Hi all,
I've installed Centify Express DirectManage Deployment Manager (Version: 5.3.1.368) and run a discovery across one of our internal ranges. Picked up a number of machines as I expect. I've picked a non-intrusive target to test against.
I'm attempting to authenticate to it using a private key through the application.
- I know the private key is good, the passphrase is correct, there's no firewalls between my machine and the target.
- I can successfully authenticate using that same private key using the version of PuTTY in the "${InstallDir}\External\putty.exe".
- I can successfully manually run the command that Centify Express DirectManage Deployment Manager is trying to connect with and it connects without issue:
...\External\putty.exe -ssh XXX.XXX.XXX.XXX -l root -i "z:\Path\to\my\private\key\privatekey.ppk" -P 22
However, when I try to "Refresh Computer Information" I get the following error in the "History" logs:
Wrong key format Please ensure the user/password is correct, or the computer is not shut down or behind a firewall. You may also disable the ping feature in Network Options.
On the server, I see the following in /var/log/auth.log
sshd[13915]: fatal: Read from socket failed: Connection reset by peer [preauth]
In the Centify Express DirectManage Deployment Manager logs, I see the following:
[2016-08-19 16:59:17.070 +0100] mmc.exe[7116,1] Verbose: ReportNode`1.get_ResultPaneReady: Result pane column unmatching Time - Host Name
[2016-08-19 16:59:17.070 +0100] mmc.exe[7116,1] Verbose: ReportNode`1.get_ResultPaneReady: Result pane column unmatching Time - Host Name
[2016-08-19 16:59:17.123 +0100] mmc.exe[7116,1] Verbose: ReportNode`1.get_ResultPaneReady: Result pane column unmatching Time - Host Name
[2016-08-19 16:59:17.465 +0100] mmc.exe[7116,1] Verbose: ReportNode`1.get_ResultPaneReady: Result pane column unmatching Time - Host Name
[2016-08-19 16:59:17.469 +0100] mmc.exe[7116,11] Information: {Centrify.DeploymentManager.Task.RefreshTask}ComputerTask.PrepareNetShellAndRun: NetIO Exception for computer 'XXXXXXXXXX' IP 'XXXXXXXXXXXX'
[2016-08-19 16:59:17.469 +0100] mmc.exe[7116,11] Information: {Centrify.DeploymentManager.Task.RefreshTask}ComputerTask.PrepareNetShellAndRun: Details: Granados.SSHC.SSHException: Wrong key format
[2016-08-19 16:59:17.469 +0100] mmc.exe[7116,11] Information: {Centrify.DeploymentManager.Task.RefreshTask}ComputerTask.PrepareNetShellAndRun: at Granados.SSHCV2.SSH2UserAuthKey.FromSECSHStyleStream(Stream strm, String passphrase)
[2016-08-19 16:59:17.469 +0100] mmc.exe[7116,11] Information: {Centrify.DeploymentManager.Task.RefreshTask}ComputerTask.PrepareNetShellAndRun: at Granados.SSHCV2.SSH2Connection.UserAuth()
[2016-08-19 16:59:17.469 +0100] mmc.exe[7116,11] Information: {Centrify.DeploymentManager.Task.RefreshTask}ComputerTask.PrepareNetShellAndRun: at Granados.SSHCV2.SSH2Connection.Connect(AbstractSocket s)
[2016-08-19 16:59:17.469 +0100] mmc.exe[7116,11] Information: {Centrify.DeploymentManager.Task.RefreshTask}ComputerTask.PrepareNetShellAndRun: at Granados.SSHC.SSHConnection.ConnectMain(SSHConnectionParameter param, ISSHConnectionEventReceiver receiver, ProtocolNegotiationHandler pnh, AbstractSocket s)
[2016-08-19 16:59:17.469 +0100] mmc.exe[7116,11] Information: {Centrify.DeploymentManager.Task.RefreshTask}ComputerTask.PrepareNetShellAndRun: at Centrify.NetIO.Ssh.Connection.Connect(String name, String user, String password, String identityFile, AuthenticationType authenticationType)
