server refused our key :: Support Forum

goana1 Guest

server refused our key

2008-02-19 16:16

hi,

I have installed openssh on my slug (unslung 6.8beta) with all the public and private key. When I try to access with my labtop (no proxy) to my server, there is no problem. But when I am using my office PC sitting behind a proxy, I get the error "server refused our key".

. 2008-02-19 16:06:54.055 --------------------------------------------------------------------------
. 2008-02-19 16:06:54.055 WinSCP Version 4.0.6 (Build 358) (OS 5.1.2600 Service Pack 2)
. 2008-02-19 16:06:54.055 Login time: Dienstag, 19. Februar 2008 16:06:54
. 2008-02-19 16:06:54.055 --------------------------------------------------------------------------
. 2008-02-19 16:06:54.055 Session name: name@xxx.dyndns.org
. 2008-02-19 16:06:54.055 Host name: proxy.server.name (Port: 22)
. 2008-02-19 16:06:54.055 User name: name@xxx.dyndns.org:port# (Password: No, Key file: Yes)
. 2008-02-19 16:06:54.055 Tunnel: No
. 2008-02-19 16:06:54.055 Transfer Protocol: SFTP (SCP)
. 2008-02-19 16:06:54.055 Ping type: -, Ping interval: 30 sec; Timeout: 60 sec
. 2008-02-19 16:06:54.055 Proxy: none
. 2008-02-19 16:06:54.055 SSH protocol version: 2; Compression: No
. 2008-02-19 16:06:54.055 Agent forwarding: No; TIS/CryptoCard: No; KI: Yes; GSSAPI: No
. 2008-02-19 16:06:54.055 Ciphers: aes,blowfish,3des,WARN,des; Ssh2DES: No
. 2008-02-19 16:06:54.055 SSH Bugs: -,-,-,-,-,-,-,-
. 2008-02-19 16:06:54.055 SFTP Bugs: -,-,-
. 2008-02-19 16:06:54.055 Return code variable: Autodetect; Lookup user groups: Yes
. 2008-02-19 16:06:54.055 Shell: default, EOL: 0
. 2008-02-19 16:06:54.055 Clear aliases: Yes, Unset nat.vars: Yes, Resolve symlinks: Yes
. 2008-02-19 16:06:54.055 Alias LS: No, Ign LS warn: Yes, Scp1 Comp: No
. 2008-02-19 16:06:54.055 Local directory: default, Remote directory: home, Update: No, Cache: Yes
. 2008-02-19 16:06:54.055 Cache directory changes: Yes, Permanent: Yes
. 2008-02-19 16:06:54.055 DST mode: 1
. 2008-02-19 16:06:54.055 --------------------------------------------------------------------------
. 2008-02-19 16:06:54.117 Looking up host "proxy.server.name"
. 2008-02-19 16:06:54.117 Connecting to ###.###.##.## port 22
. 2008-02-19 16:06:54.117 Server version: SSH-1.99-OpenSSH_3.5p1
. 2008-02-19 16:06:54.117 We claim version: SSH-2.0-WinSCP_release_4.0.6
. 2008-02-19 16:06:54.117 Using SSH protocol version 2
. 2008-02-19 16:06:54.117 Doing Diffie-Hellman group exchange
. 2008-02-19 16:06:54.148 Doing Diffie-Hellman key exchange
. 2008-02-19 16:06:54.727 Host key fingerprint is:
. 2008-02-19 16:06:54.727 ssh-rsa 1024 ##########
. 2008-02-19 16:06:54.727 Initialised AES-256 client->server encryption
. 2008-02-19 16:06:54.727 Initialised HMAC-SHA1 client->server MAC algorithm
. 2008-02-19 16:06:54.727 Initialised AES-256 server->client encryption
. 2008-02-19 16:06:54.727 Initialised HMAC-SHA1 server->client MAC algorithm
! 2008-02-19 16:06:54.727 Using username "name@xxx.dyndns.org:port#".
. 2008-02-19 16:06:54.742 Reading private key file "F:\slug\openSSH\privatekey.ppk"
. 2008-02-19 16:06:54.742 Offered public key
! 2008-02-19 16:06:54.742 Server refused our key
. 2008-02-19 16:06:54.742 Server refused public key
. 2008-02-19 16:06:54.742 Keyboard-interactive authentication refused
. 2008-02-19 16:06:54.742 Session password prompt (name@xxx.dyndns.org:port#@proxy.server.name's password: )
. 2008-02-19 16:06:58.711 Unable to authenticate
. 2008-02-19 16:06:58.711 Attempt to close connection due to fatal exception:
* 2008-02-19 16:06:58.711 Unable to authenticate
. 2008-02-19 16:06:58.711 Closing connection.
* 2008-02-19 16:06:58.773 (ESshFatal) Unable to authenticate
* 2008-02-19 16:06:58.773 Authentication log (see session log for details):
* 2008-02-19 16:06:58.773 Using username "name@xxx.dyndns.org:port#".
* 2008-02-19 16:06:58.773 Server refused our key.
* 2008-02-19 16:06:58.773
* 2008-02-19 16:06:58.773 Authentication failed.

Any ideas about the bug?

regards

goana

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,506
Location:: Prague, Czechia

Re: server refused our key

2008-02-21

Are you sure that you are using correct username? name@xxx.dyndns.org:port# Looks strange.

Reply with quote

goana1 Guest

Re: server refused our key

2008-02-22 17:13

hi prikryl,

thanks for your answer.

When I try to access from my laptop (without any proxy server), the host name I entered into WinSCP is xxx.dyndns.org, port ### and the user is "root". It works perfectly.
But when I sit in my office behind a proxy, I am using as host name the name of the proxy from my company and port 22 and as user root@xxx.dyndns.org. But it does not work. The proxy radio button at WinSCP is "none".

What does it mean "server refused our key" and "server refused public key"? Does it mean, that I have contact to my server but he do not accept my key....or is it only a strange error message in the log file?

thanks for any help

goana1

Reply with quote

TS Guest

2008-02-24 08:04

You are trying to ssh to the proxy server (which apparently accepts ssh connections). Naturally you are not root on the proxy server, so it refuses your key because it's wrong. What you want to do is connect to your computer, xxx.dyndns.org, not the proxy.

To do that, you should enter proxy.server.name into the "proxy host name" field of the proxy configuration page in WinSCP. See the documentation for more information about configuring a proxy server.

You'll leave the host name field (on the session page) set to xxx.dyndns.org, and your username will still be root, but if correctly configured and allowed by the proxy, your encrypted data will (transparently to you) flow through the proxy to your computer at xxx.dyndns.org.

Reply with quote

server refused our key