Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 357354 - RSE ssh connection to Linux host using dsa key and passphrase fails to connect
Summary: RSE ssh connection to Linux host using dsa key and passphrase fails to connect
Status: NEW
Alias: None
Product: Target Management
Classification: Tools
Component: RSE (show other bugs)
Version: unspecified   Edit
Hardware: PC Windows XP
: P3 normal with 1 vote (vote)
Target Milestone: ---   Edit
Assignee: dsdp.tm.rse-inbox CLA
QA Contact: Martin Oberhuber CLA
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-09-12 05:08 EDT by David Whitmarsh CLA
Modified: 2014-01-20 17:07 EST (History)
4 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description David Whitmarsh CLA 2011-09-12 05:08:28 EDT
Build Identifier: 20110301-1815

Using a dsa key produced by ssh-keygen on the Windows PC, public key installed on a remote Linux host - versions:

cohadmin@sol45a-7201:> uname -a
Linux sol45a-7201 2.6.16.60-0.69.1-smp #1 SMP Fri Sep 17 17:07:54 UTC 2010 x86_64 x86_64 x86_64 GNU/Linux

cohadmin@sol45a-7201:> ssh -v
OpenSSH_4.2p1, OpenSSL 0.9.8a 11 Oct 2005

$ uname -a
CYGWIN_NT-5.1 wlon1907063013 1.7.9(0.237/5/3) 2011-03-29 10:10 i686 Cygwin

In Eclipse preference|Network Connections|SSH|Authentication Methods, I have tried various combinations of preferred authentication methods but am unable to connect using the key/passphrase. All options prompt for "password", if password authentication is enabled, and the remote user I am connecting as supports password authentication, then it workss otherwise I get "auth fail". The key does work when using openssh from Cygwin, when imported into Putty, or transferred to a Linux host and connecting from that host via openssh so this is not an issue with openssh, keys, or passphrases.

Also, documentation on how to configure an ssh connection in RSE is out of date.

Reproducible: Always

Steps to Reproduce:
1. Create an id_dsa key using Cygwin ssh-keygen
2. copy id_dsa.pub to a remote host ~/.ssh/authorized_keys2 file
3. test that you can connect using the certificate and passphrase via ssh command line client (cygwin)
4. Configure host connection in RSE, configure preferences|general|network connections|ssh2|authentication methods to enable only "publickey"
5. Right click on host in "Remote Systems" View and select "connect"
6. Enter remote system login name as "User ID", leave "Password (optional)" blank
7. Click ok
8. Login message from remote host is displayed, in my case "UNAUTHORISED ACCESS TO THIS SYSTEM IS STRICTLY PROHIBITED.... etc", but that's config on our system. Click OK
9. "Password Required" dialogue displayed with sub-heading "Passphrase for H:\cygwin\home\dwhitma4\.ssh\id_dsa", somewhat confusing but recorded as a bug elsewhere. Enter passphrase and click OK. The dialogue is now displayed again, seems to be an infinite loop.

If "password" is enabled in authentication method with lower priority than public key, the infinite loop breaks, but login fails even if the remote user has password authentication enabled. I can connect to those users that have password authentication enabled if I disable key authentication, however I do need to connect as a user that does not have password authentication enabled.
Comment 1 David Whitmarsh CLA 2011-12-02 10:55:02 EST
Now using 64-bit Indigo on Windows 7. Behaviour is exactly the same. It appears to be impossible to connect to a remote host using key/passphrase authentication.

Eclipse Java EE IDE for Web Developers.

Version: Indigo Service Release 1
Build id: 20110916-0149
Comment 2 Atsuhiko Yamanaka CLA 2012-10-16 10:22:27 EDT
> In Eclipse preference|Network Connections|SSH|Authentication Methods, I have
> tried various combinations of preferred authentication methods but am unable
> to connect using the key/passphrase.

Just for testing, is it possible to try the plain(unciphered) private key?
Comment 3 Jérôme Gras CLA 2014-01-20 17:07:14 EST
Issue is still present in 64bits version for Win7.

Eclipse Standard/SDK

Version: Kepler Service Release 1
Build id: 20130919-0819