The tag has no wiki summary.

learn more… | top users | synonyms

82
votes
1answer
17k views

Create a public SSH key from the private key?

Let's suppose I have a SSH key, but I've deleted the public key part. I have the private key part. Is there some way I can regenerate the public key part?
26
votes
7answers
4k views

SSH: Two Factor Authentication

I currently have a Ubuntu Server 12.04 running OpenSSH along with Samba and a few other services. At the current time I have public key authentication set up, and I'm wondering if it's possible to set ...
21
votes
4answers
7k views

How do I make ssh fail rather than prompt for a password if the public-key authentication fails?

I've got a script that ssh'es several servers using public key authentication. One of the servers has stopped letting the script log in due to a configuration issue, which means that the script gets ...
15
votes
4answers
2k views

Why does Amazon release private keys instead of public keys?

My brain is wrapped around the axle on public and private keys. When you create a cloud server (instance) on Amazon's EC2 service and then want to connect to it via SSH, Amazon requires you to ...
14
votes
1answer
3k views

What is the meaning of an equal sign = or == at the end of a SSH public key?

I just noticed that most of the ssh pubkeys in my authorized_keys end on == or = E.g. ssh-rsa ...
14
votes
4answers
3k views

Is it possible to get OpenSSH to log the public key that was used in authentication?

I have a production system where several different people are allowed to log in to a single account - the account is for the application and not for the person as we don't have personal accounts on ...
11
votes
5answers
527 views

How public should a public key be allowed to become?

I have a script that I use to setup new slices on slicehost and one of the steps is to add my public key to the authorized_keys file. At the moment I scp a key manually, but ideally I would have the ...
9
votes
2answers
6k views

Multiple public keys for one user

This question is similar to SSH public key authentication - can one public key be used for multiple users? but it's the other way around. I'm experimenting on using ssh so any ssh server would work ...
9
votes
1answer
2k views

Add comment to existing SSH public key

I have an existing SSH key (public and private), that was created with ssh-keygen. How can I add a comment to this existing key?
8
votes
4answers
835 views

Why does a SSH public key sit on the server and not with the client?

I don't quite understand the theory behind keeping public keys on the server. In the lockbox analogy of public/private keys, to unlock Alice's box, Alice holds the private key while the public key is ...
8
votes
4answers
892 views

Encrypt temporary password using public ssh key

I manage a virtual office and our staff uses both SSH keys and passwords for authentication. If one of our staff forgets his password, is there a way to encrypt a temporary password using his public ...
6
votes
4answers
739 views

SSH public key authentication — always require users to generate their own keypair?

I was working with a partner today that I needed to upload files to my server using scp. I have passwords turned off in the server's SSH configuration, so I wanted them to use public key ...
6
votes
2answers
8k views

Disable the public key check for rpm installation

I want to make a DVD with some useful packages (for example php-common). The only problem is that if I try to install on a computer that's not connected to internet, I can't validate the public key. ...
6
votes
5answers
6k views

How to let TortoiseHg (Mercurial) on Windows use the Private Key file generated (by Puttygen)?

I have used Puttygen to create a public and a private key, and I'm now ready to let TortoiseHg on Windows 7 do a clone by going to ssh://somebody@code.somewhere.com/somecode but there seems to be ...
6
votes
3answers
16k views

How to export my SSH's public key?

I need to set up ssh sessions between two servers and do not want to make the script fill in username and password everytime. However I cannot seem to find out where the SSH server is using its ...
6
votes
2answers
447 views

How to set up SSH passwordless key authentication for remote access only, allowing local users to use passwords

I am trying to get an SSH server running Ubuntu 10.04 to allow password logons only when coming from the local network. For all other users, especially those logging in from the internet via the ...
5
votes
5answers
21k views

Debian. How can I securely get debian-archive-keyring, so that I can do an apt-get update? NO_PUBKEY

I have a catch 22 trying to: # apt-get update [... good lines omitted] W: GPG error: http://backports.debian.org lenny-backports Release: The following signatures couldn't be verified ...
5
votes
3answers
253 views

PGP: on the web, what if everything was tampered?

