do you have /root/.ssh/config ?
you have skipped this part when pasting your verbose connection with root, I'm just 
curious.
maybe when you're connecting with root, its reading its options from 
$HOME/.ssh/options + u're specifying -l testuser
and from testuser's shell it's reading /etc/ssh/config

if u dont, could u paste your "env" output for us here?

my 2c.

Ed.

On Mon, 17 Mar 2003 11:33:09 -0500
"John Straiton" <[EMAIL PROTECTED]> wrote:

> I continue to have problems with SSH authentication. The behavior is
> outside the normal I'm used to. Here's what's going on:
> 
> I'm trying to ssh from MACHINE1 to MACHINE2 as user "testuser".
> 
> Now here's the funny thing:
> > su 
> Password:
> MACHINE1# ssh 209.198.xxx.xxx -l testuser
> Password:
> Last login: Mon Mar 17 11:17:05 2003 from chasm
> Copyright (c) 1980, 1983, 1986, 1988, 1990, 1991, 1993, 1994
>         The Regents of the University of California.  All rights
> reserved.
> > 
> 
> Now on the same machine:
> >exit
> #su testuser
> %ssh 209.198.xxx.xxx 
> Permission denied, please try again.
> Permission denied, please try again.
> Permission denied (publickey,password,keyboard-interactive).
> %
> 
> Why in the world would the login prompted for a password when I'm as
> root specifying a login, and then I wouldn't even be prompted for a
> password when I'm su'ed as the user?
> 
> I thought at first maybe it was because this account *used to*
> auto-login, however if you look at the remote machine's
> /home/testuser/.ssh  directory, it's empty (ie , no authorized_keys). On
> the client machine, it's only got "known_hosts" in there.
> 
> Thoughts? I'm attaching the verbose debug for the client side as the
> user & as root
> 
> John Straiton
> [EMAIL PROTECTED]
> Clickcom, Inc
> 704-365-9970x101 
> 
> 



-- 
Edmond Baroud 
UNIX Systems Admin             mailto:[EMAIL PROTECTED]
Fingerprint  140F 5FD5 3FDD 45D9 226D  9602 8C3D EAFB 4E19 BEF9
"UNIX is very user friendly, it's just picky about who its friends are."



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message

Reply via email to