Dotaz: ssh-keygen - klíče nefungují

[Johny z Podoli]

Nikdy jsem klíče nepoužíval, nicméně je opruz stále spát hesla... co dělám špatně? Stále to nechodí.

generuji klíč pod rootem

karin:~/.ssh# ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
5a:de:59:4b:c3:cc:af:b6:4f:a1:ec:f2:4a:68:d7:ef root@karin
karin:~/.ssh#                                                   

kopíruji na server..

karin:~/.ssh# scp id_rsa.pub server.org:/root/.ssh/authorized_keys2
Weocome on server.org
Password:
id_rsa.pub                                                                                                                                                          100%  220     0.2KB/s   00:00
karin:~/.ssh#

a teď se chci s klíčem přihlásit ale stále chce heslo :(

karin:~/.ssh# ssh -v podoli.org
OpenSSH_3.8.1p1 Debian-8.sarge.4, OpenSSL 0.9.7g 11 Apr 2005
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Connecting to server.org [82.33.18.193] port 22.
debug1: Connection established.
debug1: identity file /root/.ssh/identity type -1
debug1: identity file /root/.ssh/id_rsa type 1
debug1: identity file /root/.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_4.1p1 Debian-7
debug1: match: OpenSSH_4.1p1 Debian-7 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.8.1p1 Debian-8.sarge.4
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'server.org' is known and matches the RSA host key.
debug1: Found key in /root/.ssh/known_hosts:3
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
Weocome on gw.server.org
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: /root/.ssh/identity
debug1: Offering public key: /root/.ssh/id_rsa
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: Trying private key: /root/.ssh/id_dsa
debug1: Next authentication method: keyboard-interactive
Password:              

co dělám špatně?

dík, Johny

Odpovědi

[Johny z Podoli]

vyřešeno: problém byl v:

drwxrwxrwx   22 root root    1456 Sep 14 17:12 root

ssh tomu klíči prostě nevěřil :)

sem mamlas, Johny

[holy]

nechapu jak se to vyresilo, ze mel plny prava ci co?

[trancelius]

ssh klíč discarduje, pokud je čitelný někým jiným, než vlastníkem

[holy]

prava jsou nastaveny pouze pro roota, ale stejne to chce heslo.

[Johny z Podoli]

pokud do homu toho usera muze i nekdo jinej tak sshd klíč nebere...

a já měl práva 777 ...

Johny

[Josef Kufner]

Koukni do configu sshd jestli tam nahodou neni

permitrootlogin no

a pak zkus prejmenovat authorized_keys2 na atuhorized_keys