SSH maxauthtries参数不生效！！

lylklb

这两天我因出差在外,  所以还暂不方便贴出!  请耐心等待我的下一次回帖!!

lylklb

#
# ssh -v -v -v ittest@itsvr1
SSH Version Sun_SSH_1.0, protocol versions 1.5/2.0.
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: ssh_connect: getuid 0 geteuid 0 anon 0
debug1: Connecting to itsvr1 [10.131.7.169] port 22.
debug1: Allocated local port 1023.
debug1: Connection established.
debug1: identity file //.ssh/identity type 3
debug1: identity file //.ssh/id_rsa type 3
debug1: identity file //.ssh/id_dsa type 3
debug1: Remote protocol version 2.0, remote software version Sun_SSH_1.0.1
debug1: match: Sun_SSH_1.0.1 pat ^Sun_SSH_1\.0
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-Sun_SSH_1.0
debug1: sent kexinit: diffie-hellman-group1-sha1
debug1: sent kexinit: ssh-rsa,ssh-dss
debug1: sent kexinit: aes128-cbc,blowfish-cbc,3des-cbc,rijndael128-cbc
debug1: sent kexinit: aes128-cbc,blowfish-cbc,3des-cbc,rijndael128-cbc
debug1: sent kexinit: hmac-sha1,hmac-md5
debug1: sent kexinit: hmac-sha1,hmac-md5
debug1: sent kexinit: none
debug1: sent kexinit: none
debug1: sent kexinit: en_US.ISO8859-1
debug1: sent kexinit: en_US.ISO8859-1
debug1: send KEXINIT
debug1: done
debug1: wait KEXINIT
debug1: got kexinit: diffie-hellman-group1-sha1
debug1: got kexinit: ssh-rsa,ssh-dss
debug1: got kexinit: aes128-cbc,blowfish-cbc,3des-cbc
debug1: got kexinit: aes128-cbc,blowfish-cbc,3des-cbc
debug1: got kexinit: hmac-sha1,hmac-md5
debug1: got kexinit: hmac-sha1,hmac-md5
debug1: got kexinit: none,zlib
debug1: got kexinit: none,zlib
debug1: got kexinit: en_US.ISO8859-1,geo,lcttab,iso_8859_1,hi_IN.UTF-8,zh,zh.GBK,zh.UTF-8,zh_CN.EUC,zh_CN.GB18030,zh_CN.GBK,zh_CN.UTF-8,th,th_TH,th_TH.ISO8859-11,th_TH.TIS620,th_TH.UTF-8,zh_CN.EUC@pinyin,zh_CN.EUC@radical,zh_CN.EUC@stroke,zh_CN.GB18030@pinyin,zh_CN.GBK@pinyin,zh_CN.GB18030@radical,zh_CN.GB18030@stroke,zh_CN.GBK@radical,zh_CN.GBK@stroke,zh_CN.UTF-8@pinyin,zh_CN.UTF-8@radical,zh_CN.UTF-8@stroke,en_CA,en_CA.ISO8859-1,en_US,en_US.ISO8859-1,en_US.ISO8859-15,en_US.ISO8859-15@euro,es,es_MX,es_MX.ISO8859-1,fr,fr_CA,fr_CA.ISO8859-1,iso_8859_15
debug1: got kexinit: en_US.ISO8859-1,geo,lcttab,iso_8859_1,hi_IN.UTF-8,zh,zh.GBK,zh.UTF-8,zh_CN.EUC,zh_CN.GB18030,zh_CN.GBK,zh_CN.UTF-8,th,th_TH,th_TH.ISO8859-11,th_TH.TIS620,th_TH.UTF-8,zh_CN.EUC@pinyin,zh_CN.EUC@radical,zh_CN.EUC@stroke,zh_CN.GB18030@pinyin,zh_CN.GBK@pinyin,zh_CN.GB18030@radical,zh_CN.GB18030@stroke,zh_CN.GBK@radical,zh_CN.GBK@stroke,zh_CN.UTF-8@pinyin,zh_CN.UTF-8@radical,zh_CN.UTF-8@stroke,en_CA,en_CA.ISO8859-1,en_US,en_US.ISO8859-1,en_US.ISO8859-15,en_US.ISO8859-15@euro,es,es_MX,es_MX.ISO8859-1,fr,fr_CA,fr_CA.ISO8859-1,iso_8859_15
debug1: first kex follow: 0
debug1: reserved: 0
debug1: done
debug2: mac_init: found hmac-sha1
debug1: locale set to en_US.ISO8859-1
debug1: kex: server->client unable to decide common locale
debug1: kex: server->client aes128-cbc hmac-sha1 none en_US.ISO8859-1
debug2: mac_init: found hmac-sha1
debug1: locale set to en_US.ISO8859-1
debug1: kex: client->server unable to decide common locale
