<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:10pt"><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 10pt;"><span>Hi all </span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 13px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span><br></span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 13px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span>my sshd config file</span></div><div style="background-color: transparent;"><span><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif;
font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># $OpenBSD: sshd_config,v 1.87 2012/07/10 02:19:15 djm Exp $</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># This is the sshd server system-wide configuration file. See</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># sshd_config(5) for more information.</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px;
font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># This sshd was compiled with PATH=/usr/local/bin:/usr/bin</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># The strategy used for options in the default sshd_config shipped with</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># OpenSSH
is to specify options with their default value where</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># possible, but leave them commented. Uncommented options override the</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># default value.</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># If you want to change the port on a SELinux system, you have to
tell</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># SELinux about this change.</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># semanage port -a -t ssh_port_t -p tcp #PORTNUMBER</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">Port 22</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px;
font-style: normal; background-color: transparent;"><font size="2">#AddressFamily any</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#ListenAddress 0.0.0.0</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#ListenAddress ::</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># The default requires explicit activation of protocol 1</font></div><div style="color:
rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#Protocol 2</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># HostKey for protocol version 1</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#HostKey /etc/ssh/ssh_host_key</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color:
transparent;"><font size="2"># HostKeys for protocol version 2</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#HostKey /etc/ssh/ssh_host_rsa_key</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#HostKey /etc/ssh/ssh_host_dsa_key</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#HostKey /etc/ssh/ssh_host_ecdsa_key</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0);
font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># Lifetime and size of ephemeral version 1 server key</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#KeyRegenerationInterval 1h</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#ServerKeyBits 1024</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color:
transparent;"><font size="2"># Logging</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># obsoletes QuietMode and FascistLogging</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#SyslogFacility AUTH</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">SyslogFacility AUTHPRIV</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#LogLevel INFO</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman',
'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># Authentication:</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#LoginGraceTime 2m</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#PermitRootLogin yes</font></div><div style="color: rgb(0, 0,
0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#StrictModes yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#MaxAuthTries 6</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#MaxSessions 10</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">RSAAuthentication
yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">PubkeyAuthentication yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># but this is overridden so installations will only check .ssh/authorized_keys</font></div><div
style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#AuthorizedKeysFile .ssh/authorized_keys</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#AuthorizedKeysCommand none</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">AuthorizedKeysCommandUser nobody</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size:
13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#AuthorizedPrincipalsFile none</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># For this to work you will also need host keys in /etc/ssh/ssh_known_hosts</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#RhostsRSAAuthentication
no</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># similar for protocol version 2</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#HostbasedAuthentication no</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># Change to yes if you don't trust ~/.ssh/known_hosts for</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># RhostsRSAAuthentication and HostbasedAuthentication</font></div><div style="color: rgb(0, 0,
