The tag has no usage guidance.

learn more… | top users | synonyms

30
votes
7answers
6k views

SSH: Two Factor Authentication

I currently have a Ubuntu Server 12.04 running OpenSSH along with Samba and a few other services. At the current time I have public key authentication set up, and I'm wondering if it's possible to set ...
8
votes
4answers
2k views

Encrypt temporary password using public ssh key

I manage a virtual office and our staff uses both SSH keys and passwords for authentication. If one of our staff forgets his password, is there a way to encrypt a temporary password using his public ...
2
votes
4answers
15k views

Key-Based SSH Permission denied (publickey) Ubuntu 12-04

I have configured sshd to accept key-based ssh logins with LogLevel on DEBUG, and uploaded my public key to ~/.ssh.authorized_keys, where permissions are set as: 700 ~/.ssh 600 ~/.ssh/authorized_keys ...
1
vote
1answer
265 views

Why is SSH insisting on letting me log in?

I'm trying to disable logging in by password on a remote Ubuntu server, so that it's only accessible by using the encrypted key file thingy (I'm not totally clear on the terminology). I followed ...
0
votes
1answer
230 views

SSH and public/private key [closed]

I'm opening my SSH to the world on my home based server. I changed the default port. I made the passwords for root and the only manually added user (done at install time) to totally random 64 ...
3
votes
1answer
142 views

How to log all fingerprints in sshd, even if the connection was unsuccessful?

I understand that by adjusting the LogLevel in /etc/ssh/sshd_config I can log the fingerprints when authentication is successful, but what I would like to do is to see a fingerprint of a key that was ...
1
vote
1answer
593 views

Problems accessing EC2 instance with SSH key pair

Just set up a new EC2 instance, downloaded the pem file and currently cannot get into the box. I'm using the command... $ ssh -i .ssh/key.pem ubuntu@ec2-176-34-183-***.eu-west-1.compute.amazonaws.com ...
2
votes
1answer
3k views

Unable to submit certificate request to 2k8R2 CA

I have created a two-tier CA using Windows Server 2008 R2. The .inf files used to create this standalone root and an enterprise subCA are at the end of this post. The root is installed OK and issued ...
3
votes
2answers
159 views

New server won't accept SSH public key

I have a private network that had 3 servers before. Now that I added a fourth, I tried to set up public key authentication from the main entry point to this new server. However, the usual procedure ...
3
votes
3answers
2k views

SSH Public Key Format

I have a public key in the format: ---- BEGIN SSH2 PUBLIC KEY ---- Comment: "somename-20060227" AAAAB3NzaC1yc2EAAAABJQAAAIBmhLUTJiP[and so on]== ---- END SSH2 PUBLIC KEY ---- Usually I see keys ...
2
votes
1answer
210 views

SSH host key changed - except it actually hasn't

I've just tried to SSH in to a server that I've been doing so without problems for a while, and received a warning that the server's host key has changed. But it hasn't! On the server, I've checked ...
0
votes
1answer
3k views

How to make ssh connection between servers using public-key authentication

I am setting up a continuos integration(CI) server and a test web server. I would like that CI server would access web server with public key authentication. In the web server I have created an user ...
2
votes
2answers
660 views

SSH Key not found logging into CentOS 5.5 from Windows (Cygwin)

I am having difficulties logging in to a VPS running CentOS 5.5 using Public key authentication. I can log in to both a standard user account and the root account using password authentication. I am ...
22
votes
1answer
8k views

What is the meaning of an equal sign = or == at the end of a SSH public key?

I just noticed that most of the ssh pubkeys in my authorized_keys end on == or = E.g. ssh-rsa ...
0
votes
4answers
363 views

SSH Public Key Authentication Fails Mac OSX

I am trying to get a coworkers MacBook Air running on Public Key Authentication and even after generating a new SSH key I haven't been able to get it to run like I have mine. Double checked file ...
0
votes
1answer
2k views

'POSSIBLE BREAK IN ATTEMPT' in /var/log/auth.log when you use private key in putty?

