Quote:
Originally Posted by DanL@VPSLink
If the applet prompted you for authentication information, it would indicate that the issue is most likely a matter of connectivity for the applet. If your VPS is not listening for SSH connections on port 22 or your local network is configured to block port 22, the applet may time out or silently fail after prompting for authentication - is it possible either of these conditions may apply?
|
When I connect using the java applet, I get a prompt telling me that the host 'my.ip.address' is unknown, and the fingerprint is 'a long hex number'. It asks if I want to allow this host. I answer yes. I am then prompted for a password. When supplied, I am told that login failed, and do I want to try keyboard or key authentication. Nothing appears in auth.log. If I give the correct password (again), the applet appears to hang and nothing appears in the log. If I give an incorrect password, a login failure appears in the log and I get asked again.
When I connect using PuTTY to 'my.ip.address', I also get the prompt telling me that my server's key is not cached, and do I want to store it. The long hex number is different from the one shown by the java applet, and is marked as being rsa (the Java applet prompt does not say what algorithm is being used). If I say yes, I am prompted for a password. Whether or not the login is successful, the attempt is logged in auth.log.
Summary: PuTTY works and the applet does not. Both appear to connect to my machine, given the log entries. The applet seems unable to finish negotiating a connection, while PuTTY can. The applet seems to use a different host key (the dsa one?).
There is one possibility. My server is running Debian 5. I tried running the applet to connect to another server running Debian 4, and it worked. Is there something different about the OpenSSH implementations between the two releases? I have no idea. I do note that the applet worked before my upgrade, so there is a good chance something changed. I did not regenerate my keys during the upgrade.
Hope this helps.