Hi John,
Sorry, I've been sidetracked... do you have an X GUI on this specific box? I'm assuming no? Can you possibly do the following instead:
~/$ mkdir -p .local/share/moonshot-ui
~/$ cat > identities.txt << EOF
[No Identity]
Issuer=
DisplayName=No Identity
Username=
Password=
Services=
CA-Cert=
Subject=
SubjectAlt=
ServerCert=
[John]
Issuer=local
DisplayName=john@local
Username=john
Password=password
Services=host/localhost;
CA-Cert=
Subject=
SubjectAlt=
ServerCert=
EOF
Replace the Issuer, Username, Password and Services in the second ID card as appropriate for your host and credentials on the host.
You *did* create the Moonshot user on your VM, yes?
Oh, as for the pam_ssh_agent_auth package, unless you're using your SSH keys for sudo authentication, it is not required. For the basic SSH test, it doesn't need to be installed.
Stefan
> -----Original Message-----
> From: Moonshot community list [mailto:MOONSHOT-
> [log in to unmask]] On Behalf Of John Watt
> Sent: 28 October 2013 14:23
> To: [log in to unmask]
> Subject: Re: CentOS 6 - ssh test fails
>
> I rolled back to the CentOS 6.4 shipped openssh to get ssh working
> again. Then I reinstalled the moonshot openssh, did the required GSSAPI
> config in ssh/sshd_config, and placed the .gss_eap_id file in my home
> directory. This still fails with the same error message as before
> (ssh_rsa_verify: EVP_get_digestbynid 64 failed, key_verify failed for
> server_host_key)
>
> I can regain regular ssh operation (using the moonshot openssh) by
> removing the .gss_eap_id file from my home directory. However this
> causes the gss-client test to fail, plus 'ssh moonshot@<hostname>' just
> puts up a prompt for a password.
>
> In the CentOS Moonshot SSH instuctions, the rpm install line is 'rpm -
> Uvh ~/rpmbuild/RPMS/x86_64/openssh*rpm', but this ignores the
> 'pam_ssh_agent_auth-0.9.3-53.moonshot1.el6.5.x86_64.rpm' that was
> built. Is this intentional?
>
> Thanks,
> JOhn
|