[2016-08-19 16:59:17.469 +0100] mmc.exe[7116,11] Information: {Centrify.DeploymentManager.Task.RefreshTask}ComputerTask.PrepareNetShellAndRun: at Centrify.NetIO.Ssh.NetShell..ctor(String host, String identityFile, String user, String pass, Int32 timeout, TextWriter log, TerminalCallback callback, IEnumerable`1 commands, IEnumerable`1 expectPatterns, String targetPrompt, Int32 sshPort)
[2016-08-19 16:59:17.469 +0100] mmc.exe[7116,11] Information: {Centrify.DeploymentManager.Task.RefreshTask}ComputerTask.PrepareNetShellAndRun: at Centrify.DeploymentManager.Task.ComputerTask.MakeNetShellBySshKey(String host, String user, String privateKeyPath, String passphrase, Int32 timeout, TextWriter log, TerminalCallback callback, IEnumerable`1 commands, IEnumerable`1 expectPatterns, String targetPrompt, Int32 sshPort)
[2016-08-19 16:59:17.469 +0100] mmc.exe[7116,11] Information: {Centrify.DeploymentManager.Task.RefreshTask}ComputerTask.PrepareNetShellAndRun: at Centrify.DeploymentManager.Task.ComputerTask.MakeNetShell(RunArguments args, String ipOrHost, Boolean isLogCommands)
[2016-08-19 16:59:17.469 +0100] mmc.exe[7116,11] Information: {Centrify.DeploymentManager.Task.RefreshTask}ComputerTask.PrepareNetShellAndRun: at Centrify.DeploymentManager.Task.ComputerTask.PrepareNetShellAndRun(RunArguments args, String ipOrHost)
[2016-08-19 16:59:17.473 +0100] mmc.exe[7116,1] Verbose: ReportNode`1.get_ResultPaneReady: Result pane column unmatching Time - Host Name
[2016-08-19 16:59:17.479 +0100] mmc.exe[7116,11] Information: {Centrify.DeploymentManager.Task.RefreshTask}ComputerTask.Run: Ping failed for computer XXXXXXXXXXX.
[2016-08-19 16:59:17.481 +0100] mmc.exe[7116,1] Verbose: ReportNode`1.get_ResultPaneReady: Result pane column unmatching Time - Host Name
[2016-08-19 16:59:17.514 +0100] mmc.exe[7116,11] Verbose: {Centrify.DeploymentManager.Task.RefreshTask}Manager.AnnounceChange: Notification: Computer
[2016-08-19 16:59:17.515 +0100] mmc.exe[7116,11] Verbose: {Centrify.DeploymentManager.Task.RefreshTask}Manager.AnnounceChange: Notification: ComputerHistory
[2016-08-19 16:59:17.515 +0100] mmc.exe[7116,11] Verbose: {Centrify.DeploymentManager.Task.RefreshTask}Manager.AnnounceChange: Notification: ComputerHistoryError
[2016-08-19 16:59:17.515 +0100] mmc.exe[7116,11] Verbose: {Centrify.DeploymentManager.Task.RefreshTask}Manager.AnnounceChange: Notification: ToDo
[2016-08-19 16:59:17.519 +0100] mmc.exe[7116,1] Verbose: ReportNode`1.get_ResultPaneReady: Result pane column unmatching Time - Host Name
[2016-08-19 16:59:17.519 +0100] mmc.exe[7116,1] Verbose: ReportNode`1.get_ResultPaneReady: Result pane column unmatching Time - Host Name(for clarity, I've blanked out the hostname and IP with "XXXXXXXXXXX")
I can successfully connect using the username and password. It's just when using the private key through the application I get this issue.
- I get the same issue on another server I've tried.
- The private key is a 2048 RSA key so should be supported.
- The target server is Ubuntu 12.04.5
- OpenSSH is stock from the Ubuntu repos (version 1:5.9p1-5ubuntu1.10)
Any ideas? I don't seem to be able to find anybody else who has had this issue. Googling any combination of the errors I'm seeing either take me to Chinese websites or site saying I'm being DDoS'd by China.
Cheers,
Sam