Cannot SSH to same machine without PAM password prompt

Question

hi
i'm trying to set up sol 10 server for oracle RAC. it has to be able to ssh into itself and other servers silently.
i've renamed /etc/issue to suppress banner output confusion in oracle's exit code.
i can ssh to another server, sol 8 running openssh silently
ssh is linked to ssh2, using rsa keys
co-worker suggests it might have something to do w cfg for LDAP. i don't have an LDAP server running. i don't find anything LDAP-looking in /etc/ssh2/sshd2_config.
help :( this is holding up my oracle RAC install and getting me attention i could do without :)
thanks
justin

Answer 1

sid_sanders
you guys are drawing me into the heart of darkness--i'm a dba,usu linux :)
i'll do my best to answer your questions relevantly:
+and as oracle we can use ssh between and on each node. what you can do after you have your keys in order, is run sshd in debug and see why public key auth may be failing.
/full/path/to/sshd -ddd -p <open port>+
no sshd2 in /usr/local/bin /usr/sbin /usr/bin
no sshd in /usr/local/bin /usr/sbin /usr/bin
sshd will terminate after the ssh session attempt closes (succeed or fail). of note that you have, /etc/ssh2, is this a built from source instance of openssh?
this is a proprietary baseline my company uses;
webville# ssh -v webville
warning: Development-time debugging not compiled in.
warning: To enable, configure with --enable-debug and recompile.
debug: Ssh2/ssh2.c:1812: Crypto library version: SSH Cryptographic Library, version 1.2.6
debug: Ssh2/ssh2.c:1976: User config file not found, using defaults. (Looked for '//.ssh2/ssh2_config')
debug: Ssh2/ssh2.c:2673: Running in FIPS mode: No
debug: Connecting to webville, port 22... (SOCKS not used)
warning: Connecting to webville failed: Connection Refused
the built in stuff from sun is /etc/ssh/*. just trying to understand all the parts...
my /etc/ssh is:
-rw-r--r-- 1 root sys 88301 Jan 21 2005 moduli
-rw-r--r-- 1 root sys 861 Nov 14 18:07 ssh_config
-rw-r--r-- 1 root sys 861 Nov 14 18:07 ssh_config-preCIS-20071114-15:17:00
-rw-r--r-- 1 root sys 5266 Apr 30 14:25 sshd_config
-rw-r--r-- 1 root sys 5202 Nov 14 15:27 sshd_config-preCIS-20071114-15:17:00
-rw-r--r-- 1 root sys 5238 Apr 21 20:52 sshd_config.bak
-rw------- 1 root sys 668 Nov 14 15:34 ssh_host_dsa_key
-rw-r--r-- 1 root sys 605 Nov 14 15:34 ssh_host_dsa_key.pub
-rw------- 1 root sys 883 Apr 22 22:09 ssh_host_rsa_key
-rw-r--r-- 1 root sys 223 Apr 22 22:09 ssh_host_rsa_key.pub
-rw-r--r-- 1 root sys 223 Apr 22 22:09 ssh_host_rsa_key.pub_webville
-rw-rw-r-- 1 root sys 111616 Apr 22 17:03 ssh_keys.tar
webville# ssh -v webville
warning: Development-time debugging not compiled in.
warning: To enable, configure with --enable-debug and recompile.
debug: Ssh2/ssh2.c:1812: Crypto library version: SSH Cryptographic Library, version 1.2.6
debug: Ssh2/ssh2.c:1976: User config file not found, using defaults. (Looked for '//.ssh2/ssh2_config')
debug: Ssh2/ssh2.c:2673: Running in FIPS mode: No
debug: Connecting to webville, port 22... (SOCKS not used)
warning: Connecting to webville failed: Connection Refused
+# ./ssh -ddd+
++warning: Development-time debugging not compiled in.++
++warning: To enable, configure with --enable-debug and recompile.++
++warning: You didn't specify a host name.++
++Type ssh -h for help.++
and since i'm dealing w SMF, i got:
# svcs -x ssh2
svc:/network/ssh2:default (SSH2 server)
State: maintenance since Fri 02 May 2008 01:45:53 PM GMT
Reason: Start method failed repeatedly, last exited with status 255.
See: http://sun.com/msg/SMF-8000-KS
See: sshd2(1M)
See: /var/svc/log/network-ssh2:default.log
Impact: This service is not running.
+# cat /var/svc/log/network-ssh2:default.log+
+[ Nov 14 15:16:41 Disabled. ]+
+[ Nov 14 15:16:41 Rereading configuration. ]+
+[ Nov 14 15:16:41 Enabled. ]+
+[ Nov 14 15:16:41 Executing start method ("/lib/svc/method/sshd2 start") ]+
Starting sshd2: sshd2: SSH Tectia Server 4.4.0 on sparc-sun-solaris2.8
Build: 116
OK
sshd2[21335]: FATAL: Creating listener failed (iface: *** SSH_IPADDR_ANY ***): port 22 probably already in use!
and yet, i see no usage of port 22:
# netstat -an | grep 22
+127.0.0.1.38945 127.0.0.1.7200 49221 0 49152 0 TIME_WAIT+
+127.0.0.1.38946 127.0.0.1.7200 49221 0 49152 0 TIME_WAIT+
+127.0.0.1.38947 127.0.0.1.7200 49221 0 49152 0 TIME_WAIT+
*.22273              *.*                0      0 49152      0 BOUND
*.22273              *.*                0      0 49152      0 LISTEN
*.22273                           *.*                             0      0 49152      0 LISTEN