> -----Original Message-----
> From: Jeremy C. Reed [mailto:reed@reedmedia.net]
> Sent: Thursday, November 04, 2004 11:46 AM
> To: Will Saxon
> Cc: tech-pkg@netbsd.org
> Subject: Re: pkgsrc with Slackware 10
>=20
>=20
> On Thu, 4 Nov 2004, Will Saxon wrote:
>=20
> > Is this the appropriate list for questions about pkgsrc on=20
> non-NetBSD
> > systems like Linux?
>=20
> It is fine. Just be sure to mention your operating system=20
> like you did.
>=20
> > I am trying to install OpenSSH via pkgsrc. It compiles and installs
> > without issue. I have created all the host keys, placing them in
> > /usr/pkg/etc/ssh/. However, I am not able to establish outgoing ssh
> > connections and unable to authenticate incoming connections.
> >
> > Attempting to establish an outbound connection yields the=20
> error "Host
> > key verification failed." I have set=20
> 'StrictHostKeyChecking=3Dask' in both
> > the /usr/pkg/etc/ssh/ssh_config file as well as my=20
> ~/.ssh/config file,
> > to no avail.
>=20
> StrictHostKeyChecking should default to ask.
>=20
> Is this connecting to your own sshd (from pkgsrc). Or is it=20
> for various
> SSH servers?

This is using the pkgsrc ssh to connect to any other sshd I administer,
including the pkgsrc sshd

>=20
> > While running sshd, connections are established but=20
> passwords are never
> > accepted. Running sshd in debug mode shows that the=20
> keyboard-interactive
> > auth method fails before I ever get to enter a password.=20
> Then with the
> > password auth mode, I show an error about auth_shadow_pwexpired.
> > Password authentication also fails.
>=20
> Maybe you can provide the actual ssh -vvv and sshd -d output,=20
> maybe we can
> notice something else.
>=20

I have placed a script of an `ssh -vvv` attempt using the pkgsrc
ssh as well as an `sshd -ddde` script for an incoming attempt to
the pkgsrc sshd at:

http://dhnet.ufl.edu/openssh/ssh and
http://dhnet.ufl.edu/openssh/sshd


> I use pkgsrc's openssh under Linux too. I use it with PAM=20
> (from pkgsrc),
> so I had to set up a PAM configuration also. (The example PAM
> configuration is wrong. It has wrong hard-coded paths. I need to fix
> that.)

I am not using PAM, although I am certainly open to that if it will=20
help.

-Will