# Authentication Error
**URL:** https://forums.suse.com/t/authentication-error/26195
**Category:** SLES Configure-Administer
**Created:** [October 9, 2014, 10:44am UTC](https://forums.suse.com/t/authentication-error/26195 "2014-10-09T10:44:11Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@z1tr0n](https://forums.suse.com/u/z1tr0n)
#### Post date: [October 9, 2014, 10:44am UTC](https://forums.suse.com/t/authentication-error/26195/1 "2014-10-09T10:44:11Z")
Hi All,
I need help on my suse system. I am getting this error and i can’t run script that require me to ssh from another system to this system. Error logs as below. Any advise?
Oct 9 00:13:14 my00bkeb-p sshd[17257]: Accepted publickey for nagios from 145.64.127.130 port 33632 ssh2
Oct 9 00:13:14 my00bkeb-p sudo: nagios : TTY=unknown ; PWD=/home/nagios ; USER=root ; COMMAND=/etc/init.d/apache2 status
Oct 9 00:13:30 my00bkeb-p sshd[17309]: error: PAM: Authentication failure for eccroot from 145.64.127.130
Oct 9 00:13:30 my00bkeb-p sshd[17309]: error: PAM: Authentication failure for eccroot from 145.64.127.130
Oct 9 00:13:30 my00bkeb-p sshd[17312]: error: PAM: Authentication failure for eccroot from 145.64.127.130
Oct 9 00:13:30 my00bkeb-p sshd[17309]: error: PAM: Authentication failure for eccroot from 145.64.127.130
Oct 9 00:13:30 my00bkeb-p sshd[17312]: error: PAM: Authentication failure for eccroot from 145.64.127.130
Oct 9 00:13:31 my00bkeb-p sshd[17312]: error: PAM: Authentication failure for eccroot from 145.64.127.130
Oct 9 00:13:31 my00bkeb-p sshd[17318]: error: PAM: Authentication failure for eccroot from 145.64.127.130
Oct 9 00:13:31 my00bkeb-p sshd[17318]: error: PAM: Authentication failure for eccroot from 145.64.127.130
Oct 9 00:13:31 my00bkeb-p sshd[17318]: error: PAM: Authentication failure for eccroot from 145.64.127.130
Oct 9 00:13:33 my00bkeb-p sshd[17324]: error: PAM: Authentication failure for eccroot from 145.64.127.130
Oct 9 00:13:34 my00bkeb-p sshd[17324]: error: PAM: Authentication failure for eccroot from 145.64.127.130
Oct 9 00:13:34 my00bkeb-p sshd[17324]: error: PAM: Authentication failure for eccroot from 145.64.127.130
Oct 9 00:13:34 my00bkeb-p sshd[17329]: error: PAM: Authentication failure for eccroot from 145.64.127.130
Oct 9 00:13:34 my00bkeb-p sshd[17329]: error: PAM: Authentication failure for eccroot from 145.64.127.130
Oct 9 00:13:34 my00bkeb-p sshd[17329]: error: PAM: Authentication failure for eccroot from 145.64.127.130
Regards
Wan
---
### Author:  [@mikewillis](https://forums.suse.com/u/mikewillis)
#### Post date: [October 9, 2014, 11:52am UTC](https://forums.suse.com/t/authentication-error/26195/2 "2014-10-09T11:52:33Z")
> [@z1tr0n;24083](#):
>
> I need help on my suse system.
It would help a lot to know which version of SUSE you are using. Can you post the output of this command
```auto
$ cat /etc/*release*
```
> [@z1tr0n;24083](#):
>
> I am getting this error and i can’t run script that require me to ssh from another system to this system. Error logs as below. Any advise?
