Re: SSH to IBMi

I have a Websphere Jython script that has been tested and works fine. I
can call it from PuTTY with no problems. (I had to replace the qsh bash
with sh to work outside of QShell.) Now I am trying to call the script via
SSH and it fails with the “permission denied” error. It appears the SSH
connection is working fine but I’m puzzled why it fails after that. The
verbose log is below. I don’t know if there is a problem with the SSH
command itself or the SSH server setup. Any guidance is appreciated.


SSH: Connecting from host [SVN-IT-R001]
SSH: Connecting with configuration [webt1] ...
SSH: EXEC: STDOUT/STDERR from command [ssh -t -t -v webt1
"/QIBM/UserData/WebSphere/AppServer/V8/Express/profiles/WSPROD80T2/bin/wsadmin2
-user jenkins -password zzzz -lang jython -f
/apps/WebAppData/installation/ideploy.py MyEAR
/apps/WebAppData/installation/EAR/MyEAR-1.02.3.0.ear"] ...
OpenSSH_6.6, OpenSSL 1.0.1p 9 Jul 2015
debug1: Reading configuration data
/QOpenSys/QIBM/ProdData/SC1/OpenSSH/openssh-4.7p1/etc/ssh_config
debug1: Connecting to webt1 [10.31.107.40] port 22.
debug1: Connection established.
debug1: identity file /home/JENKINS/.ssh/id_rsa type -1
debug1: identity file /home/JENKINS/.ssh/id_rsa-cert type -1
debug1: identity file /home/JENKINS/.ssh/id_dsa type -1
debug1: identity file /home/JENKINS/.ssh/id_dsa-cert type -1
debug1: identity file /home/JENKINS/.ssh/id_ecdsa type -1
debug1: identity file /home/JENKINS/.ssh/id_ecdsa-cert type -1
debug1: identity file /home/JENKINS/.ssh/id_ed25519 type -1
debug1: identity file /home/JENKINS/.ssh/id_ed25519-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.6
debug1: Remote protocol version 2.0, remote software version OpenSSH_6.6
debug1: match: OpenSSH_6.6 pat OpenSSH* compat 0x04000000
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-ctr hmac-md5-etm@xxxxxxxxxxx none
debug1: kex: client->server aes128-ctr hmac-md5-etm@xxxxxxxxxxx none
debug1: sending SSH2_MSG_KEX_ECDH_INIT
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: Server host key: ECDSA
84:38:d8:88:8e:7b:30:c3:90:8c:1b:ac:52:cf:cf:33
debug1: Host 'webt1' is known and matches the ECDSA host key.
debug1: Found key in /home/JENKINS/.ssh/known_hosts:1
debug1: ssh_ecdsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue:
publickey,password,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: /home/JENKINS/.ssh/id_rsa
debug1: Trying private key: /home/JENKINS/.ssh/id_dsa
debug1: Trying private key: /home/JENKINS/.ssh/id_ecdsa
debug1: Trying private key: /home/JENKINS/.ssh/id_ed25519
debug1: Next authentication method: keyboard-interactive
debug1: Authentications that can continue:
publickey,password,keyboard-interactive
debug1: Next authentication method: password
debug1: read_passphrase: can't open /dev/tty: No such device or address
debug1: Authentications that can continue:
publickey,password,keyboard-interactive
Permission denied, please try again.
debug1: read_passphrase: can't open /dev/tty: No such device or address
debug1: Authentications that can continue:
publickey,password,keyboard-interactive
Permission denied, please try again.
debug1: read_passphrase: can't open /dev/tty: No such device or address
debug1: Authentications that can continue:
publickey,password,keyboard-interactive
debug1: No more authentication methods to try.
Permission denied (publickey,password,keyboard-interactive).
SSH: EXEC: completed after 1,014 ms
SSH: Disconnecting configuration [webt1] ...
ERROR: Exception when publishing, exception message [Exec exit status not
zero. Status [255]]


Todd Allen
Estes Express Lines
804-353-1900 x2283
tallen@xxxxxxxxxxxxxxxxx<mailto:tallen@xxxxxxxxxxxxxxxxx>
www.estes-express.com<http://www.estes-express.com>


For More Than 80 Years—Delivering Solutions That Exceed Expectations.

This communication and any transmitted documents are intended to be
confidential. If there is a problem with this transmission, please contact
the sender. If the reader of this message is not the intended recipient, or
the employee or agent responsible to deliver it to the intended recipient,
you are hereby notified that any dissemination, distribution or copying of
this communication is strictly prohibited.
--
This is the Java Programming on and around the IBM i (JAVA400-L) mailing
list
To post a message email: JAVA400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/java400-l
or email: JAVA400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/java400-l.