0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#IgnoreUserKnownHosts no</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># Don't read the user's ~/.rhosts and ~/.shosts files</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#IgnoreRhosts yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color:
transparent;"><font size="2"># To disable tunneled clear text passwords, change to no here!</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#PasswordAuthentication yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#PermitEmptyPasswords no</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#PasswordAuthentication no</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0,
0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># Change to no to disable s/key passwords</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#ChallengeResponseAuthentication yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#ChallengeResponseAuthentication no</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal;
background-color: transparent;"><font size="2"># Kerberos options</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#KerberosAuthentication no</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#KerberosOrLocalPasswd yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#KerberosTicketCleanup yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#KerberosGetAFSToken no</font></div><div style="color: rgb(0, 0, 0);
font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#KerberosUseKuserok yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># GSSAPI options</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#GSSAPIAuthentication yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font
size="2">#GSSAPICleanupCredentials yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#GSSAPICleanupCredentials yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#GSSAPIStrictAcceptorCheck yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#GSSAPIKeyExchange no</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york',
times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># Set this to 'yes' to enable PAM authentication, account processing,</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># and session processing. If this is enabled, PAM authentication will</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># be allowed through the ChallengeResponseAuthentication and</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># PasswordAuthentication. Depending on your PAM configuration,</font></div><div style="color: rgb(0,
0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># PAM authentication via ChallengeResponseAuthentication may bypass</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># the setting of "PermitRootLogin without-password".</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># If you just want the PAM account and session checks to run without</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># PAM authentication, then enable this but set
PasswordAuthentication</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># and ChallengeResponseAuthentication to 'no'.</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># WARNING: 'UsePAM no' is not supported in Fedora and may cause several</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># problems.</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#UsePAM no</font></div><div style="color: rgb(0, 0, 0);
font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#AllowAgentForwarding yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#AllowTcpForwarding yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#GatewayPorts no</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font
size="2">#X11Forwarding no</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">X11Forwarding yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#X11DisplayOffset 10</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#X11UseLocalhost yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#PrintMotd yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size:
13px; font-style: normal; background-color: transparent;"><font size="2">#PrintLastLog yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#TCPKeepAlive yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#UseLogin no</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">UsePrivilegeSeparation sandbox # Default for new installations.</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font
size="2">#PermitUserEnvironment no</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#Compression delayed</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#ClientAliveInterval 0</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#ClientAliveCountMax 3</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#ShowPatchLevel no</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times,
serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#UseDNS yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#PidFile /var/run/sshd.pid</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#MaxStartups 10</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#PermitTunnel no</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#ChrootDirectory none</font></div><div style="color:
rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#VersionAddendum none</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># no default banner path</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#Banner none</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font
size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># Accept locale-related environment variables</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">AcceptEnv
LC_IDENTIFICATION LC_ALL LANGUAGE</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">AcceptEnv XMODIFIERS</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># override default of no subsystems</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">Subsystem sftp /usr/libexec/openssh/sftp-server</font></div><div style="color: rgb(0, 0,
0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># Uncomment this if you want to use .local domain</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#Host *.local</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># CheckHostIP no</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal;
background-color: transparent;"><font size="2"><br></font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># Example of overriding settings on a per-user basis</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#Match User anoncvs</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># X11Forwarding no</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># AllowTcpForwarding
no</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2"># ForceCommand cvs server</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">KerberosAuthentication no</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">PubkeyAuthentication yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">UsePAM yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif;
font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">#GSSAPIAuthentication yes</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal; background-color: transparent;"><font size="2">AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys %u</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-family:
'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal;">and debug is </div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal;"><br></div><div><div><font size="2">OpenSSH_6.1p1, OpenSSL 1.0.1e-fips 11 Feb 2013</font></div><div><font size="2">debug1: Reading configuration data /etc/ssh/ssh_config</font></div><div><font size="2">debug1: /etc/ssh/ssh_config line 55: Applying options for *</font></div><div><font size="2">debug2: ssh_connect: needpriv 0</font></div><div><font size="2">debug1: Connecting to ldap1.eng.switchlab.net [10.30.1.135] port 22.</font></div><div><font
size="2">debug1: Connection established.</font></div><div><font size="2">debug3: Incorrect RSA1 identifier</font></div><div><font size="2">debug3: Could not load "/home/np/.ssh/id_rsa" as a RSA1 public key</font></div><div><font size="2">debug1: identity file /home/np/.ssh/id_rsa type 1</font></div><div><font size="2">debug1: identity file /home/np/.ssh/id_rsa-cert type -1</font></div><div><font size="2">debug1: identity file /home/np/.ssh/id_dsa type -1</font></div><div><font size="2">debug1: identity file /home/np/.ssh/id_dsa-cert type -1</font></div><div><font size="2">debug1: Remote protocol version 2.0, remote software version OpenSSH_6.1</font></div><div><font size="2">debug1: match: OpenSSH_6.1 pat OpenSSH*</font></div><div><font size="2">debug1: Enabling compatibility mode for protocol 2.0</font></div><div><font size="2">debug1: Local version string SSH-2.0-OpenSSH_6.1</font></div><div><font size="2">debug2: fd 3 setting
O_NONBLOCK</font></div><div><font size="2">debug3: load_hostkeys: loading entries for host "ldap1.eng.switchlab.net" from file "/home/np/.ssh/known_hosts"</font></div><div><font size="2">debug3: load_hostkeys: found key type RSA in file /home/np/.ssh/known_hosts:1</font></div><div><font size="2">debug3: load_hostkeys: loaded 1 keys</font></div><div><font size="2">debug3: order_hostkeyalgs: prefer hostkeyalgs: ssh-rsa-cert-v01@openssh.com,ssh-rsa-cert-v00@openssh.com,ssh-rsa</font></div><div><font size="2">debug1: SSH2_MSG_KEXINIT sent</font></div><div><font size="2">debug1: SSH2_MSG_KEXINIT received</font></div><div><font size="2">debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1</font></div><div><font size="2">debug2: kex_parse_kexinit:
ssh-rsa-cert-v01@openssh.com,ssh-rsa-cert-v00@openssh.com,ssh-rsa,ssh-dss-cert-v01@openssh.com,ssh-dss-cert-v00@openssh.com,ssh-dss</font></div><div><font size="2">debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se</font></div><div><font size="2">debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se</font></div><div><font size="2">debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96</font></div><div><font size="2">debug2: kex_parse_kexinit:
hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96</font></div><div><font size="2">debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib</font></div><div><font size="2">debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib</font></div><div><font size="2">debug2: kex_parse_kexinit:</font></div><div><font size="2">debug2: kex_parse_kexinit:</font></div><div><font size="2">debug2: kex_parse_kexinit: first_kex_follows 0</font></div><div><font size="2">debug2: kex_parse_kexinit: reserved 0</font></div><div><font size="2">debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1</font></div><div><font size="2">debug2: kex_parse_kexinit: ssh-rsa,ssh-dss</font></div><div><font size="2">debug2: kex_parse_kexinit:
aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se</font></div><div><font size="2">debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se</font></div><div><font size="2">debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96</font></div><div><font size="2">debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96</font></div><div><font size="2">debug2: kex_parse_kexinit: none,zlib@openssh.com</font></div><div><font size="2">debug2: kex_parse_kexinit: none,zlib@openssh.com</font></div><div><font size="2">debug2:
kex_parse_kexinit:</font></div><div><font size="2">debug2: kex_parse_kexinit:</font></div><div><font size="2">debug2: kex_parse_kexinit: first_kex_follows 0</font></div><div><font size="2">debug2: kex_parse_kexinit: reserved 0</font></div><div><font size="2">debug2: mac_setup: found hmac-md5</font></div><div><font size="2">debug1: kex: server->client aes128-ctr hmac-md5 none</font></div><div><font size="2">debug2: mac_setup: found hmac-md5</font></div><div><font size="2">debug1: kex: client->server aes128-ctr hmac-md5 none</font></div><div><font size="2">debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent</font></div><div><font size="2">debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP</font></div><div><font size="2">debug2: dh_gen_key: priv key bits set: 140/256</font></div><div><font size="2">debug2: bits set: 500/1024</font></div><div><font size="2">debug1: SSH2_MSG_KEX_DH_GEX_INIT sent</font></div><div><font size="2">debug1: expecting
SSH2_MSG_KEX_DH_GEX_REPLY</font></div><div><font size="2">debug1: Server host key: RSA 22:fd:38:1c:25:80:fc:15:87:31:7b:b9:7b:59:f6:07</font></div><div><font size="2">debug3: load_hostkeys: loading entries for host "ldap1.eng.switchlab.net" from file "/home/np/.ssh/known_hosts"</font></div><div><font size="2">debug3: load_hostkeys: found key type RSA in file /home/np/.ssh/known_hosts:1</font></div><div><font size="2">debug3: load_hostkeys: loaded 1 keys</font></div><div><font size="2">debug3: load_hostkeys: loading entries for host "10.30.1.135" from file "/home/np/.ssh/known_hosts"</font></div><div><font size="2">debug3: load_hostkeys: found key type RSA in file /home/np/.ssh/known_hosts:2</font></div><div><font size="2">debug3: load_hostkeys: loaded 1 keys</font></div><div><font size="2">debug1: Host 'ldap1.eng.switchlab.net' is known and matches the RSA host key.</font></div><div><font size="2">debug1: Found key in
/home/np/.ssh/known_hosts:1</font></div><div><font size="2">debug2: bits set: 510/1024</font></div><div><font size="2">debug1: ssh_rsa_verify: signature correct</font></div><div><font size="2">debug2: kex_derive_keys</font></div><div><font size="2">debug2: set_newkeys: mode 1</font></div><div><font size="2">debug1: SSH2_MSG_NEWKEYS sent</font></div><div><font size="2">debug1: expecting SSH2_MSG_NEWKEYS</font></div><div><font size="2">debug2: set_newkeys: mode 0</font></div><div><font size="2">debug1: SSH2_MSG_NEWKEYS received</font></div><div><font size="2">debug1: Roaming not allowed by server</font></div><div><font size="2">debug1: SSH2_MSG_SERVICE_REQUEST sent</font></div><div><font size="2">debug2: service_accept: ssh-userauth</font></div><div><font size="2">debug1: SSH2_MSG_SERVICE_ACCEPT received</font></div><div><font size="2">debug2: key: /home/np/.ssh/id_rsa (0x7fe3011f4d60)</font></div><div><font size="2">debug2: key: /home/np/.ssh/id_dsa
((nil))</font></div><div><font size="2">debug1: Authentications that can continue: publickey,password,keyboard-interactive</font></div><div><font size="2">debug3: start over, passed a different list publickey,password,keyboard-interactive</font></div><div><font size="2">debug3: preferred gssapi-keyex,gssapi-with-mic,publickey,keyboard-interactive,password</font></div><div><font size="2">debug3: authmethod_lookup publickey</font></div><div><font size="2">debug3: remaining preferred: keyboard-interactive,password</font></div><div><font size="2">debug3: authmethod_is_enabled publickey</font></div><div><font size="2">debug1: Next authentication method: publickey</font></div><div><font size="2">debug1: Offering RSA public key: /home/np/.ssh/id_rsa</font></div><div><font size="2">debug3: send_pubkey_test</font></div><div><font size="2">debug2: we sent a publickey packet, wait for reply</font></div><div><font size="2">debug1: Authentications that can continue:
publickey,password,keyboard-interactive</font></div><div><font size="2">debug1: Trying private key: /home/np/.ssh/id_dsa</font></div><div><font size="2">debug3: no such identity: /home/np/.ssh/id_dsa</font></div><div><font size="2">debug2: we did not send a packet, disable method</font></div><div><font size="2">debug3: authmethod_lookup keyboard-interactive</font></div><div><font size="2">debug3: remaining preferred: password</font></div><div><font size="2">debug3: authmethod_is_enabled keyboard-interactive</font></div><div><font size="2">debug1: Next authentication method: keyboard-interactive</font></div><div><font size="2">debug2: userauth_kbdint</font></div><div><font size="2">debug2: we sent a keyboard-interactive packet, wait for reply</font></div><div><font size="2">debug2: input_userauth_info_req</font></div><div><font size="2">debug2: input_userauth_info_req: num_prompts 1</font></div><div><font size="2">Password:</font></div><div><font
