Привет,
Имам едно отдалечено РС което ползвам за тестови версии на нещата, с които се занимавам и го достъпвам през ssh (openssh-4.5).
За роот акаунта съм си генерирал двойка ключове и се логвам без проблем (и без парола съответно - "PasswordAuthentication no").
Проблема ми е, че същото нещо искам да направя и за потребителския акаунт "user", но не се получава. Генерирам си двойката ключове, без значение rsa or dsa, но при опит за логин не ме пуска.
Ето какво се получава на машината от която се опитвам да се конектна:
Примерен код |
$ssh -v [EMAIL=user@server.com]user@server.com[/EMAIL] OpenSSH_4.5p1-hpn12v14, OpenSSL 0.9.8e 23 Feb 2007 debug1: Reading configuration data /etc/ssh/ssh_config debug1: Connecting to server.com [***.***.***.***] port 22. debug1: Connection established. debug1: identity file /home/senser/.ssh/identity type -1 debug1: identity file /home/senser/.ssh/id_rsa type -1 debug1: identity file /home/senser/.ssh/id_dsa type -1 debug1: Remote protocol version 2.0, remote software version OpenSSH_4.5p1-hpn12v14 debug1: match: OpenSSH_4.5p1-hpn12v14 pat OpenSSH* debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_4.5p1-hpn12v14 debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug1: kex: server->client aes128-cbc hmac-md5 none debug1: kex: client->server aes128-cbc hmac-md5 none debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP debug1: SSH2_MSG_KEX_DH_GEX_INIT sent debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY debug1: Host 'senser.no-ip.info' is known and matches the RSA host key. debug1: Found key in /home/senser/.ssh/known_hosts:1 debug1: ssh_rsa_verify: signature correct debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug1: SSH2_MSG_NEWKEYS received debug1: SSH2_MSG_SERVICE_REQUEST sent debug1: SSH2_MSG_SERVICE_ACCEPT received debug1: Authentications that can continue: publickey,keyboard-interactive debug1: Next authentication method: publickey debug1: Trying private key: /home/senser/.ssh/identity debug1: Trying private key: /home/senser/.ssh/id_rsa debug1: Trying private key: /home/senser/.ssh/id_dsa debug1: read PEM private key begin debug1: read PEM private key done: type DSA debug1: Authentications that can continue: publickey,keyboard-interactive debug1: Next authentication method: keyboard-interactive debug1: Authentications that can continue: publickey,keyboard-interactive debug1: No more authentication methods to try. Permission denied (publickey,keyboard-interactive).
|
А ето и от страна на сървъра:
Примерен код |
Apr 6 13:11:20 senser sshd[18560]: debug3: auth_shadow_acctexpired: today 13609 sp_expire -1 days left -13610 Apr 6 13:11:20 senser sshd[18560]: debug3: account expiration disabled Apr 6 13:11:20 senser sshd[18560]: debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1 Apr 6 13:11:20 senser sshd[18560]: debug3: mm_request_send entering: type 7 Apr 6 13:11:20 senser sshd[18560]: debug2: monitor_read: 6 used once, disabling now Apr 6 13:11:20 senser sshd[18560]: debug3: mm_request_receive entering Apr 6 13:11:20 senser sshd[18560]: debug3: monitor_read: checking request 3 Apr 6 13:11:20 senser sshd[18560]: debug3: mm_answer_authserv: service=ssh-connection, style= Apr 6 13:11:20 senser sshd[18560]: debug2: monitor_read: 3 used once, disabling now Apr 6 13:11:20 senser sshd[18560]: debug3: mm_request_receive entering Apr 6 13:11:20 senser sshd[18560]: debug3: monitor_read: checking request 20 Apr 6 13:11:20 senser sshd[18560]: debug3: mm_answer_keyallowed entering Apr 6 13:11:20 senser sshd[18560]: debug3: key_from_blob(..., 433) Apr 6 13:11:20 senser sshd[18560]: debug3: x509key_from_blob: We have 433 bytes available in BIO Apr 6 13:11:20 senser sshd[18560]: debug3: x509key_from_blob: read X509 from BIO fail error:0D0680A8:lib(13):func(104):reason(168) Apr 6 13:11:20 senser sshd[18560]: debug3: key_from_blob(..., ...) ktype=ssh-dss Apr 6 13:11:20 senser sshd[18560]: debug3: mm_answer_keyallowed: key_from_blob: 0x80b80f0 Apr 6 13:11:20 senser sshd[18560]: debug1: temporarily_use_uid: 1000/100 (e=0/0) Apr 6 13:11:20 senser sshd[18560]: debug1: trying public key file /root/.ssh/authorized_keys Apr 6 13:11:20 senser sshd[18560]: debug1: restore_uid: 0/0 Apr 6 13:11:20 senser sshd[18560]: debug1: temporarily_use_uid: 1000/100 (e=0/0) Apr 6 13:11:20 senser sshd[18560]: debug1: trying public key file /root/.ssh/authorized_keys Apr 6 13:11:20 senser sshd[18560]: debug1: restore_uid: 0/0 Apr 6 13:11:20 senser sshd[18560]: Failed publickey for user from 84.54.144.124 port 57502 ssh2 Apr 6 13:11:20 senser sshd[18560]: debug3: mm_answer_keyallowed: key 0x80b80f0 is disallowed Apr 6 13:11:20 senser sshd[18560]: debug3: mm_request_send entering: type 21 Apr 6 13:11:20 senser sshd[18560]: debug3: mm_request_receive entering Apr 6 13:11:20 senser sshd[18560]: debug3: monitor_read: checking request 16 Apr 6 13:11:20 senser sshd[18560]: debug3: mm_answer_skeyquery: sending challenge success: 0 Apr 6 13:11:20 senser sshd[18560]: debug3: mm_request_send entering: type 17 Apr 6 13:11:20 senser sshd[18560]: debug3: mm_request_receive entering Apr 6 13:11:20 senser sshd[18560]: debug1: do_cleanup
|
Това което ми направи впечатление са редовете:
Примерен код |
Apr 6 13:11:20 senser sshd[18560]: debug1: restore_uid: 0/0 Apr 6 13:11:20 senser sshd[18560]: debug1: temporarily_use_uid: 1000/100 (e=0/0) Apr 6 13:11:20 senser sshd[18560]: debug1: trying public key file /root/.ssh/authorized_keys Apr 6 13:11:20 senser sshd[18560]: debug1: restore_uid: 0/0 Apr 6 13:11:20 senser sshd[18560]: Failed publickey for user from ***.***.***.*** port 57502 ssh2
|
Не мога да се светна нещо защо се опитва да зареди ключовете от роот-ския акаунт, а не от този в който се опитвам да се логна. Задал съм в /etc/ssh/sshd_config:
Примерен код |
AuthorizedKeysFile ~/.ssh/authorized_keys
|
но явно не сработва.
Ако задам твърд път за търсене на файла с ключовете, тогава го чете, но това не ме устройва. Проблема според мен е, че не търси на правилното място файла с ключовете, но кажете и вие какво мислите - може би греша някъде другаде.