-size: 13px;">debug2: kex_derive_keys</span></div><div><span style="font-size: 13px;">debug2: set_newkeys: mode 1</span></div><div><span style="font-size: 13px;">debug1: SSH2_MSG_NEWKEYS sent</span></div><div><span style="font-size: 13px;">debug1: expecting SSH2_MSG_NEWKEYS</span></div><div><span style="font-size: 13px;">debug2: set_newkeys: mode 0</span></div><div><span style="font-size: 13px;">debug1: SSH2_MSG_NEWKEYS received</span></div><div><span style="font-size: 13px;">debug1: Roaming not allowed by server</span></div><div><span style="font-size: 13px;">debug1: SSH2_MSG_SERVICE_REQUEST sent</span></div><div><span style="font-size: 13px;">debug2: service_accept: ssh-userauth</span></div><div><span style="font-size: 13px;">debug1: SSH2_MSG_SERVICE_ACCEPT received</span></div><div><span style="font-size: 13px;">debug2: key: /home/np/.ssh/id_rsa (0x7f74dfec0d60)</span></div><div><span style="font-size: 13px;">debug2: key: /home/np/.ssh/id_dsa ((nil))</span></div><div><span style="font-size: 13px;">debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password</span></div><div><span style="font-size: 13px;">debug3: start over, passed a different list publickey,gssapi-keyex,gssapi-with-mic,password</span></div><div><span style="font-size: 13px;">debug3: preferred gssapi-keyex,gssapi-with-mic,publickey,keyboard-interactive,password</span></div><div><span style="font-size: 13px;">debug3: authmethod_lookup gssapi-keyex</span></div><div><span style="font-size: 13px;">debug3: remaining preferred: gssapi-with-mic,publickey,keyboard-interactive,password</span></div><div><span style="font-size: 13px;">debug3: authmethod_is_enabled gssapi-keyex</span></div><div><span style="font-size: 13px;">debug1: Next authentication method: gssapi-keyex</span></div><div><span style="font-size: 13px;">debug1: No valid Key exchange context</span></div><div><span style="font-size: 13px;">debug2: we did not send a packet, disable method</span></div><div><span style="font-size: 13px;">debug3: authmethod_lookup gssapi-with-mic</span></div><div><span style="font-size: 13px;">debug3: remaining preferred: publickey,keyboard-interactive,password</span></div><div><span style="font-size: 13px;">debug3: authmethod_is_enabled gssapi-with-mic</span></div><div><span style="font-size: 13px;">debug1: Next authentication method: gssapi-with-mic</span></div><div><span style="font-size: 13px;">debug1: Unspecified GSS failure. Minor code may provide more information</span></div><div><span style="font-size: 13px;">Ticket expired</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;">debug1: Unspecified GSS failure. Minor code may provide more information</span></div><div><span style="font-size: 13px;">Ticket expired</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;">debug1: Unspecified GSS failure. Minor code may provide more information</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;">debug1: Unspecified GSS failure. Minor code may provide more information</span></div><div><span style="font-size: 13px;">Matching credential not found</span></div><div><span style="font-size: 13px;"><br></span></div><div><span style="font-size: 13px;">debug2: we did not send a packet, disable method</span></div><div><span style="font-size: 13px;">debug3: authmethod_lookup publickey</span></div><div><span style="font-size: 13px;">debug3: remaining preferred: keyboard-interactive,password</span></div><div><span style="font-size: 13px;">debug3: authmethod_is_enabled publickey</span></div><div><span style="font-size: 13px;">debug1: Next authentication method: publickey</span></div><div><span style="font-size: 13px;">debug1: Offering RSA public key: /home/np/.ssh/id_rsa</span></div><div><span style="font-size: 13px;">debug3: send_pubkey_test</span></div><div><span style="font-size: 13px;">debug2: we sent a publickey packet, wait for reply</span></div><div><span style="font-size: 13px;">debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password</span></div><div><span style="font-size: 13px;">debug1: Trying private key: /home/np/.ssh/id_dsa</span></div><div><span style="font-size: 13px;">debug3: no such identity: /home/np/.ssh/id_dsa</span></div><div><span style="font-size: 13px;">debug2: we did not send a packet, disable method</span></div><div><span style="font-size: 13px;">debug3: authmethod_lookup password</span></div><div><span style="font-size: 13px;">debug3: remaining preferred: ,password</span></div><div><span style="font-size: 13px;">debug3: authmethod_is_enabled password</span></div><div><span style="font-size: 13px;">debug1: Next authentication method: password</span></div><div><span style="font-size: 13px;">np@eng.switchlab.net@ldap1.eng.switchlab.net's password:</span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 10pt;"><br></div></div></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 10pt;"><br></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 10pt;"><br></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 10pt;"><br></div> </div></body></html>