The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
2answers
127 views

Need convincing PGP public key needs to be changed

So the situation is thus. We're working with another company and as part of some file distribution processing we have to encrypt some files before they are sent. The company in question sent us ...
5
votes
3answers
256 views

PGP: on the web, what if everything was tampered?

I am trying to wrap my head around how Public Key Cryptography can really work in a secure manner. From what I can gather, you go to example.com and download their PGP/GPG Public Key and add it to ...
15
votes
4answers
4k views

Is it possible to get OpenSSH to log the public key that was used in authentication?

I have a production system where several different people are allowed to log in to a single account - the account is for the application and not for the person as we don't have personal accounts on ...
0
votes
2answers
511 views

ssh with key login failed from Mac OSX to CentOS 5 remote server

I'm trying to setup passwordless login for from my mac to my remote server running CentOS with public key authentication for "user1". I used $ ssh-keygen -t rsa to setup a public key on my mac and ...
7
votes
2answers
14k views

Disable the public key check for rpm installation

I want to make a DVD with some useful packages (for example php-common). The only problem is that if I try to install on a computer that's not connected to internet, I can't validate the public key. ...
3
votes
2answers
137 views

Setting up authentication on virtual machine

I'm creating a system similar to a cloud computing provider using the libvirt python bindings. I would like to give users the ability to specify a custom virtual machine image, in a similar fashion ...
2
votes
2answers
189 views

openssh: public key failure for one user only

Client: opensuse 10.3, openssh 4.6 host: opensuse 11.3, openssh 5.4 I have a user that has ssh publickey setup to a host, to enable running some scripts through cron. We migrated the host to a new ...
2
votes
2answers
120 views

SSH backup server - connect to multiple passwordless remotes

I'm wondering what are the steps to configure password-less ssh keys so I can connect and pull data from multiple remote servers. Can I just do: Backup Machine: ssh-keygen -t rsa ssh-copy-id -i ...
2
votes
1answer
5k views

How to enable key forwarding with ssh-agent?

I've used the ssh-agent from oh-my-zsh to manage my SSH key. So far, so good, i only have to type the passphrase for my private key once when I start my shell and public key authentication works ...
7
votes
3answers
19k views

How to export my SSH's public key?

I need to set up ssh sessions between two servers and do not want to make the script fill in username and password everytime. However I cannot seem to find out where the SSH server is using its ...
1
vote
3answers
828 views

Putty: ssh root login to server disabled, how i can setup passwordless access to root on server?

For added security, we've disabled root login to server via ssh. We have a special ssh account that users need to login as, and then su as root in they require root access. How can we setup ...
0
votes
1answer
112 views

ssh key requires passphrase after viewing it

I'm running a tinycore machine that I store my code on before pushing it to github. This is also the only machine that has port 22 forwarded at home so I have to do the push from this machine due to ...
3
votes
2answers
2k views

ssh still accepts password authentication despite being configured for public-key only authentication (which works!)

I have configured an Ubuntu 10.04LTS desktop install to only allow public key authentication. RESULT: public key authentication works perfectly! QUESTION: The problem is that despite being ...
1
vote
3answers
99 views

restricting access via ssh

We have a data processing workstation that's shared by a number of users. I would like to set up a script on that machine to process my data and then copy it it back to my personal machine afterwards. ...
6
votes
2answers
472 views

How to set up SSH passwordless key authentication for remote access only, allowing local users to use passwords

I am trying to get an SSH server running Ubuntu 10.04 to allow password logons only when coming from the local network. For all other users, especially those logging in from the internet via the ...
0
votes
3answers
1k views

ec2 instance is unable to connect after restart

I created an micro ec2 instance with free tier option. After using it a week, i realized that i need more memory. So, i thought of changing the instance type from micro to small(for which i have to ...
1
vote
1answer
2k views

PostgreSQL SSL root.crt not loading

I am running PostgreSQL 9 on Ubuntu (from their PPA repository). I am using OpenSSL 0.9.8o. I have generated keys and certificates using TinyCA2 for both a pg server and the psql client. I ...
0
votes
2answers
159 views

SSH Private Key Not Working in Some Directories

I have a strange issue where SSH won't properly connect with a private-key if the key file is in certain directories. I've setup the keys on a set of servers and the following command ssh -i ...
3
votes
2answers
3k views

What is a good and safe way of sharing ssh-keypairs?

