Questions tagged [ssh-keys]
an authorization mechanism for SSH involving public-key cryptography.
785
questions
0
votes
1
answer
69
views
What is the host key (the one from ssh connection) and how is it different from public-private key pair?
The situation is that I've had a VPS created previously. It was all set up, private-public key authentication, root login turned off, password login turned off. Everything was set up.
Then this server ...
- 125
1
vote
0
answers
303
views
What is the meaning of this line from ssh output: 'Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling'?
Everything works, ssh connects using private-public ssh key pair.
Just few things in ssh -v Ora2 output isn't clear for me.
This is complete ssh -v Ora2 output:
PS C:\Users\roeslermichal> ssh -v ...
- 125
0
votes
1
answer
59
views
Permission denied (publickey) error when managing GCP machine via Ansible (running on GCP VM) despite successful SSH connection
I deployed two machines to GCP via Terraform. Let's call them control-host and target-host. I want to manage the target-host via Ansible installed on the control-host.
Unfortunately, I keep getting ...
google-cloud-platform
-1
votes
0
answers
26
views
Cannot connect via ssh with password and username without or disable Public and Private key
I am using Macos Ventura. I am trying to connect to a server via ssh. I said yes to the question of whether you want to proceed with the key on the first try. and I got permission denied error. I do ...
- 99
2
votes
2
answers
230
views
Why I can not ssh to my Vagrant host? vagrant@192.168.1.8: Permission denied (publickey)
I created 5 VMs for my project
vagrant status
Current machine states:
master-1 running (virtualbox)
master-2 running (virtualbox)
master-3 running (...
- 333
0
votes
1
answer
33
views
SSH key for 2 client users to 1 server user
If this is a duplicate, I'm sorry.
I have searched my case but I couldn't find the right scenario that resembles my situation, although I thought that this situation must have come up before for ...
- 15
1
vote
1
answer
88
views
Validate all public keys in authorized_file
In my authorized_file i have multiple public keys against one private key. Now i want to add a task in ansible which will validate that all public keys are valid keys and good for connection. My aim ...
- 11
1
vote
1
answer
138
views
Avoid SSH AgentForwarding of incompatible keys
Good morning,
I have one ed25519-sk key (using a hardware token), which I need only on my personal machine for some high security servers (all Debian). This key type is supported by OpenSSH 8.3+. We ...
- 375
0
votes
1
answer
80
views
sshd not providing ecdsa/ed25519 host key algos
we have setup'd a bastion that only responds with the ssh-rsa host key algorithm when querying:
ssh-keyscan bastion.ops.dev.xxx.com
# bastion.ops.dev.xxx.com:22 SSH-2.0-OpenSSH_7.4
# bastion.ops.dev....
- 123
1
vote
1
answer
313
views
Adding my SSH key to new user with only SSH access through key
I'm quite new to this, and I've looked through questions but haven't found one that quite matches my problem, or rather I didn't sufficiently understand them to be able to solve this issue.
I have a ...
- 113
0
votes
0
answers
271
views
ssh illegal option while trying to connect to remote server
trying to ssh from my macbook pro, to a remote server,
ssh ayan@ServerIPAddress
gives the following error
ssh: illegal option -- ?
usage: ssh [-46AaCfGgKkMNnqsTtVvXxYy] [-B bind_interface]
...
- 101
0
votes
1
answer
141
views
Needs a clarification for the ssh-copy-id command
Say I have two computers connected to the same Wifi network. Let's call them computer-A & computer-B.
I am using computer-A, I can ping computer-B without issues.
Now, on computer-A, I have ...
- 101
1
vote
0
answers
39
views
User account auto-creation using SSH certificate authentication
My SSH server is configured to use certificate authentication, so it will trust anyone who presents a certificate issued by the user CA when they connect.
For reasons related with audit logs, I don't ...
- 11
0
votes
1
answer
29
views
Install SSH key in an account that has no "usable" shell
A remote SSH server has a guest account with a known, non-blank password, that when logged in directly executes a text-based terminal game (not sure if via command, shell, or another method). The ...