When when I ssh into my server from windows using putty without using public key authentication I get no indication of a "BREAK IN ATTEMPT" in /var/log/auth.log However when I use DSA keys and set ...
1
vote
2answers
365 views

Public key authentication - SSH asks for passphrase after rebooting local machine?

I created a public/private key pair on a local machine using ssh-keygen. I entered a passphrase. I then used ssh-id-copy to put the public key on the remote machine. When I ssh into the remote ...
1
vote
1answer
1k views

Webmin + SSH Public Key [closed]

Is it possible to upload a UNIX user's public key to Webmin? I would think this would be on this screen, but I'm not finding it....
0
votes
2answers
155 views

Permission denied when creating/copying ssh key pair [duplicate]

Possible Duplicate: SSH configuration, publickeys, Permission denied (publickey,password). error I am trying to set up a sshkey pair using with the aid of the tutorial here however when I ...
11
votes
6answers
38k views

Debian. How can I securely get debian-archive-keyring, so that I can do an apt-get update? NO_PUBKEY

I have a catch 22 trying to: # apt-get update [... good lines omitted] W: GPG error: http://backports.debian.org lenny-backports Release: The following signatures couldn't be verified ...
0
votes
1answer
888 views

Cannot import EC2 keypair (Length exceeds maximum) via AWS console from existing keypair

I want to use the same keypair from one availability zone in another but I cannot import it. If I generate a new key I get the same error. See AWS console > Newtwork and Security > Key pairs > Import ...
0
votes
2answers
537 views

What do the different parts of “known_hosts” entries mean?

Below is an known_hosts entry. The part that starts with ssh-rsa and goes to the end is a public key. What are the other parts (the characters before ssh-rsa)? ...
0
votes
1answer
75 views

Is it possible to circumvent public key authentication restrictions using SSH daemon?

My web hosting plan does not support public key authentication, however advice given in Public key authentication unsupported by web host. Method to avoid entering password? question suggests it may ...
1
vote
3answers
1k views

Possible to enable ssh passwordless authentication via Windows Active Directory?

Is it possible to set up ssh and Active Directory (Win2008r2 flavour) such that domain-users can access *nix and ssh-servers-running-on-Windows-servers without needing to type their password? If so, ...
1
vote
2answers
4k views

How to use git pull without entering the passphrase

I'm trying to pull from a GitHub repository in an unattended way, but everytime I do it I get: Enter passphrase for key '/home/yc2/.ssh/id_rsa': And I have to enter it for it work. I managed to ...
2
votes
2answers
1k views

User created MOTD prevents SCP from functioning

I've created custom MOTDs to be displayed at login via SSH by doing the following: create a text file in /etc/usermotd/<username> with the message inside Edit the user's .bashrc file and put ...
3
votes
4answers
9k views

SSH login without password

I know that you can use ssh-keygen to generate a public/private key pair. Then you can install the public key on a remote server. You can then login without supplying a password. I haven't been ...
6
votes
2answers
5k views

CentOS Create User With No Password, Only Public Key Auth

How can I create a user on CentOS 5.6, which cannot login with a password. I.E. they can only login and SSH using public key authentication. useradd myuser -d /their-home-dir Will that do it, ...
2
votes
1answer
353 views

Crypto key storage and recovery — best practices?

We have a bunch of SSH, GPG, SSL and other private keys that, obviously: must only be available to the smallest number of people possible can't be "lost" if a hard drive dies or the building burns ...
1
vote
2answers
110 views

Get name of public key used to connect

I created a shell script that asks the connected user a question and after that it give him the prompt. The shell posts the question to a database for logging. The problem is that our developers are ...
2
votes
1answer
7k views

How to configure public-key authentication with vsftpd?

The documentation of vsftpd is quite good (https://security.appspot.com/vsftpd/vsftpd_conf.html), however I cannot find some details on how to use public key authentication. I know that I need ...
1
vote
2answers
134 views

Need convincing PGP public key needs to be changed

So the situation is thus. We're working with another company and as part of some file distribution processing we have to encrypt some files before they are sent. The company in question sent us ...
5
votes
3answers
269 views

PGP: on the web, what if everything was tampered?