I have a few key-pairs, that are used as authentication, to ssh into my servers on the Amazon cloud. I rotate those certificates weekly, manually. My question is, I need to share the certificates with ...
1
vote
1answer
146 views

Private and public key negotiations over SSL protocol

I understand how public key encryption works and I understand how it works into SSL. Server sends encrypted(public) key so I can send it a message but only it knows the private key to decrypt it. ...
1
vote
1answer
161 views

ssh authentication with public-private key pair

I'm wonder if is possible to authenticate the same user with different public-private keys pairs on the same remote host. For all production servers, the public-private key pair has been generated ...
1
vote
2answers
13k views

SSH configuration, publickeys, Permission denied (publickey,password). error

My task: login from Mac OS Snow Leopard client to Ubuntu 10.10 server without password. Commands: client$ mkdir ~/.ssh client$ chmod 700 ~/.ssh client$ ssh-keygen -q -f ~/.ssh/id_rsa -t rsa Enter ...
2
votes
4answers
2k views

ssh without password does not work for some users

I have a new RHEL4 Linux box that I am using to copy data to old Solaris 2.6 and RHEL3 Linux boxes with scp. I have found that with the same setup, it works for some users but not for others. For ...
6
votes
4answers
767 views

SSH public key authentication — always require users to generate their own keypair?

I was working with a partner today that I needed to upload files to my server using scp. I have passwords turned off in the server's SSH configuration, so I wanted them to use public key ...
13
votes
2answers
8k views

Multiple public keys for one user

This question is similar to SSH public key authentication - can one public key be used for multiple users? but it's the other way around. I'm experimenting on using ssh so any ssh server would work ...
1
vote
2answers
1k views

Passwordless entry via public key authentication to a HP 2626 switch

I am trying to get the output of some 'show' commands in linux and print them in a file It's a HP 2626 switch 1. How can i setup Passwordless entry via public key authentication to the switch 2. How ...
1
vote
1answer
198 views

RSA fingerprint [closed]

what is the benefits of SSH RSA Fingerprint? and how does it different from PGP ? also how can i use it? are there any tool to do this? regards
4
votes
1answer
595 views

Get SSH fingerprint from remote server securely?

I had thought about this and my host provides out of band support, so I could simply create the key fingerprint out of band and compare it when connecting to that server from home. Is there any other ...
1
vote
3answers
250 views

Simple SSH public/private key question

I am trying to learn this instead of just following guides so I can recommend proper actions when people do ask (and they do). Here is what I got down. First, generate both key with command such as ...
2
votes
3answers
1k views

ssh asks for password despite ssh-copy-id

I've been using public key authentication on a remote server for some time now for remote shell use as well as for sshfs mounts. After forcing a umount of my sshfs directory, I noticed that ssh began ...
2
votes
1answer
344 views

How can I make gitosis distinguish between two users with the same username

I have a gitosis system that seems to be working correctly except for a common problem we run into where I can't distingush permissions between two users who have the same username, but different ...
1
vote
2answers
312 views

This morning when sshing in, server asks for password (has never happened. normally use identity file)

I always log in to my server(Amazon EC2) by: ssh -i blahblah.pem root@server.com This morning the server asked for a password which I never set. I thought this could mean either my key(pem file) is ...
1
vote
2answers
255 views

SSH key does not work from a remote shell

I've come across an interesting problem and I literally don't know where to start looking to resolve it! The VCS machine in our office is running gitweb and my public key is on this machine fine. I ...
0
votes
1answer
504 views

Pubkey authentication with SSH server running on Cygwin - session closes immediately

I am connecting from Linux via SSH to a Windows machine running SSH in Cygwin. I authenticate with a certificate. The session opens but closes immediately thereafter. With password authentication it ...
3
votes
4answers
1k views

How can I enable both password and public key authentication with OpenSSH

I would like for sshd to verify the users' public key and then prompt for their password, rather than just one or the other. Is this possible?
0
votes
1answer
506 views

On Windows, how do I set up sshd such that I can ssh in via key-based authentication from another windows box?