>
> Oct 9 00:13:14 my00bkeb-p sshd[17257]: Accepted publickey for nagios from 145.64.127.130 port 33632 ssh2
> Oct 9 00:13:14 my00bkeb-p sudo: nagios : TTY=unknown ; PWD=/home/nagios ; USER=root ; COMMAND=/etc/init.d/apache2 status
> Oct 9 00:13:30 my00bkeb-p sshd[17309]: error: PAM: Authentication failure for eccroot from 145.64.127.130
> Oct 9 00:13:30 my00bkeb-p sshd[17309]: error: PAM: Authentication failure for eccroot from 145.64.127.130
> Oct 9 00:13:30 my00bkeb-p sshd[17312]: error: PAM: Authentication failure for eccroot from 145.64.127.130
> Oct 9 00:13:30 my00bkeb-p sshd[17309]: error: PAM: Authentication failure for eccroot from 145.64.127.130
> Oct 9 00:13:30 my00bkeb-p sshd[17312]: error: PAM: Authentication failure for eccroot from 145.64.127.130
> Oct 9 00:13:31 my00bkeb-p sshd[17312]: error: PAM: Authentication failure for eccroot from 145.64.127.130
> Oct 9 00:13:31 my00bkeb-p sshd[17318]: error: PAM: Authentication failure for eccroot from 145.64.127.130
> Oct 9 00:13:31 my00bkeb-p sshd[17318]: error: PAM: Authentication failure for eccroot from 145.64.127.130
> Oct 9 00:13:31 my00bkeb-p sshd[17318]: error: PAM: Authentication failure for eccroot from 145.64.127.130
> Oct 9 00:13:33 my00bkeb-p sshd[17324]: error: PAM: Authentication failure for eccroot from 145.64.127.130
> Oct 9 00:13:34 my00bkeb-p sshd[17324]: error: PAM: Authentication failure for eccroot from 145.64.127.130
> Oct 9 00:13:34 my00bkeb-p sshd[17324]: error: PAM: Authentication failure for eccroot from 145.64.127.130
> Oct 9 00:13:34 my00bkeb-p sshd[17329]: error: PAM: Authentication failure for eccroot from 145.64.127.130
> Oct 9 00:13:34 my00bkeb-p sshd[17329]: error: PAM: Authentication failure for eccroot from 145.64.127.130
> Oct 9 00:13:34 my00bkeb-p sshd[17329]: error: PAM: Authentication failure for eccroot from 145.64.127.130
The problem is that the user eccroot cannot log in to my00bkeb-p via ssh, correct?
---
### Author:  [@z1tr0n](https://forums.suse.com/u/z1tr0n)
#### Post date: [October 13, 2014, 11:33am UTC](https://forums.suse.com/t/authentication-error/26195/3 "2014-10-13T11:33:07Z")
Hi mikewillis,
Thanks for replying.
Below is the output.
my00bkeb-p:/etc # cat /proc/version
Linux version 2.6.16.60-0.23-bigsmp (geeko@buildhost) (gcc version 4.1.2 20070115 (SUSE Linux)) #1 SMP Thu May 15 06:38:31 UTC 2008
my00bkeb-p:/etc # cat /etc/issue
Welcome to SUSE Linux Enterprise Server 10 SP2 (i586) - Kernel \r (\l).
We are able to log in via ssh manually but when i tried using script that is built in we got below error message.
Executing /etc/rc.eptos-sopr/init.d/bke\_soprano stop
Permission denied (publickey,keyboard-interactive) .
Permission denied (publickey,keyboard-interactive) .
Below are my sshd\_config and ssh\_config output for your reference.
my00bkeb-p:/etc/ssh # cat sshd\_config
# $OpenBSD: sshd\_config,v 1.72 2005/07/25 11:59:40 markus Exp $
# This is the sshd server system-wide configuration file. See
# sshd\_config(5) for more information.
# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin
# The strategy used for options in the default sshd\_config shipped with
# OpenSSH is to specify options with their default value where
# possible, but leave them commented. Uncommented options change a
# default value.
#Port 22
#Protocol 2,1
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::