debug1: kex: client->server aes128-cbc hmac-sha1 none en_US.ISO8859-1
debug1: Sending SSH2_MSG_KEXDH_INIT.
debug1: bits set: 528/1024
debug1: Wait SSH2_MSG_KEXDH_REPLY.
debug1: Got SSH2_MSG_KEXDH_REPLY.
debug1: Host 'itsvr1' is known and matches the RSA host key.
debug1: Found key in //.ssh/known_hosts:3
debug1: bits set: 490/1024
debug1: ssh_rsa_verify: signature correct
debug1: Wait SSH2_MSG_NEWKEYS.
debug1: GOT SSH2_MSG_NEWKEYS.
debug1: send SSH2_MSG_NEWKEYS.
debug1: done: send SSH2_MSG_NEWKEYS.
debug1: done: KEX2.
debug1: send SSH2_MSG_SERVICE_REQUEST
debug1: service_accept: ssh-userauth
debug1: got SSH2_MSG_SERVICE_ACCEPT
debug1: authentications that can continue: publickey,password
debug3: start over, passed a different list
debug3: authmethod_lookup publickey
debug3: authmethod_is_enabled publickey
debug1: next auth method to try is publickey
debug2: userauth_pubkey_agent: no keys at all
debug2: userauth_pubkey_agent: no more keys
debug2: userauth_pubkey_agent: no message sent
debug1: key does not exist: //.ssh/identity
debug1: key does not exist: //.ssh/id_rsa
debug1: key does not exist: //.ssh/id_dsa
debug2: we did not send a packet, disable method
debug3: authmethod_lookup publickey
debug3: authmethod_lookup password
debug3: authmethod_is_enabled password
debug1: next auth method to try is password
ittest@itsvr1's password:
debug2: we sent a password packet, wait for reply
debug1: authentications that can continue: publickey,password
debug3: authmethod_lookup password
debug3: authmethod_is_enabled password
debug1: next auth method to try is password
Permission denied, please try again.
ittest@itsvr1's password:
debug2: we sent a password packet, wait for reply
debug1: authentications that can continue: publickey,password
debug3: authmethod_lookup password
debug3: authmethod_is_enabled password
debug1: next auth method to try is password
Permission denied, please try again.
ittest@itsvr1's password:
debug2: we sent a password packet, wait for reply
debug1: authentications that can continue: publickey,password
debug3: authmethod_lookup password
debug3: authmethod_is_enabled password
debug1: next auth method to try is password
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password
debug1: no more auth methods to try
Unable to find an authentication method
debug1: Calling cleanup 0x3ea50(0x0)
#
#



#
# pwd
/etc/ssh
#
# grep -i max sshd_config
# The maximum number of concurrent unauthenticated connections to sshd.
#MaxStartups 10:30:60
# Maximum number of retries for authentication
# Default is 6. Default (if unset) for MaxAuthTriesLog is MaxAuthTries / 2
MaxAuthTries    20      
MaxAuthTriesLog 10
#
#

xiazhen9842

这个SSH是你自己装的还是系统自带的啊。

lylklb

是系统自带的 !

waily

这个。。。简直没天理吗，厂家的人呢？

xiazhen9842

LZ,这里面改没改啊。ssh_config。#   PasswordAuthentication yes

waily

真纠结啊

lylklb

To 16F:

    ssh_config !?   这是Client使用的配置文件啊!!

lylklb

望哪位高人能出来鼎立相助一把啊 !!?

easybegin

有没有实际测试过ssh登录次数？

默认6次，偶测试，客户端ssh最大登录6次，但ssh -v是3次，LZ是啥情况？