I am trying to wrap my head around how Public Key Cryptography can really work in a secure manner. From what I can gather, you go to example.com and download their PGP/GPG Public Key and add it to ...
17
votes
4answers
6k views

Is it possible to get OpenSSH to log the public key that was used in authentication?

I have a production system where several different people are allowed to log in to a single account - the account is for the application and not for the person as we don't have personal accounts on ...
1
vote
2answers
868 views

ssh with key login failed from Mac OSX to CentOS 5 remote server

I'm trying to setup passwordless login for from my mac to my remote server running CentOS with public key authentication for "user1". I used $ ssh-keygen -t rsa to setup a public key on my mac and ...
15
votes
2answers
39k views

Disable the public key check for rpm installation

I want to make a DVD with some useful packages (for example php-common). The only problem is that if I try to install on a computer that's not connected to internet, I can't validate the public key. ...
3
votes
2answers
151 views

Setting up authentication on virtual machine

I'm creating a system similar to a cloud computing provider using the libvirt python bindings. I would like to give users the ability to specify a custom virtual machine image, in a similar fashion ...
2
votes
2answers
224 views

openssh: public key failure for one user only

Client: opensuse 10.3, openssh 4.6 host: opensuse 11.3, openssh 5.4 I have a user that has ssh publickey setup to a host, to enable running some scripts through cron. We migrated the host to a new ...
10
votes
2answers
10k views

Authentication Order with SSH

When I login via ssh with -v I see that ssh is authenticating the following way debug1: Authentications that can continue: publickey,gssapi-with-mic,password,hostbased I would like to change the ...
2
votes
2answers
125 views

SSH backup server - connect to multiple passwordless remotes

I'm wondering what are the steps to configure password-less ssh keys so I can connect and pull data from multiple remote servers. Can I just do: Backup Machine: ssh-keygen -t rsa ssh-copy-id -i ...
3
votes
1answer
8k views

How to enable key forwarding with ssh-agent?

I've used the ssh-agent from oh-my-zsh to manage my SSH key. So far, so good, i only have to type the passphrase for my private key once when I start my shell and public key authentication works ...
9
votes
3answers
34k views

How to export my SSH's public key?

I need to set up ssh sessions between two servers and do not want to make the script fill in username and password everytime. However I cannot seem to find out where the SSH server is using its ...
1
vote
3answers
922 views

Putty: ssh root login to server disabled, how i can setup passwordless access to root on server?

For added security, we've disabled root login to server via ssh. We have a special ssh account that users need to login as, and then su as root in they require root access. How can we setup ...
0
votes
1answer
127 views

ssh key requires passphrase after viewing it

I'm running a tinycore machine that I store my code on before pushing it to github. This is also the only machine that has port 22 forwarded at home so I have to do the push from this machine due to ...
4
votes
3answers
2k views

ssh still accepts password authentication despite being configured for public-key only authentication (which works!)

I have configured an Ubuntu 10.04LTS desktop install to only allow public key authentication. RESULT: public key authentication works perfectly! QUESTION: The problem is that despite being ...
1
vote
3answers
103 views

restricting access via ssh

We have a data processing workstation that's shared by a number of users. I would like to set up a script on that machine to process my data and then copy it it back to my personal machine afterwards. ...
6
votes
2answers
529 views

How to set up SSH passwordless key authentication for remote access only, allowing local users to use passwords

I am trying to get an SSH server running Ubuntu 10.04 to allow password logons only when coming from the local network. For all other users, especially those logging in from the internet via the ...
0
votes
3answers
1k views

ec2 instance is unable to connect after restart

I created an micro ec2 instance with free tier option. After using it a week, i realized that i need more memory. So, i thought of changing the instance type from micro to small(for which i have to ...
1
vote
1answer
2k views

PostgreSQL SSL root.crt not loading

I am running PostgreSQL 9 on Ubuntu (from their PPA repository). I am using OpenSSL 0.9.8o. I have generated keys and certificates using TinyCA2 for both a pg server and the psql client. I ...
0
votes
2answers
165 views

SSH Private Key Not Working in Some Directories

I have a strange issue where SSH won't properly connect with a private-key if the key file is in certain directories. I've setup the keys on a set of servers and the following command ssh -i ...