Questions tagged [public-key]
The public-key tag has no usage guidance.
27
questions
26
votes
8
answers
32k
views
A system for distributing SSH public keys
We have many different systems that are managed by several people. We have chosen to use SSH public key authentication to access those systems. This works great, as there is no need to manage or share ...
325
votes
2
answers
228k
views
Create a public SSH key from the private key?
Let's suppose I have a SSH key, but I've deleted the public key part. I have the private key part. Is there some way I can regenerate the public key part?
32
votes
3
answers
20k
views
Is it possible to get OpenSSH to log the public key that was used in authentication?
I have a production system where several different people are allowed to log in to a single account - the account is for the application and not for the person as we don't have personal accounts on ...
17
votes
3
answers
9k
views
OpenSSH with public keys from database
Is it possible to fetch the public keys from a database instead of the authorized_keys file?
I would like to use such a setup to manage ssh access to things like git repositories for multiple users ...
4
votes
4
answers
6k
views
Looking for a one step solution to appending my SSH public key to a server's authorized_keys?
To get my public key onto a server I normal copy the contents of my public key, then SSH into the server, then I run vi .ssh/authorized_keys, then paste my key into the file and save.
There has got ...
74
votes
2
answers
121k
views
Multiple public keys for one user
This question is similar to SSH public key authentication - can one public key be used for multiple users? but it's the other way around.
I'm experimenting on using ssh so any ssh server would work ...
54
votes
6
answers
27k
views
Stop ssh client from offering all the public keys it can find?
Like most sysadmins I use openssh all the time. I have about a dozen ssh keys, I like to have a different ssh key for each host. However this causes a problem when I am connecting to a host for the ...
31
votes
4
answers
75k
views
Authentication Order with SSH
When I login via ssh with -v I see that ssh is authenticating the following way
debug1: Authentications that can continue: publickey,gssapi-with-mic,password,hostbased
I would like to change the ...
2
votes
4
answers
42k
views
SSH configuration, publickeys, Permission denied (publickey,password). error
My task: login from Mac OS Snow Leopard client to Ubuntu 10.10 server without password.
Commands:
client$ mkdir ~/.ssh
client$ chmod 700 ~/.ssh
client$ ssh-keygen -q -f ~/.ssh/id_rsa -t rsa
Enter ...
154
votes
5
answers
135k
views
How do I make ssh fail rather than prompt for a password if the public-key authentication fails?
I've got a script that SSHes several servers using public key authentication. One of the servers has stopped letting the script log in due to a configuration issue, which means that the script gets ...
31
votes
2
answers
24k
views
Public key authentication or similar over HTTP/HTTPS?
Is it possible to configure Apache, or some other web server, to use some kind of public-key authentication?
What I would like, ideally, is to be able to give users access to a site without the need ...
30
votes
7
answers
7k
views
SSH: Two Factor Authentication
I currently have a Ubuntu Server 12.04 running OpenSSH along with Samba and a few other services. At the current time I have public key authentication set up, and I'm wondering if it's possible to set ...
25
votes
6
answers
76k
views
certutil: function failed: security library: bad database
when I'm using certutil it returns this error: certutil: function failed: security library: bad database.
e.g. I can't list certs or keys
How Can I fix this?
20
votes
8
answers
79k
views
Debian. How can I securely get debian-archive-keyring, so that I can do an apt-get update? NO_PUBKEY
I have a catch 22 trying to:
# apt-get update
[... good lines omitted]
W: GPG error: http://backports.debian.org lenny-backports Release: The following signatures couldn't be verified because ...
14
votes
2
answers
4k
views
Linux ssh: allow public-key authentication without giving user read rights to private key
Users logged in on my Linux server should be able to ssh to a specific remote machine with a default account.
The authentication on the remote machine uses public key, so on the server the ...
11
votes
4
answers
32k
views
How can I enable both password and public key authentication with OpenSSH
I would like for sshd to verify the users' public key and then prompt for their password, rather than just one or the other. Is this possible?
6
votes
5
answers
13k
views
Problem using a public key when connecting to a SSH server running on Cygwin
We have installed Cygwin on a Windows Server 2008 Standard server and it working pretty well. Unfortunately we still have a big problem. We want to connect using a public key through SSH which doesn't ...
6
votes
4
answers
14k
views
Is it possible to connect a EC2 Linux instance via ssh without the key pair?
I can connect to my EC2 Linux instance via ssh using the key pair (*.pem). Is it somehow possible to connect it with ssh with out the pem file?
4
votes
1
answer
17k
views
PostgreSQL SSL root.crt not loading
I am running PostgreSQL 9 on Ubuntu (from their PPA repository). I am using OpenSSL 0.9.8o.
I have generated keys and certificates using TinyCA2 for both a pg server and the psql client. I ...
4
votes
4
answers
19k
views
SSH login without password
I know that you can use ssh-keygen to generate a public/private key pair. Then you can install the public key on a remote server. You can then login without supplying a password. I haven't been ...
4
votes
1
answer
1k
views
Get SSH fingerprint from remote server securely?
I had thought about this and my host provides out of band support, so I could simply create the key fingerprint out of band and compare it when connecting to that server from home.
Is there any other ...
3
votes
2
answers
637
views
sshd: logging client's public key
I need to run an SSH server and log the IP & public key of any client that attempts to connect (without actually granting access).
The use case is this: I deploy this web app to a remote host ...
2
votes
1
answer
403
views
How can I make gitosis distinguish between two users with the same username
I have a gitosis system that seems to be working correctly except for a common problem we run into where I can't distingush permissions between two users who have the same username, but different ...
1
vote
3
answers
117
views
restricting access via ssh
We have a data processing workstation that's shared by a number of users. I would like to set up a script on that machine to process my data and then copy it it back to my personal machine afterwards.
...
1
vote
4
answers
2k
views
ssh via public key authentication for users administered with NIS
I'm experimenting with using NIS for centralizing the user management for a network of approx 20 servers.
I've got an NIS client and server working, and can ssh to the client machine and successfully ...
0
votes
1
answer
449
views
Does using an SSH jump host count as a login?
I have asked for a service account from the AD guys that will let me use a specific server as an SSH jumphost (using ProxyJump), and of course I've set up an SSH private key for the purpose. The ...
0
votes
1
answer
12k
views
SSH public key not Working - No supported authentication methods available
I'm trying to allow another developer to connect to a our ubuntu server and they are getting the below error in FileZilla.
Disconnected: No supported authentication methods available (server sent: ...