I am trying to wrap my head around how Public Key Cryptography can really work in a secure manner. From what I can gather, you go to example.com and download their PGP/GPG Public Key and add it to ...
5
votes
2answers
2k views

CentOS Create User With No Password, Only Public Key Auth

How can I create a user on CentOS 5.6, which cannot login with a password. I.E. they can only login and SSH using public key authentication. useradd myuser -d /their-home-dir Will that do it, ...
5
votes
4answers
686 views

How to find out which key was used for public key authentication?

Several developers using a shared account on a test server, using public key authentication. Is there any way to find out which key was used for authentication (e.g. the keys comment)?
5
votes
3answers
1k views

OpenSSH with public keys from database

Is it possible to fetch the public keys from a database instead of the authorized_keys file? I would like to use such a setup to manage ssh access to things like git repositories for multiple users ...
5
votes
4answers
5k views

Problem using a public key when connecting to a SSH server running on Cygwin

We have installed Cygwin on a Windows Server 2008 Standard server and it working pretty well. Unfortunately we still have a big problem. We want to connect using a public key through SSH which doesn't ...
4
votes
3answers
3k views

Is it possible to connect a EC2 Linux instance via ssh without the key pair?

I can connect to my EC2 Linux instance via ssh using the key pair (*.pem). Is it somehow possible to connect it with ssh with out the pem file?
4
votes
1answer
548 views

Get SSH fingerprint from remote server securely?

I had thought about this and my host provides out of band support, so I could simply create the key fingerprint out of band and compare it when connecting to that server from home. Is there any other ...
3
votes
2answers
2k views

What is a good and safe way of sharing ssh-keypairs?

I have a few key-pairs, that are used as authentication, to ssh into my servers on the Amazon cloud. I rotate those certificates weekly, manually. My question is, I need to share the certificates with ...
3
votes
3answers
455 views

SSH Public Key Format

I have a public key in the format: ---- BEGIN SSH2 PUBLIC KEY ---- Comment: "somename-20060227" AAAAB3NzaC1yc2EAAAABJQAAAIBmhLUTJiP[and so on]== ---- END SSH2 PUBLIC KEY ---- usually i see keys in ...
3
votes
2answers
79 views

how is a website certificate file cryptographically readable by windows?

I have a .crt file signed by a CA. I cat the file to see that it is ascii text. Yet when I double click on the .crt file in windows, it opens it up and somehow displays all the information that's ...
3
votes
2answers
90 views

New server won't accept SSH public key

I have a private network that had 3 servers before. Now that I added a fourth, I tried to set up public key authentication from the main entry point to this new server. However, the usual procedure ...
3
votes
2answers
1k views

ssh still accepts password authentication despite being configured for public-key only authentication (which works!)

I have configured an Ubuntu 10.04LTS desktop install to only allow public key authentication. RESULT: public key authentication works perfectly! QUESTION: The problem is that despite being ...
3
votes
1answer
349 views

Disallow password auth in SSH via ~/.ssh/config?

I know I'm fighting a losing battle here, but with the right bit of elbow-grease I've got my shared hosting with GoDaddy to let me SSH in via pubkey auth (added in the ~/.ssh directory and an ...
3
votes
4answers
819 views

How can I enable both password and public key authentication with OpenSSH

I would like for sshd to verify the users' public key and then prompt for their password, rather than just one or the other. Is this possible?
3
votes
6answers
300 views

why SSH publickey authentification fails on one account but work on the other on the same server

I have a strange issue with SSH public keys. There's one account on the server where I've uploaded my public key to .ssh/authorized_keys and it works as expected (I can login with no password). Then ...
3
votes
1answer
132 views

How to log all fingerprints in sshd, even if the connection was unsuccessful?