# HostKey for protocol version 1
#HostKey /etc/ssh/ssh\_host\_key
# HostKeys for protocol version 2
#HostKey /etc/ssh/ssh\_host\_rsa\_key
#HostKey /etc/ssh/ssh\_host\_dsa\_key
# Lifetime and size of ephemeral version 1 server key
#KeyRegenerationInterval 1h
#ServerKeyBits 768
# Logging
# obsoletes QuietMode and FascistLogging
#SyslogFacility AUTH
#LogLevel INFO
# Authentication:
#LoginGraceTime 2m
#PermitRootLogin yes
#StrictModes yes
#MaxAuthTries 6
#RSAAuthentication yes
#PubkeyAuthentication yes
#AuthorizedKeysFile .ssh/authorized\_keys
# For this to work you will also need host keys in /etc/ssh/ssh\_known\_hosts
#RhostsRSAAuthentication no
# similar for protocol version 2
#HostbasedAuthentication no
# Change to yes if you don’t trust ~/.ssh/known\_hosts for
# RhostsRSAAuthentication and HostbasedAuthentication
#IgnoreUserKnownHosts no
# Don’t read the user’s ~/.rhosts and ~/.shosts files
#IgnoreRhosts yes
# To disable tunneled clear text passwords, change to no here!
PasswordAuthentication no
#PermitEmptyPasswords no
# Change to no to disable s/key passwords
#ChallengeResponseAuthentication yes
# Kerberos options
#KerberosAuthentication no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
#KerberosGetAFSToken no
# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes
# Set this to ‘yes’ to enable support for the deprecated ‘gssapi’ authentication
# mechanism to OpenSSH 3.8p1. The newer ‘gssapi-with-mic’ mechanism is included
# in this release. The use of ‘gssapi’ is deprecated due to the presence of
# potential man-in-the-middle attacks, which ‘gssapi-with-mic’ is not susceptible to.
#GSSAPIEnableMITMAttack no
# Set this to ‘yes’ to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will
# be allowed through the ChallengeResponseAuthentication mechanism.
# Depending on your PAM configuration, this may bypass the setting of
# PasswordAuthentication, PermitEmptyPasswords, and
# “PermitRootLogin without-password”. If you just want the PAM account and
# session checks to run without PAM authentication, then enable this but set
# ChallengeResponseAuthentication=no
UsePAM yes
#AllowTcpForwarding yes
#GatewayPorts no
X11Forwarding yes
#X11DisplayOffset 10
#X11UseLocalhost yes
#PrintMotd yes
#PrintLastLog yes
#TCPKeepAlive yes
#UseLogin no
#UsePrivilegeSeparation yes
#PermitUserEnvironment no
#Compression delayed
#ClientAliveInterval 0
#ClientAliveCountMax 3
#UseDNS yes
#PidFile /var/run/sshd.pid
#MaxStartups 10
# no default banner path
#Banner /some/path
# override default of no subsystems
Subsystem sftp /usr/lib/ssh/sftp-server
# This enables accepting locale enviroment variables LC\_\* LANG, see sshd\_config(5).
AcceptEnv LANG LC\_CTYPE LC\_NUMERIC LC\_TIME LC\_COLLATE LC\_MONETARY LC\_MESSAGES
AcceptEnv LC\_PAPER LC\_NAME LC\_ADDRESS LC\_TELEPHONE LC\_MEASUREMENT
AcceptEnv LC\_IDENTIFICATION LC\_ALL
UseDNS no
Protocol 2
ssh\_config outpt below
my00bkeb-p:/etc/ssh # cat ssh\_config
# $OpenBSD: ssh\_config,v 1.20 2005/01/28 09:45:53 dtucker Exp $
# This is the ssh client system-wide configuration file. See
# ssh\_config(5) for more information. This file provides defaults for
# users, and the values can be changed in per-user configuration files
# or on the command line.
# Configuration data is parsed as follows:
# 1. command line options
# 2. user-specific file
# 3. system-wide file
# Any configuration value is only changed the first time it is set.
# Thus, host-specific definitions should be at the beginning of the
# configuration file, and defaults at the end.
# Site-wide defaults for some commonly used options. For a comprehensive
# list of available options, their meanings and defaults, please see the
# ssh\_config(5) man page.
Host \*
# ForwardAgent no
# ForwardX11 no
# If you do not trust your remote host (or its administrator), you
# should not forward X11 connections to your local X11-display for
# security reasons: Someone stealing the authentification data on the
# remote side (the “spoofed” X-server by the remote sshd) can read your
# keystrokes as you type, just like any other X11 client could do.
# Set this to “no” here for global effect or in your own ~/.ssh/config
# file if you want to have the remote X11 authentification data to
# expire after two minutes after remote login.
ForwardX11Trusted yes
