On Thu, 4 Nov 2004, Will Saxon wrote:

> Is this the appropriate list for questions about pkgsrc on non-NetBSD
> systems like Linux?

It is fine. Just be sure to mention your operating system like you did.

> I am trying to install OpenSSH via pkgsrc. It compiles and installs
> without issue. I have created all the host keys, placing them in
> /usr/pkg/etc/ssh/. However, I am not able to establish outgoing ssh
> connections and unable to authenticate incoming connections.
>
> Attempting to establish an outbound connection yields the error "Host
> key verification failed." I have set 'StrictHostKeyChecking=ask' in both
> the /usr/pkg/etc/ssh/ssh_config file as well as my ~/.ssh/config file,
> to no avail.

StrictHostKeyChecking should default to ask.

Is this connecting to your own sshd (from pkgsrc). Or is it for various
SSH servers?

> While running sshd, connections are established but passwords are never
> accepted. Running sshd in debug mode shows that the keyboard-interactive
> auth method fails before I ever get to enter a password. Then with the
> password auth mode, I show an error about auth_shadow_pwexpired.
> Password authentication also fails.

Maybe you can provide the actual ssh -vvv and sshd -d output, maybe we can
notice something else.

I use pkgsrc's openssh under Linux too. I use it with PAM (from pkgsrc),
so I had to set up a PAM configuration also. (The example PAM
configuration is wrong. It has wrong hard-coded paths. I need to fix
that.)

 Jeremy C. Reed

 	  	 	 BSD News, BSD tutorials, BSD links
	  	 	 http://www.bsdnewsletter.com/