size="2">debug3: packet_send2: adding 32 (len 22 padlen 10 extra_pad 64)</font></div><div><font size="2">debug2: input_userauth_info_req</font></div><div><font size="2">debug2: input_userauth_info_req: num_prompts 0</font></div><div><font size="2">debug3: packet_send2: adding 48 (len 10 padlen 6 extra_pad 64)</font></div><div><font size="2">debug1: Authentication succeeded (keyboard-interactive).</font></div><div><font size="2">Authenticated to ldap1.eng.switchlab.net ([10.30.1.135]:22).</font></div><div><font size="2">debug1: channel 0: new [client-session]</font></div><div><font size="2">debug3: ssh_session2_open: channel_new: 0</font></div><div><font size="2">debug2: channel 0: send open</font></div><div><font size="2">debug1: Requesting no-more-sessions@openssh.com</font></div><div><font size="2">debug1: Entering interactive session.</font></div><div><font size="2">debug2: callback start</font></div><div><font size="2">debug2: fd 3 setting
TCP_NODELAY</font></div><div><font size="2">debug3: packet_set_tos: set IP_TOS 0x10</font></div><div><font size="2">debug2: client_session2_setup: id 0</font></div><div><font size="2">debug2: channel 0: request pty-req confirm 1</font></div><div><font size="2">debug1: Sending environment.</font></div><div><font size="2">debug3: Ignored env XDG_SESSION_ID</font></div><div><font size="2">debug3: Ignored env HOSTNAME</font></div><div><font size="2">debug3: Ignored env SHELL</font></div><div><font size="2">debug3: Ignored env TERM</font></div><div><font size="2">debug3: Ignored env HISTSIZE</font></div><div><font size="2">debug3: Ignored env QTDIR</font></div><div><font size="2">debug3: Ignored env QTINC</font></div><div><font size="2">debug3: Ignored env QT_GRAPHICSSYSTEM_CHECKED</font></div><div><font size="2">debug3: Ignored env USER</font></div><div><font size="2">debug3: Ignored env LS_COLORS</font></div><div><font size="2">debug3: Ignored env
MAIL</font></div><div><font size="2">debug3: Ignored env PATH</font></div><div><font size="2">debug3: Ignored env PWD</font></div><div><font size="2">debug1: Sending env LANG = en_GB.UTF-8</font></div><div><font size="2">debug2: channel 0: request env confirm 0</font></div><div><font size="2">debug3: Ignored env HISTCONTROL</font></div><div><font size="2">debug3: Ignored env SHLVL</font></div><div><font size="2">debug3: Ignored env HOME</font></div><div><font size="2">debug3: Ignored env LOGNAME</font></div><div><font size="2">debug3: Ignored env QTLIB</font></div><div><font size="2">debug3: Ignored env LESSOPEN</font></div><div><font size="2">debug3: Ignored env XDG_RUNTIME_DIR</font></div><div><font size="2">debug3: Ignored env _</font></div><div><font size="2">debug2: channel 0: request shell confirm 1</font></div><div><font size="2">debug2: callback done</font></div><div><font size="2">debug2: channel 0: open confirm rwindow 0 rmax
32768</font></div><div><font size="2">debug2: channel_input_status_confirm: type 99 id 0</font></div><div><font size="2">debug2: PTY allocation request accepted on channel 0</font></div><div><font size="2">debug2: channel 0: rcvd adjust 2097152</font></div><div><font size="2">debug2: channel_input_status_confirm: type 99 id 0</font></div><div><font size="2">debug2: shell request accepted on channel 0</font></div><div><font size="2">Last failed login: Thu Apr 25 18:58:55 BST 2013 from 10.30.1.134 on ssh:notty</font></div><div><font size="2">There were 26 failed login attempts since the last successful login.</font></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal;"><br></div></div><div style="color: rgb(0, 0, 0); font-family: 'times new roman', 'new york', times, serif; font-size: 13px; font-style: normal;"><br></div></span></div><div style="font-family: 'times new roman',
'new york', times, serif; font-size: 10pt;"></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 10pt;"> </div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 10pt;">Nareshchandra Paturi<br><br>14, St. Augustine’s Court, <br>Mornington Road,<br>london.<br>E11 3BQ.<br>Mob:07466666001,07856918100<br>Ph:02082579579<br></div> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 10pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font size="2" face="Arial"> <b><span style="font-weight:bold;">From:</span></b> Jan Cholasta <jcholast@redhat.com><br> <b><span style="font-weight: bold;">To:</span></b> naresh reddy <nareshbtech@yahoo.com> <br><b><span style="font-weight: bold;">Cc:</span></b> Rob Crittenden <rcritten@redhat.com>; "freeipa-users@redhat.com"
<freeipa-users@redhat.com> <br> <b><span style="font-weight: bold;">Sent:</span></b> Wednesday, April 24, 2013 11:30 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [Freeipa-users] Freeipa -ssh keys<br> </font> </div> <div class="y_msg_container"><br>On 23.4.2013 20:20, naresh reddy wrote:<br>> Hi Rob<br>><br>> I am sorry for coming back again<br>> i can see client can get the ssh keys from the server but still fails<br>> please suggest.<br>><br>><br><br>By "client" you mean the machine that you are trying to ssh to, i.e. the <br>machine that has sshd running? If not, make sure sss_ssh_authorizedkeys <br>works on the machine with sshd, because that's the one that matters here.<br><br>Also, what version of OpenSSH do you have installed?<br><br>Honza<br><br>-- <br>Jan Cholasta<br><br><br></div> </div> </div> </div></body></html>