Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Secure-Shell
[Top] [All Lists]

Postponed authentication message in syslogs

Subject: Postponed authentication message in syslogs
Date: Mon, 09 Jul 2007 10:21:26 +1000
Hi list,

This is a repost.  My apologies but the last one had the wrong subject line.

This question concerns: OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003, and possibly
other versions.

I've noticed the following error message appears frequently in syslogs for many
systems I administer:

---snip---
Jun 28 09:02:31 hostname sshd[8062]: Postponed publickey for account from
ip_address port 39397 ssh2
---snip---

What does "postponed" mean in this context?  When I test public key
authentication, I can authenticate successfully.  There doesn't appear to be any
(noticeable) delay when authenticating.

I've searched this list and googled around for this error message.  Others have
asked about it but I haven't found a reply that adequately explains what is
really going on.

Does this indicate a problem with a client/server configuration or is the
message purely informational?

Thanks,

Paul

<Prev in Thread] Current Thread [Next in Thread>