I understand that by adjusting the LogLevel in /etc/ssh/sshd_config I can log the fingerprints when authentication is successful, but what I would like to do is to see a fingerprint of a key that was ...
3
votes
2answers
136 views

Setting up authentication on virtual machine

I'm creating a system similar to a cloud computing provider using the libvirt python bindings. I would like to give users the ability to specify a custom virtual machine image, in a similar fashion ...
3
votes
1answer
193 views

Authentication using SSL certificates — General Question

SSL client authentication using certificates -- it's a complex topic, and I think I've learned just enough to make it even more complex. Here is my basic understanding: A public and private key are ...
2
votes
5answers
1k views

Stop ssh client from offering all the public keys it can find?

Like most sysadmins I use openssh all the time. I have about a dozen ssh keys, I like to have a different ssh key for each host. However this causes a problem when I am connecting to a host for the ...
2
votes
4answers
7k views

certutil: function failed: security library: bad database.

when I'm using certutil it returns this error: certutil: function failed: security library: bad database. e.g. I can't list certs or keys How Can I fix this? Thanks
2
votes
4answers
2k views

ssh without password does not work for some users

I have a new RHEL4 Linux box that I am using to copy data to old Solaris 2.6 and RHEL3 Linux boxes with scp. I have found that with the same setup, it works for some users but not for others. For ...
2
votes
2answers
119 views

OpenSSH and PAM authentication using a public key

I'm looking for a way to authenticate users using a public key which is stored in a db (MongoDB). Similar questions usually resulted with a suggestion to installed a patched version of OpenSSH ...
2
votes
1answer
156 views

SSH host key changed - except it actually hasn't

I've just tried to SSH in to a server that I've been doing so without problems for a while, and received a warning that the server's host key has changed. But it hasn't! On the server, I've checked ...
2
votes
2answers
986 views

User created MOTD prevents SCP from functioning

I've created custom MOTDs to be displayed at login via SSH by doing the following: create a text file in /etc/usermotd/<username> with the message inside Edit the user's .bashrc file and put ...
2
votes
4answers
623 views

Why does my ssh publickey authentication only work with concurrent password authenticated connection

I just setup a vanilla ubuntu lucid (10.04) system with openssh-server. I'm trying to setup publickey authentication, and it only works if I first connect using password authentication and leave that ...
2
votes
4answers
148 views

Signing a public key

Am not sure where this is the right place to ask this Someone has asked me to sign their public key, how do i do that? His public key has Version: GnuPG v1.2.1 (GNU/Linux)
2
votes
2answers
508 views

Setup public key authorized SSH for non-root users

I was able to setup ssh login using public keys for root users and tried to apply the same logic for non-root users. I have tried to troubleshoot this issue in vain. I am using centos for both my ...
2
votes
2answers
542 views

SSH Key not found logging into CentOS 5.5 from Windows (Cygwin)

I am having difficulties logging in to a VPS running CentOS 5.5 using Public key authentication. I can log in to both a standard user account and the root account using password authentication. I am ...
2
votes
2answers
180 views

openssh: public key failure for one user only

Client: opensuse 10.3, openssh 4.6 host: opensuse 11.3, openssh 5.4 I have a user that has ssh publickey setup to a host, to enable running some scripts through cron. We migrated the host to a new ...
2
votes
3answers
931 views

ssh asks for password despite ssh-copy-id

I've been using public key authentication on a remote server for some time now for remote shell use as well as for sshfs mounts. After forcing a umount of my sshfs directory, I noticed that ssh began ...
2
votes
2answers
54 views

SSH key and ip address

A co-worker keeps mentioning SSH keys being associates with an IP address but Im not sure what it exactly means. So i tried generating a SSH key and it had my host name at the end of the file. This ...
2
votes
3answers
298 views

Weird SSH Issue - Single host not allowing me to login via name

Can anyone explain this, because I have done everything from regenerating keys, to "leaving" and rejoining the domain (Centrify) for an SSH host that I can't seem to get to by a single client. All ...
2
votes
2answers
815 views

Configure Ubuntu to allow ssh login via pulic/private key and sudo without password

I'm setting up a fresh Ubuntu 13.04 server. I created some users and copied their public keys for ssh authentication to their home folders. Login via password will be disabled. Everything works fine ...