- 1,571
0
votes
1
answer
22
views
Github Deploy Key Pattern
My Deployment Pattern
I have a setup as shown in the diagram above, where have a github account which owns a number of private repositories. I have a number of machines in the field that each include ...
github
0
votes
0
answers
104
views
Using PasswordAuthentication yes in sshd config but password is not accepted during login
I tried to enable password authentication in CentOS 7 only for one user - auditor, by having this lines in my sshd.config (at the end of file):
PubkeyAuthentication yes
ChallengeResponseAuthentication ...
1
vote
0
answers
150
views
Use OpenSSH to make a key exchange with NTRU Prime
I would like to make a key exchange for a symmetric key from the client to the server with the NTRU Prime algorithm (for test reasons). I already installed OpenSSH 9.1 on both sides and checked ...
- 111
0
votes
0
answers
32
views
how to use systemctl with pem file for remote commands
I am wondering an anyone tell me how to use a pem file with the systemctl command in order to be able to issue a remote command whilst logging in using the pem?
I am running it on Ubuntu 22.04
...
- 1
3
votes
2
answers
2k
views
Why the RHEL8 system do not generate SSH host keys automatically when missing?
On the RHEL 8 and previous it is usual, that the SSH host keys in /etc/ssh are generated automatically by sshd service when missing. Usually there should be:
/etc/ssh/ssh_host_ecdsa_key
/etc/ssh/...
- 1,525
1
vote
1
answer
854
views
How to ssh-copy-id through a jump-host? Something similar to the -J option with ssh command
I use a jump host to connect to the remote servers through SSH.
I use the following linear command for the connection.
ssh -J jumpuser@jumphost:2455 remoteuser@remotehost
It works fine.
But for new ...
- 33
0
votes
1
answer
59
views
Cannot add passwordless private key with ssh-add on remote server
I can add a passwordless id_ed25519 file locally using ssh-add -k, but not on my remote server.
Locally:
☁ ~ ssh-add -l
The agent has no identities.
☁ ~ ssh-add -k ~/.ssh/id_ed25519
Identity added:...
- 103
0
votes
1
answer
611
views
Why do i need to restrict permissions on a PEM key?
I have a .pem key file that i use to ssh to my ec2 server. I've moved this key file to an encrypted external SSD disk. This has caused the owner of the pem key to be set to 'everyone'.
When i try to ...
- 107
11
votes
2
answers
3k
views
ssh how to allow a very limited user with no home to login with pubkey
I have a very restricted user in my ssh server created with --no-create-home and --shell /bin/false.
I know I can define authorized_keys file in sshd_configs for the user's public key. But how can I ...
- 431
1
vote
0
answers
550
views
Connection closed by remote host when copying client public key to sftp server
I want to copy the client public keys for a container to a remote sftp server and after that attempt do some uploads to the server via bash script(the bash script will be invoked when the container ...
- 123
0
votes
1
answer
259
views
back up and restore host ssh_keys using cloud init autoinstall ubuntu
I am trying to automate VM installations for ubuntu 22.04 using autoinstall,cloud-init, qcow2 and virt-install. When I am reinstalling the OS on the same qcow2 file, I have a script that is run in ...
0
votes
0
answers
203
views
Does the jump host have access to the private key used to authenticate the target host?
Can I use
ssh -J user1@host1:port1,user2@host2:port2 user3@host3
even when I don't trust the jump servers? Will the jump servers have access to my private key and be able to login and execute ...
- 141
0
votes
0
answers
38
views
Tentative of shh->rsync to wrong IP; potential security risk?
I have set up a little RPI backup 'server' (with rpi OS) on my LAN. I use it to create a backup of my main personal machine data using rsync, and I reach it from outside my network through SSH (key-...
0
votes
2
answers
290
views
After install last version on ubuntu server 22 i can`t make ssh key connect to remote server
I did all the steps to create the key as I normally do:
ssh-keygen -t ed25519
next
ssh-copy-id -i /home/derbauer/.ssh/id_rsa.pub -p 12122 root@192.168.80.12
here everything goes normally
But in the ...
