Difficulty with Windows Agent SSH to Linux Server

[raul]

Like it

Up

0

Down

Drop it

::

Hi!

Check if the format of the keys are openssh format.

If you have used Puttygen to generate the keys, you have to export them to openssh format. Check this post:
http://www.openideas.info/phpbb/viewtopic.php?p=646#646

Regards,

Raul

I’ve successfully installed Pandora server and all three procesess are running fine. I am, however, having a great deal of difficulty establishing the SSH connection between my Windows Agent and the Pandora Server.

The Pandora Server is running Ubuntu with OpenSSH installed and tested. I can SSH2 into the server as user Pandora without any problem from the Windows machine using SecureCRT. I have created the public and private keys. The public key on the server has been added to authorized_keys in the /home/pandora/.ssh directory. The public and private keys are also present in the C:Program FilesPandora_Agentkeys directory as id_dsa (private) and id_dsa.pub (public) When I run PandoraAgent.exe –test-ssh it reports that the keys are present but that authentication failed.

I have checked my config on the server and believe that to be correct. I’m completely out of ideas as to why I cannot get this Agent to connect to the Linux server, especially considering I can SSH in using CRT.

Any ideas on what to check next?

[Rick Vestal]

Like it

Up

0

Down

Drop it

::

I double checked and they are in OpenSSH format. Just to be safe I recreated them again. Same error. I also doublechecked authorized_keys to make sure it matched.

[raul]

Like it

Up

0

Down

Drop it

::

Strange…

Have you tried to init your openssh server manually with option -v o -ddd (sshd -v), to see debug information, this can clarify what’s happening there.

Regards,

Raúl

[Rick Vestal]

Like it

Up

0

Down

Drop it

::

Excellent idea… and it worked…

What was happening was although I had all the correct permissions on the key files themselves, the base directory for user pandora (in my case /home/pandora) had incorrect permissions… in my hurry to create it I had set it to 777, it needed to be 755 for OpenSSH to accept a connection to it. Changing that and it instantly sprang to life.

This might be something that could/should be added to the FAQ or wiki.

Hopefully this will help someone else in the future…

Thanks for the tip Raul!

[raul]

Like it

Up

0

Down

Drop it

::

Yes, I think I have to add this to the FAQ :-D, I hope I can find time to write the text.

Good luck with your Pandora FMS!

Raúl