2015-11-04 1:53 GMT+02:00 Ranjan Maitra <maitra.mbox.igno...@inbox.com>:
> On Wed, 4 Nov 2015 00:34:49 +0200 Alchemist <raimi...@gmail.com> wrote: > > > 2015-11-04 0:06 GMT+02:00 Ranjan Maitra <maitra.mbox.igno...@inbox.com>: > > > > > A second machine is now failing to ssh in without a password only > after a > > > dnf system-upgrade --releasever=23. The machines being ssh-ed into are > both > > > on Fedora 22 (fully updated). But the machines that are ssh-ing in are > on > > > Fedora 23 (updated via dnf). > > > > > > Is anyone else having this issue? > > > > > > I posted the output of ssh -vvv earlier this morning but please let me > > > know if additional information is needed to help me troubleshoot the > > > problem. > > > > > > Many thanks again! > > > Ranjan > > > > > > > > Which type of key do you use for auth on that host? DSA keys (not host > yet) > > is deprecated now (PubkeyAcceptedKeyTypes). Check and confirm that > correct > > keys are loaded ssh-add -K, or try to restart ssh agent using different > > auth socket, f.e in /var/tmp, also check each keyfile by logging in > > manually. > > Thanks! I guess I used dsa and rsa keys. So what kind of keys should I > get? Is this change/deprecation detailed anywhere? > > Many thanks again! > Ranjan > Yes it is detailed in OpenSSH 7.0 release notes. Users should drop DSA and switch to more secure keys. So if you are using DSA for auth on that host, try ssh -o "PubkeyAcceptedKeyTypes ssh-dss" remote.machine > > ____________________________________________________________ > FREE 3D EARTH SCREENSAVER - Watch the Earth right on your desktop! > Check it out at http://www.inbox.com/earth > > > -- > users mailing list > users@lists.fedoraproject.org > To unsubscribe or change subscription options: > https://admin.fedoraproject.org/mailman/listinfo/users > Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct > Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines > Have a question? Ask away: http://ask.fedoraproject.org >
-- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
