The tag has no wiki summary.

learn more… | top users | synonyms

10
votes
2answers
956 views

Linux ssh: allow public-key authentication without giving user read rights to private key

Users logged in on my Linux server should be able to ssh to a specific remote machine with a default account. The authentication on the remote machine uses public key, so on the server the ...
-7
votes
1answer
51 views

Is the ssh key name a part of the authentication? [closed]

The ssh public keys in authorized_hosts have three parts - a type, the key and a name. For example, an rsa key might look like: ssh-rsa ...
-1
votes
1answer
32 views

How to pass the SSH_AUTH_SOCK through sudo (Permission denied (publickey).) [duplicate]

I have a Ubuntu server with the users: ubuntu and user I connect to each of the users using ssh -A (to pass my local machine keys to SSH). From any of the users I can connect to the SSH server of ...
-2
votes
2answers
30 views

SSH using ssh_key from a different account

Is there a way for a user to ssh as a different user using ssh_keys? For example, i have host A B and C. User X SSHes from A to B as himself ( A -- as X --> B ) Now the user wants to SSH to C from ...
2
votes
3answers
92 views

How to configure SSH access for key authentication for another client?

I know that if I want to configure SSH access for key authentication, I need to use the following command: ssh-keygen -b 2048 -t rsa -C “mypassphrase” I then need to copy the codes created in ...
-2
votes
3answers
144 views

Public Key authentication fails while using the -i parameter on ssh command

I have to do public key based authentication on two Linux servers. Machine 2 (192.168.3.132) username: vfx_30 home dir: /home/vfx_30 ssh keys: /home/vfx_30/.ssh/id_rsa /home/vfx_30/.ssh/id_rsa.pub ...
-1
votes
2answers
83 views

Add ssh public key to group instead of users on centos 6.5

I am a newbie to linux administration. I have a box with centos 6.5 x64. Ive been configuring ssh access via public/private key. Ive been wondering if I could add the public key to a user group ...
-1
votes
1answer
62 views

Will an established ssh connection survive a DNS migration? [closed]

If I add an ssh pubic key to a server using ssh-copy-id: ssh-copy-id -i ~/.ssh/my_id.pub user@server123.com Will I still be able to connect to the server using the hostname server123.com if the ...
-3
votes
1answer
47 views

Is uploading your openssh public key to ~/.ssh/ for a given user safe?

I like to upload my public key (eg: ~/.ssh/id_rsa.pub) to various servers that I connect to on various networks for work. I use this same public key on github. If I am on a shared user account and I ...
1
vote
2answers
339 views

SSH using publickey not working on debian (Permission denied (publickey,password).) with clean /var/log/auth.log

For some reason, ssh over publickey isn't working as expected. I've set this up before, and it's worked before on other machines. No idea what I'm doing wrong here... very verbose output of ssh ...
0
votes
1answer
82 views

Allow ssh access to git pull on remote machine

We have a server with some of our git repositories on and I would like to be able to clone one to our webserver (which runs debian). I ran ssh-keygen on the webserver and copied the public key into ...
1
vote
2answers
88 views

Looking for a way to get team public keys to EC2 instance autonomously

I am administering a single (now) ec2 instance which will provide some tools to our users. I am using Ansible to manage it. I have it set to create users using a mix of a Cron-job and Ansible (by ...
0
votes
1answer
208 views

How to set up Git on remote instance using keys from local machine?

I have a setup where I can ssh into my remote server (ie a Google Compute instance) from my local machine. I used to be able to clone, push, and pull from a repository on my remote instance without ...
1
vote
1answer
146 views

If I get an invalid public key error does that mean I have an incorrectly installed certificate

I have created an API (running on an nginx server, let me know if there are any details that you think are relevant) for a client and they received this error when trying to call my service: Notice: ...
3
votes
2answers
679 views

OpenSSH and PAM authentication using a public key

I'm looking for a way to authenticate users using a public key which is stored in a db (MongoDB). Similar questions usually resulted with a suggestion to installed a patched version of OpenSSH ...
0
votes
0answers
33 views

Copying over public keys within private network

As part of a cloud init script for an EC2 instance, I want to generate a private & public key for a user created on the new instance and then copy the public key over to another server in the same ...
2
votes
2answers
191 views