# RhostsRSAAuthentication no
# RSAAuthentication yes
# PasswordAuthentication yes
# HostbasedAuthentication no
# BatchMode no
# CheckHostIP yes
# AddressFamily any
# ConnectTimeout 0
# StrictHostKeyChecking ask
# IdentityFile ~/.ssh/identity
# IdentityFile ~/.ssh/id\_rsa
# IdentityFile ~/.ssh/id\_dsa
# Port 22
# Protocol 2,1
# Cipher 3des
# Ciphers aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc
# EscapeChar ~
# GSSAPIAuthentication no
# GSSAPIDelegateCredentials no
# Set this to ‘yes’ to enable support for the deprecated ‘gssapi’ authentication
# mechanism to OpenSSH 3.8p1. The newer ‘gssapi-with-mic’ mechanism is included
# in this release. The use of ‘gssapi’ is deprecated due to the presence of
# potential man-in-the-middle attacks, which ‘gssapi-with-mic’ is not susceptible to.
# GSSAPIEnableMITMAttack no
# This enables sending locale enviroment variables LC\_\* LANG, see ssh\_config(5).
SendEnv LANG LC\_CTYPE LC\_NUMERIC LC\_TIME LC\_COLLATE LC\_MONETARY LC\_MESSAGES
SendEnv LC\_PAPER LC\_NAME LC\_ADDRESS LC\_TELEPHONE LC\_MEASUREMENT
SendEnv LC\_IDENTIFICATION LC\_ALL
StrictHostKeyChecking no
ConnectTimeout 20
---
### Author:  [@mikewillis](https://forums.suse.com/u/mikewillis)
#### Post date: [October 13, 2014, 3:24pm UTC](https://forums.suse.com/t/authentication-error/26195/4 "2014-10-13T15:24:14Z")
For future reference, wrapping output of commands and contents of files in CODE tags takes posts much easier to read. (Look for the # button in toolbar when composing.)
You’re using an End Of Life version of SLES which doesn’t have all the updates it could/should have installed. SLES 10 SP2 which went End Of Life years ago. A quick look on Patch Finder shows that there were kernel updates released after version 2.6.16.60-0.23.
It’s still not clear what you’re trying to do. I think you’ve got a script in which you are expecting to be able to ssh in to another machine to run some commands, is that correct? If so are you using ssh keys to do the authentication? If now, how is the authentication being attempted?
---
### Author:  [@z1tr0n](https://forums.suse.com/u/z1tr0n)
#### Post date: [October 16, 2014, 7:04am UTC](https://forums.suse.com/t/authentication-error/26195/5 "2014-10-16T07:04:04Z")
Hi mikewills,
Apologize for posting the logs/config in this thread. This is my first post here and i will surely follow your guideline next time i posted up anything.
Back to the issue. We actually have a script tied up to a monitoring application which is Nagios. Previously everything seems to work. We can execute start,stop and show status using the script to stop our application. However about 6 months back we are unable to execute all of the option available and get above errors. is there strange thing about the config files attached before?
---
### Author:  [@mikewillis](https://forums.suse.com/u/mikewillis)
#### Post date: [October 16, 2014, 2:40pm UTC](https://forums.suse.com/t/authentication-error/26195/6 "2014-10-16T14:40:06Z")
> [@z1tr0n;24192](#):
>
> Apologize for posting the logs/config in this thread. This is my first post here and i will surely follow your guideline next time i posted up anything.
It’s OK to post logs/config, it’s just that unless you wrap it in CODE tags they can be be very difficult to read and not obvious where they end. (If you do post such things you should also check first that it doesn’t contain anything potentially sensitive, like passwords.)
[QUOTE=z1tr0n;24192]
Back to the issue. We actually have a script tied up to a monitoring application which is Nagios. Previously everything seems to work. We can execute start,stop and show status using the script to stop our application. However about 6 months back we are unable to execute all of the option available and get above errors. is there strange thing about the config files attached before?[/QUOTE]
I don’t see anything strange about the config files, I suspect they’re probably defaults but I don’t have a copy of SLES 10 SP2 to compare against. (Note my previous comments about SLES 10 SP2 being End Of Life.)
When stuff stops working it’s (obviously) because something changed. Updates are an obvious potential candidate for changing things, but given the lack of updates on the server that seems less likely. What changes were made to any relevant systems about 6 months ago? You haven’t explained exactly how authentication is being done. Can you log in as the user manually? E.g.
```auto
$ ssh eccroot@my00bkeb-p
```
I’m assuming the usercode and hostname from the contents of your first post.