Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Server A thinks it is called, but actually there's a problem (not in my control) with the DNS registration, so I connect to it at I want to be able to scp from there to server B using public key authentication. I did ssh-keygen, which created a public key ending in "" (and installed it in authorized_keys at the far end).

Problem: this public key isn't accepted, perhaps due to a problem with reverse lookup. (I'm reading between the lines here:

debug1: Trying private key: /home/rmmf/.ssh/identity
debug3: no such identity: /home/rmmf/.ssh/identity
debug1: Offering public key: /home/rmmf/.ssh/id_rsa
debug3: send_pubkey_test
debug2: we sent a publickey packet, wait for reply
debug3: Wrote 368 bytes for a total of 1477
debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password


Is a working DNS entry a prerequisite for pubkey authentication? Do I need to set this up differently? How can I find out if this is actually the problem?

share|improve this question
What kind of "DNS Problem"? Try to post your connection string also – Mathias R. Jessen Feb 1 '12 at 7:25
up vote 1 down vote accepted

Answering your question, DNS entry is not a prerequisite.

Did you add the content of your private key file on the /home/[your_user]/.ssh/authorized_keys file?

This file works like the locker to which your public key will be matched.

also, set this file permissions to 400 (chmod 400 /home/[your_user]/.ssh/authorized_keys) and be sure that it's owned by your user (chown [your_user] /home/[your_user]/.ssh/authorized_keys )

share|improve this answer
Thanks - I had done each of these things, except 600 instead of 400. – Steve Bennett Feb 1 '12 at 9:24

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.