I'm logged into a server called Walnut, from which I try to log into another server called Hazelnut.
local machine (mac) ---ssh---> Walnut ---ssh---> Hazelnut
The first ssh (from my local machine to Walnut) goes fine.
The second ssh command, however, gives me permission denied.
Here's what the logs say when I do
ssh -v -A Haezlnut.
debug1: Reading configuration data /etc/ssh/ssh_config debug1: /etc/ssh/ssh_config line 19: Applying options for * debug1: Connecting to Hazelnut [address] port [port]. debug1: Connection established. debug1: identity file /home/username/.ssh/id_rsa type -1 debug1: identity file /home/username/.ssh/id_rsa-cert type -1 debug1: identity file /home/username/.ssh/id_dsa type -1 debug1: identity file /home/username/.ssh/id_dsa-cert type -1 debug1: identity file /home/username/.ssh/id_ecdsa type -1 debug1: identity file /home/username/.ssh/id_ecdsa-cert type -1 debug1: Remote protocol version 2.0, remote software version OpenSSH_6.7p1 Debian-5+deb8u2 debug1: match: OpenSSH_6.7p1 Debian-5+deb8u2 pat OpenSSH* debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_6.0p1 Debian-4+deb7u2 debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug1: kex: server->client aes128-ctr hmac-sha1 none debug1: kex: client->server aes128-ctr hmac-sha1 none debug1: sending SSH2_MSG_KEX_ECDH_INIT debug1: expecting SSH2_MSG_KEX_ECDH_REPLY debug1: Server host key: [Host key] debug1: Host 'Hazelnut' is known and matches the ECDSA host key. debug1: Found key in /home/username/.ssh/known_hosts:1 debug1: ssh_ecdsa_verify: signature correct debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug1: SSH2_MSG_NEWKEYS received debug1: Roaming not allowed by server debug1: SSH2_MSG_SERVICE_REQUEST sent debug1: SSH2_MSG_SERVICE_ACCEPT received debug1: Authentications that can continue: publickey debug1: Next authentication method: publickey debug1: Trying private key: /home/username/.ssh/id_rsa debug1: Trying private key: /home/username/.ssh/id_dsa debug1: Trying private key: /home/username/.ssh/id_ecdsa debug1: No more authentication methods to try. Permission denied (publickey).
So I think the logs clearly indicate that it's failing to find the key file at the end. What's confusing is that since the private key resides in the local mac machine, it should look for the file in
/home/username/.ssh/. The first ssh command (from local to Walnut) does this fine, but the second command (from Walnut to Hazelnut) somehow messes it up.
What's more confusing is that the exact same process works perfectly fine on many other seemingly identical mac machines. If you try to ssh into Hazelnut from Walnut using any other mac machine, it attempts to look for the key file in the correct (
Has anyone had this issue before?