I am working to set up some deployment automation, and one of the things I'm trying is to use Ruby's Capistrano to remotely execute commands over ssh. I have used cygwin's openssh to run sshd on the ...
1
vote
2answers
442 views

RPM issues after signing JDK 1.6 64-bit

I'm trying to sign the Java JDK 1.6u21 64-bit RPM on CentOS 5.5 for use with Spacewalk and I'm running into problems. It seems to sign okay, but then when I check the signature it seems to be missing ...
1
vote
1answer
453 views

SSH connection slow from one machine but not another

I have a remote server I need to administer over a VPN to another data centre. The server I used to conenct to it from (server A) is being decommissioned, so I'm using another on the same VLAN ...
0
votes
2answers
859 views

ssh via public key authentication for users administered with NIS

I'm experimenting with using NIS for centralizing the user management for a network of approx 20 servers. I've got an NIS client and server working, and can ssh to the client machine and successfully ...
2
votes
4answers
789 views

Why does my ssh publickey authentication only work with concurrent password authenticated connection

I just setup a vanilla ubuntu lucid (10.04) system with openssh-server. I'm trying to setup publickey authentication, and it only works if I first connect using password authentication and leave that ...
2
votes
4answers
2k views

Looking for a one step solution to appending my SSH public key to a server's authorized_keys?

To get my public key onto a server I normal copy the contents of my public key, then SSH into the server, then I run vi .ssh/authorized_keys, then paste my key into the file and save. There has got ...
4
votes
3answers
4k views

Is it possible to connect a EC2 Linux instance via ssh without the key pair?

I can connect to my EC2 Linux instance via ssh using the key pair (*.pem). Is it somehow possible to connect it with ssh with out the pem file?
7
votes
3answers
2k views

OpenSSH with public keys from database

Is it possible to fetch the public keys from a database instead of the authorized_keys file? I would like to use such a setup to manage ssh access to things like git repositories for multiple users ...
2
votes
4answers
470 views

Speed up public key authentication (linux)?

We are using a Mercurial implementation and sending data to a repository server via public key authentication which takes the latest revision and pushes it to our web servers via hooks also using ...
1
vote
1answer
413 views

Authorized_keys not getting permissions or owner set correctly when run from bash script

With the following snippet of a script to add new users each user gets a public\private key pair automatically created, with the private key in their home directory for winscping out. The script works ...
0
votes
1answer
672 views

SSH key stopped working, still works on other servers

I've got about a dozen servers that I log into via an authorised ssh key, and up until today it was working fine. Today, one of those servers refuses to accept my key - it accepts a root key and my ...
6
votes
5answers
7k views

How to let TortoiseHg (Mercurial) on Windows use the Private Key file generated (by Puttygen)?

I have used Puttygen to create a public and a private key, and I'm now ready to let TortoiseHg on Windows 7 do a clone by going to ssh://somebody@code.somewhere.com/somecode but there seems to be ...
2
votes
4answers
149 views

Signing a public key

Am not sure where this is the right place to ask this Someone has asked me to sign their public key, how do i do that? His public key has Version: GnuPG v1.2.1 (GNU/Linux)
5
votes
5answers
2k views

Stop ssh client from offering all the public keys it can find?

Like most sysadmins I use openssh all the time. I have about a dozen ssh keys, I like to have a different ssh key for each host. However this causes a problem when I am connecting to a host for the ...
11
votes
5answers
547 views

How public should a public key be allowed to become?

I have a script that I use to setup new slices on slicehost and one of the steps is to add my public key to the authorized_keys file. At the moment I scp a key manually, but ideally I would have the ...