Re: Authentication with SSH using public keys



In <200810311652.38230.af300wsm@xxxxxxxxx>, Andrew Falanga wrote:
Hi,

My father recently setup a new 7.0-Release system for some web development. I use ssh to login remotely. I've normally not had any trouble configuring authentication through public key encryption using ssh-keygen and such. I have for myself a id_rsa.pub and an id_rsa key pair that I use for this purpose.

Normally, I just copy, via scp, the file id_rsa.pub to my ~/.ssh/authorized_keys file on the remote host and the next time I attempt a login all is well. That is, I don't have to enter my password. However, on my Dad's new machine, this isn't the case. I still have to enter the password.

Now, I've looked through his /etc/ssh/sshd_config file and nothing in there looks odd, or different, from other remote hosts I do this on. So, I'm embedding a copy/paste of an ssh login session on my father's host using -v -v to ssh:

[/usr/home/andy/MCH]
-> ssh -v -v malumgat

[...]

debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: /home/andy/.ssh/identity
debug1: Offering public key: /home/andy/.ssh/id_rsa
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey,keyboard-interactive

It seems OpenSSH (on your dad's box) hasn't recognized your private key, so how about checking permissions of ~/.ssh/authorized_keys and ~/.ssh on his box. Or how about enabling verbose logging on his box, using 'LogLevel' parameter in sshd_config.

HTH
Ashish Shukla
--
·-- ·- ···· ·--- ·- ···- ·- ·--·-· --· -- ·- ·· ·-·· ·-·-·- -·-· --- --
() ascii ribbon campaign - against HTML e-mail
/\ www.asciiribbon.org - against proprietary attachments

Attachment: pgp438P3vQKnZ.pgp
Description: PGP signature



Relevant Pages

  • Re: Authentication with SSH using public keys
    ... I use ssh to login remotely. ... there looks odd, or different, from other remote hosts I do this on. ... The permissions on the machine where it doesn't work: ...
    (freebsd-questions)
  • Re: reverse SSH / SSH over NAT traversal
    ... The remote host is behind a NAT/firewall and it's not possible to ask the admin to tunnel a port. ... can the remote user type in some command in their terminal to connect (SSH?) to my network - and thereby allow me to get a terminal on the remote machine. ... I think this is possible with a reverse SSH tunnel - but I don't really want to allow the remote user any access to my system. ...
    (Fedora)
  • Re: Remote login, graphically?
    ... I have installed Ubuntu on my mother's machine. ... I have tunneled X through SSH with: ... Also, I'd like to start "from scratch" and login to her machine via GDM, ... In Gnome there is an option, Remote access (or ...
    (Ubuntu)
  • Re: reverse SSH / SSH over NAT traversal
    ... The remote host is behind a NAT/firewall and it's not possible to ask the admin to tunnel a port. ... can the remote user type in some command in their terminal to connect (SSH?) to my network - and thereby allow me to get a terminal on the remote machine. ...
    (Fedora)
  • SCP via SSH tunnel works, then not, then works again
    ... I am using SSH to perform local port forwarding from my local machine ... to a remote machine behind a firewall at a remote site ... back to remote host RA, ...
    (comp.security.ssh)