3
votes
3
answers
483
views
Administrative access to a server via SSH key
Is it a good idea to set the SSH key directly for the root user for administrative access to a server?
Or is it better to use another user for SSH access via SSH key, followed by sudo command?
Is the ...
- 360
0
votes
1
answer
1k
views
SSH Permission denied (public key)
I am trying to create my own SSH key to connect from one VM A to another VM B (both are Debian/bullseye64 systems).
Both VMs are configured to be on a public network using vagrant on my system with A ...
- 11
0
votes
1
answer
89
views
Pull ssh key from github server
Many users have their own public ssh keys on github. Is there an easy way to get it knowing someone else's username?
I know it's possible - the ubuntu installer gets the keys somehow - but I can't ...
0
votes
1
answer
1k
views
SSH permission denied
I have problem logging using ssh to company server.
I have my local ~/.ssh/config;
Host target
HostName xx.yy.zzz.aaa
User abcd
IdentityFile ~/.ssh/id_ed25519
IdentitiesOnly=yes
I have other ...
- 21
2
votes
1
answer
1k
views
SSH2 fails authentication with a working key converted with PuttyGen (due to deprecated ssh-rsa?)
I have an EC2 instance authenticated with a key-pair generated by AWS.
With Putty, I can connect to the instance by providing the private key in a PPK file.
When I try to use SSH2 (via one of the ...
- 123
1
vote
0
answers
22
views
no passphrase asked on copied ssh-key
I used an id_ed25519 key on a Debian Bullseye to connect to our remote servers, which had a passphrase. My laptop crashed so I recovered the key from a backup and started using it on an Ubuntu 22.04.
...
- 141
1
vote
1
answer
295
views
Ansible file lookup works for debug, but doesn't work for authorized_key module — how to implement taking key from a file?
I am trying to build a playbook which includes distributing authorized SSH keys.
Each user's key is put into its own file named after the username. Users who need to be distributed are set in the ...
- 9,994
0
votes
1
answer
108
views
How to enable ssh for supporters with intelligent key management?
My situation is the following:
Am having a lot of customers in a VPN network.
Each supporter is having a computer which is also in the VPN.
Each supporter should be able to log in into all systems ...
- 103
2
votes
1
answer
2k
views
SSH agent: `sign_and_send_pubkey: signing failed for ECDSA-SK ... from agent: agent refused operation` except very first time
I have an ecdsa-sk keypair that I generated and added to my github account (tied to a yubikey). If I try any connection using that key, such as git push, I get:
sign_and_send_pubkey: signing failed ...
- 121
0
votes
1
answer
117
views
Why does SSH complain about key file permissions even though the key file is passwort protected? [closed]
I have a private key file, which is password protected. But when i try to use it, ssh complains about the permissions:
ssh -i example.pem root@myserver
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@...
- 101
1
vote
1
answer
832
views
Permission denied (publickey), but no solution worked
It's one of these issues that get asked and answered so many times here and elsewhere, you can't believe you have to ask it again.
I'll let my configuration speaks for me:
On remote:
# getenforce
...
- 11
0
votes
1
answer
235
views
Which ssh/sshd config item will affect "Offering RSA public key"?
All servers support the ssh public key authentication only in my environment. When I read the ssh debug info, I notice the "Offering RSA public key" is different.
When I ssh server1 from ...
- 113
0
votes
2
answers
4k
views
How to use ssh-copy-id on remote server?
I have an ec2 instance which I can connect using this command with the ssh_key.pem file I have.
ssh -i ssh_key.pem ec2-user@54.174.85.61
I am trying to use ssh-copy-id to add the public key I have on ...
0
votes
1
answer
521
views
Re-use public key, private key, and authorized_keys across machines
Suppose there are two machines, A and B, both with local user account alice present. Suppose also that ~/.ssh contains the same id_ed25519, id_ed25519.pub, and authorized_keys file on both machines. ...