SSH key and ip address

A co-worker keeps mentioning SSH keys being associates with an IP address but Im not sure what it exactly means. So i tried generating a SSH key and it had my host name at the end of the file. This ...
0
votes
1answer
75 views

SSH attacks, how do their usernames end up in auth.log? (pw auth disabled)

So this computer is reachable on port 22 (from everywhere). Since messages indicating failed login attempts (usernames like root, cgi, bash, production...) have been flooding /var/log/auth.log, I have ...
0
votes
1answer
71 views

Automatically send public key to github account

I want to automatically add public key from newly created machine to github account (so it could checkout organization projects). Is there any simple way to do that? Machine OS is Debian Wheezy.
1
vote
0answers
82 views

Passwordless public key is not working

this is my fist help ask here despite being a daily reader in order to learn. I am working on a Unix environment (both Solaris and Aix servers) and my public key suddenly stopped working after ...
2
votes
1answer
162 views

User@host in a SSH-RSA public key

What role does the user@host that often appears at the end of a public ssh-rsa key play? Is it necessary? Does if serve any purpose in the authentication, or is it simply a record of who and where ...
2
votes
3answers
175 views

SSH connection with key is unreliable

Im an intern sysadmin for a small company. There's no real sysadmin in the place for me to ask when i encounter problems. Thanks for the help The company uses Nagios to monitor their web server. ...
0
votes
0answers
216 views

ssh server not accepting public/private keys (Cygwin)

I am trying to connect my computer to a ssh server (running on Windows 7) using public/private keys. I have generated the keys and used the necessary permissions for files: chmod 700 .ssh chmod 600 ...
1
vote
0answers
206 views

Linux TACACS+ auth for SSH but allow users to use public key auth

we have running tacacs environment for centralised login to our routers, firewalls etc and even most of our linux boxes to ssh what we would like to do is allow users to authenticate to SSH via ...
2
votes
3answers
504 views

Weird SSH Issue - Single host not allowing me to login via name

Can anyone explain this, because I have done everything from regenerating keys, to "leaving" and rejoining the domain (Centrify) for an SSH host that I can't seem to get to by a single client. All ...
2
votes
2answers
1k views

Setup public key authorized SSH for non-root users

I was able to setup ssh login using public keys for root users and tried to apply the same logic for non-root users. I have tried to troubleshoot this issue in vain. I am using centos for both my ...
0
votes
2answers
1k views

SSH private key to Ubuntu works from command line but not using Remmina

I have been trying to figure out why I can't get SSH working using Remmina SSH client. In an Ubuntu 12.10 environment, I can connect with my server from the command line using openssh server, like ...
1
vote
0answers
343 views

putty openssh rsa key signature invalid

I'm running a server with Debian Linux 3.2.46-1+deb7u1 with OpenSSH Server 6.0 and secured the login with a 2048 bit RSA key. Although connecting with OpenSSH Client from another machine succeeds, ...
2
votes
0answers
136 views

configure OpenSSH to prefer public key auth, fall back to empty password auth

I would like to configure OpenSSH 6.2p2 for a service account (we'll call it "serviceacct") with an empty password which does the following: First try public key authentication; if it succeeds then ...
2
votes
2answers
297 views

Permission denied (publickey)

I'm unable to ssh into my ubuntu server (I used to be able to but haven't tried for a couple of months). usually I use ssh user@ipaddress but I get the error Permission denied (publickey). so I ...
0
votes
0answers
82 views

Git / SSH authentication stopped working

I have a local gitolite install which I've configured to allow several users to access a repository. I went to check out some code yesterday and got prompted for a password - so I asked one of the ...
0
votes
2answers
54 views

Can not set up SSH Public Key Authentication

I did the following: Server A: ssh-keygen -t rsa (did not enter any passphrase) cat ~/.ssh/id_rsa.pub Server B: mkdir ~/.ssh chmod 0700 ~/.ssh touch ~/.ssh/authorized_keys chmod 0644 ...
3
votes
2answers
94 views

how is a website certificate file cryptographically readable by windows?

I have a .crt file signed by a CA. I cat the file to see that it is ascii text. Yet when I double click on the .crt file in windows, it opens it up and somehow displays all the information that's ...
1
vote
2answers
245 views

Windows 8 and SSL's EKU serverAuth flag?

