IBM webMethods Hybrid Integration

IBM webMethods Hybrid Integration

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Configuring SSH on IS

    Posted Thu March 31, 2005 02:27 AM

    Hi,
    I am trying to do establish sFTP communication between two hosts. In order to logon without interactively using the password, we need to configure the SSH. I created the key pair without a password and it seemed to work fine. But when i try to establish a SSH connection to the remotehost i am getting these error

    OpenSSH_3.6.1p1, SSH protocols 1.5/2.0, OpenSSL 0x0090702f
    debug1: Reading configuration data packages/OpenSSH/config/options.properties
    debug1: Applying options for *
    debug1: Rhosts Authentication disabled, originating port will not be trusted.
    debug1: Connecting to server [10.60.18.34] port 22.
    debug1: Connection established.
    debug1: identity file openssh/intserv.rsa type 1
    debug1: Remote protocol version 1.99, remote software version OpenSSH_3.6.1p1
    debug1: match: OpenSSH_3.6.1p1 pat OpenSSH*
    debug1: Enabling compatibility mode for protocol 2.0
    debug1: Local version string SSH-2.0-OpenSSH_3.6.1p1
    debug1: SSH2_MSG_KEXINIT sent
    debug1: SSH2_MSG_KEXINIT received
    debug1: kex: server->client aes128-cbc hmac-md5 zlib
    debug1: kex: client->server aes128-cbc hmac-md5 zlib
    debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
    debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
    debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
    debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
    debug1: Host ‘server’ is known and matches the RSA host key.
    debug1: Found key in /user/.ssh/known_hosts:1
    debug1: ssh_rsa_verify: signature correct
    debug1: Enabling compression at level 6.
    debug1: SSH2_MSG_NEWKEYS sent
    debug1: expecting SSH2_MSG_NEWKEYS
    debug1: SSH2_MSG_NEWKEYS received
    debug1: SSH2_MSG_SERVICE_REQUEST sent
    debug1: SSH2_MSG_SERVICE_ACCEPT received

    debug1: Authentications that can continue: publickey,password,keyboard-interactive
    debug1: Next authentication method: publickey
    debug1: Offering public key: openssh/intserv.rsa
    debug1: Authentications that can continue: publickey,password,keyboard-interactive
    debug1: No more authentication methods to try.
    Permission denied (publickey,password,keyboard-interactive).
    debug1: Calling cleanup 0x2c928(0x0)
    debug1: compress outgoing: raw data 263, compressed 222, factor 0.84
    debug1: compress incoming: raw data 437, compressed 217, factor 0.50

    In case any one encountered the same problem, or knows a work around for this please let me know.

    Thanks for all the help.
    Shantanu


    #webMethods
    #webmethods-Protocol-and-Transport
    #Integration-Server-and-ESB


  • 2.  RE: Configuring SSH on IS

    Posted Thu March 31, 2005 05:36 PM

    You need to put the intserv.rsa.pub in the authorized_keys file on the remote host. The technote shows the steps on how to do this.


    #Integration-Server-and-ESB
    #webMethods
    #webmethods-Protocol-and-Transport


  • 3.  RE: Configuring SSH on IS

    Posted Thu March 31, 2005 05:43 PM

    Hi Tim,
    I have already put the intserv.rsa.pub in the authorized_keys file on the remote host.
    The error i am getting is after doing all the steps mentioned in the tech note.
    Is there some other configuration that i am missing out on?
    Thanks
    Shantanu


    #webmethods-Protocol-and-Transport
    #Integration-Server-and-ESB
    #webMethods


  • 4.  RE: Configuring SSH on IS

    Posted Thu March 31, 2005 06:47 PM

    The server is not allowing the public key login for some reason. This can be difficult to troubleshoot.

    One thing that is often wrong is the permissions on the remote server .ssh directory and authorized_keys files (your authorized_keys file is in the .ssh directory, right?). They must be very strict; read only to user and no permissions to others.

    You might want to take a look at the OpenSSH site for tips.


    #Integration-Server-and-ESB
    #webmethods-Protocol-and-Transport
    #webMethods


  • 5.  RE: Configuring SSH on IS

    Posted Thu March 31, 2005 09:26 PM

    Tim,
    Thanks for all your help. It was really the permissions that was not allowing the logon.
    To get this working make sure that $HOME (& parent dirs) has read-only access for other users. SSH requires that nobody can access .ssh except the owner – if .ssh is 700 & $HOME is 770 SSH will not work.
    Change both the .ssh and $HOME folder to 700. And this should work.

    Thanks
    Shantanu


    #Integration-Server-and-ESB
    #webMethods
    #webmethods-Protocol-and-Transport