- 51
1
vote
1
answer
721
views
Cannot ssh into newly created VM (with key used in creation)
So my cloud provider has you cut/paste or drag/drop the id_rsa.pub key when creating the instance. The provisioning process sticks that key in the appropriate place as part of the process.
This works ...
- 11
1
vote
1
answer
456
views
I used ssh-keyscan in production environment. is it possible to revert back?
I used ssh-keyscan in production environment, after got to know it may allows MITM. I check in known_hosts files, fingerprint is not there. where can i check or is there any option?
- 11
0
votes
1
answer
308
views
I used ssh-keyscan to automatically allow fingerprints in production environment. whether it is good
Is there is any options to revert the mentioned action. whether it will cause any security breaches?
- 11
0
votes
1
answer
183
views
Increased my VM disk size on Google Cloud Platform and now the SSH log in is asking for a password?
I increased the disk size on my VM instance running on Google Cloud Platform. There was a simple change from 200 GB to 400 GB with no other changes made on the Instance. When I started the instance ...
0
votes
0
answers
162
views
SSH to Windows server, fetching public keys from LDAP
We've got an established process where users connecting to an Ubuntu server via SSH have their public keys retrieved from our LDAP infrastructure and then PAM sets up their home directory, etc.
I need ...
- 121
6
votes
3
answers
28k
views
SSH No Matching Host Key Type Found
I have two servers,
S1: My machine, Windows 8, OpenSSH 8.8p1, OpenSSL 1.1.11 2021-08-24,
S2: A Remote Server, Linux, Open SSH 5.3p1, OpenSSL 1.0.1e-fips 2013-02-11.
The message I have trying to ...
- 165
0
votes
1
answer
2k
views
SSH Key Fingerprint Changes
So I copied an SSH private key from my Linux machine to my M1 Mac. (I've attempted to do this both by uploading the cyphertext to a secrets manager as well as directly transfering the file) but when ...
- 151
1
vote
1
answer
590
views
SSH'ing into WIN 10
People of the Server-verse, a humble hello from fellow apprentice.
Above line goes out to show i am a newbie and thus need help with trivial probs, so appreciate all help in advance.
I am facing 2 ...
- 11
Related Tags
ssh × 599
linux × 127
ubuntu × 62
amazon-ec2 × 49
public-key × 45
ssh-agent × 44
ssh-keygen × 41
amazon-web-services × 37
security × 37
ssh-tunnel × 32
centos × 30
authentication × 30
git × 29
rsa × 23
ansible × 21
debian × 21
putty × 19
rsync × 18
windows × 15
password × 14
private-key × 14
sftp × 14
known-hosts × 11
more related tags
Hot Network Questions
- Is a house without a service ground wire to the panel safe?
- What are the Star Trek episodes where the Captain lowers their shields as sign of trust?
- Why do secured bonds have less default risk than unsecured bonds?
- Reductive instead of oxidative based metabolism
- Render text in a slanted ASCII-art font
- What was the body of Kama made of?
- Re-training the entire time series after cross-validation?
- Luzern: Walking from Pilatus Kulm to Frakigaudi Toboggan
- Why would being called "Mr. Yellow" be undesirable?
- Are interstellar penal colonies a feasible idea?
- Text-based Tic-Tac-Toe
- Why did my papers get repeatedly put on the last day and the last session of a conference?
- Alarm clock randomly speeds up after 30 years. Just curious
- Find Roman numerals up to 100 that do not contain “I"
- Duped/misled about safety of worksite, manager still unresponsive to my safety concerns
- Why does Ash say "I choose you" instead of "I chose you" or "I'll choose you"?
- Zoom to Maximum Raster Cell Value
- Calculating the average of one field dependent on another in QGIS
- Glue for carbon fibre
- Can the Wildfire Druid ability Blazing Revival prevent Instant Death due to massive damage or disintegrate?
- Looking for some alternative branching strategies to meet my team's needs
- How to add initial nominators in the customSpec.json?
- Definition of "Victorian vandal"
- What award can an unpaid independent contractor expect? What are the legal incentives to pay contractors?