I'm reading this tutorial which says, Your gateway certificate must have: An Extended Key Usage flag explicitly allowing the certificate to be used for authentication purposes. The serverAuth EKU ...
2
votes
2answers
1k views

Configure Ubuntu to allow ssh login via pulic/private key and sudo without password

I'm setting up a fresh Ubuntu 13.04 server. I created some users and copied their public keys for ssh authentication to their home folders. Login via password will be disabled. Everything works fine ...
0
votes
1answer
116 views

Connect Git Remote Between EC2 New User and Remote Computer

From an Amazon EC2 instance, I created a new user, webserver, and created a git repository that is only accessible to webserver and not the default user. I wish to, from my home computer (also Linux), ...
0
votes
1answer
72 views

SSH and GIT auth stopped working all of sudden

After nearly one year using my usual keypair (in my company for our servers), suddenly today it doesn't work anymore. I don't know why. If I do a ssh --vvv I get ssh myname@myserver.com -vvv ...
-1
votes
2answers
796 views

SCP Asking for Password with RSA Key

I've followed a few tutorials on setting up RSA Public Key Authentication, but I cannot seem to get it to work. I can SSH into the remote machine without a password, but when I try and scp files, I ...
-1
votes
2answers
140 views

ssh use public-key authentication

I use public-key authentication with secureCRT to login linux server and turn off password authentication at these server: 1.Create the keypair(openssh key format) with SecureCRT. 2.Cat the public ...
0
votes
1answer
59 views

ssh login using public/private key exchange authorized_keys not working?

I am trying to login from one ubuntu box to another using public/private keys with ssh, but it is not working.. OMD[live]:~/.ssh$ ssh -l myuser -v -i /test/sites/live/.ssh/id.rsa.myuser ...
0
votes
2answers
2k views

SSH to bitbucket returing Permission Denied (publickey)

So I am trying to clone a repo to a directory on my Ubuntu server but I keep getting a Permission Denied (publickey) error. This is very weird because my output for ssh -T git@bitbucket.org shows ...
0
votes
1answer
225 views

Call Pam module before public key authentication on SSH

I am currently writing a pam module which does some checks if the key stored in authorized_keys is still valid. However I cant find a possiblity to run the module before the public key authentication ...
1
vote
2answers
906 views

Best current authentication cipher for SSH2? Are certain ones only allowed/not allowed? How to tell what cipher an existing key is?

I am a linux newbie. I plan on generally using OpenSSH I have spent a number of hours & I can't seem too quickly find the answer I have briefly read some on IETF, however I will be honest its WAY ...
1
vote
1answer
57 views

SSH login without recheck all public key

I have several servers and different users. Also i have two different authorize method: via keys and password. When i try login ssh recheck all public keys. Is there method to bind public key and ...
1
vote
1answer
173 views

How to check if a password for an ssh key has been set with only the public key?

We have some SFTP-Chroot Environments where we only allow 4096bit RSA Keys for authentication and we only have the public key part from our users. But we have a policy that the user has to set a ...
0
votes
1answer
520 views

ubuntu - public-key for authentication

I have a master and slave cluster. I am setting up cloudera manager. On the master I created a passwordless key using the following. ssh-keygen -f id_rsa -t rsa -N '' eval `ssh-agent` ssh-add ...
0
votes
1answer
1k views

Connection closed [preauth]

On a Ubuntu 12.04 server, I am getting the following pair of messages in auth.log several times a minute: Jan 17 22:04:25 binx sshd[14659]: Connection closed by 192.168.0.1 [preauth] Jan 17 22:04:25 ...
1
vote
0answers
188 views

Authenticating to MySQL with asymmetric key-pair

Is there anyway I can give MySQL a public key to authenticate vs (or in addition to) username/password authentication? It seems that you can switch out the backend of where MySQL stores/checks ...
1
vote
6answers
2k views

ssh publickey doesn't work

UPDATE: I've solved this strange problem by simply restart sshd. However, I'm still wondering why, because I didn't change any configs since the server started. I have 2 servers, one installed CentOS ...
1
vote
2answers
591 views

When user in server is not logged in ssh gives: Permission denied (public key)

I'm setting up a ssh server using public key authentication. For that I used this tutorial: http://www.g-loaded.eu/2005/11/10/ssh-with-keys/ I was able to login via ssh. But this works only if I keep ...