2015-11-04 1:53 GMT+02:00 Ranjan Maitra <maitra.mbox.ignored@inbox.com>:
On Wed, 4 Nov 2015 00:34:49 +0200 Alchemist <raimiiic@gmail.com> wrote:

> 2015-11-04 0:06 GMT+02:00 Ranjan Maitra <maitra.mbox.ignored@inbox.com>:
>
> > A second machine is now failing to ssh in without a password only after a
> > dnf system-upgrade --releasever=23. The machines being ssh-ed into are both
> > on Fedora 22 (fully updated). But the machines that are ssh-ing in are on
> > Fedora 23 (updated via dnf).
> >
> > Is anyone else having this issue?
> >
> > I posted the output of ssh -vvv earlier this morning but please let me
> > know if additional information is needed to help me troubleshoot the
> > problem.
> >
> > Many thanks again!
> > Ranjan
> >
> >
> Which type of key do you use for auth on that host? DSA keys (not host yet)
> is deprecated now (PubkeyAcceptedKeyTypes). Check and confirm that correct
> keys are loaded ssh-add -K, or try to restart ssh agent using different
> auth socket, f.e in /var/tmp, also check each keyfile by logging in
> manually.

Thanks! I guess I used dsa and rsa keys. So what kind of keys should I get? Is this change/deprecation detailed anywhere?

Many thanks again!
Ranjan

Yes it is detailed in OpenSSH 7.0 release notes. Users should drop DSA and switch to more secure keys. So if you are using DSA for auth on that host, try
ssh -o "PubkeyAcceptedKeyTypes ssh-dss" remote.machine

 

____________________________________________________________
FREE 3D EARTH SCREENSAVER - Watch the Earth right on your desktop!
Check it out at http://www.inbox.com/earth


--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org