Bug 357354

Description David Whitmarsh 2011-09-12 05:08:28 EDT

Build Identifier: 20110301-1815

Using a dsa key produced by ssh-keygen on the Windows PC, public key installed on a remote Linux host - versions:

cohadmin@sol45a-7201:> uname -a
Linux sol45a-7201 2.6.16.60-0.69.1-smp #1 SMP Fri Sep 17 17:07:54 UTC 2010 x86_64 x86_64 x86_64 GNU/Linux

cohadmin@sol45a-7201:> ssh -v
OpenSSH_4.2p1, OpenSSL 0.9.8a 11 Oct 2005

$ uname -a
CYGWIN_NT-5.1 wlon1907063013 1.7.9(0.237/5/3) 2011-03-29 10:10 i686 Cygwin

In Eclipse preference|Network Connections|SSH|Authentication Methods, I have tried various combinations of preferred authentication methods but am unable to connect using the key/passphrase. All options prompt for "password", if password authentication is enabled, and the remote user I am connecting as supports password authentication, then it workss otherwise I get "auth fail". The key does work when using openssh from Cygwin, when imported into Putty, or transferred to a Linux host and connecting from that host via openssh so this is not an issue with openssh, keys, or passphrases.

Also, documentation on how to configure an ssh connection in RSE is out of date.

Reproducible: Always

Steps to Reproduce:
1. Create an id_dsa key using Cygwin ssh-keygen
2. copy id_dsa.pub to a remote host ~/.ssh/authorized_keys2 file
3. test that you can connect using the certificate and passphrase via ssh command line client (cygwin)
4. Configure host connection in RSE, configure preferences|general|network connections|ssh2|authentication methods to enable only "publickey"
5. Right click on host in "Remote Systems" View and select "connect"
6. Enter remote system login name as "User ID", leave "Password (optional)" blank
7. Click ok
8. Login message from remote host is displayed, in my case "UNAUTHORISED ACCESS TO THIS SYSTEM IS STRICTLY PROHIBITED.... etc", but that's config on our system. Click OK
9. "Password Required" dialogue displayed with sub-heading "Passphrase for H:\cygwin\home\dwhitma4\.ssh\id_dsa", somewhat confusing but recorded as a bug elsewhere. Enter passphrase and click OK. The dialogue is now displayed again, seems to be an infinite loop.

If "password" is enabled in authentication method with lower priority than public key, the infinite loop breaks, but login fails even if the remote user has password authentication enabled. I can connect to those users that have password authentication enabled if I disable key authentication, however I do need to connect as a user that does not have password authentication enabled.