The tag has no usage guidance.

learn more… | top users | synonyms (1)

182
votes
21answers
256k views

Why am I still getting a password prompt with ssh with public key authentication?

I'm working from the URL I found here: http://jaybyjayfresh.com/2009/02/04/logging-in-without-a-password-certificates-ssh/ My ssh client is Ubuntu 64 bit 11.10 desktop and my server is Centos 6.2 64 ...
118
votes
6answers
66k views

How to force ssh client to use only password auth?

If I use pubkey auth from e.g.: an Ubuntu 11.04 how can I set the ssh client to use only password auth to a server? (just needed because of testing passwords on a server, where I default log in with ...
57
votes
1answer
48k views

How to list keys added to ssh-agent with ssh-add?

How and where can I check what keys have been added with ssh-add to my ssh-agent ?
40
votes
4answers
40k views

How to avoid being asked passphrase each time I push to Bitbucket

I set up my ssh stuff with the help of this guide, and it used to work well (I could run hg push without being asked for a passphrase). What could have happened between then and now, considering that ...
40
votes
2answers
7k views

Is it safe to give out my SSH public key for work?

I currently work remotely for a number of organizations which need me to access their servers regularly for maintenance and upgrades. Is it safe for me to add my RSA public SSH key to the .ssh/...
35
votes
5answers
133k views

ssh_exchange_identification: Connection closed by remote host (not using hosts.deny)

I'm not using hosts.allow or hosts.deny, further more SSH works from my windows-machine (same laptop, different hard drive) but not my Linux machine. ssh -vvv root@host -p port gives: OpenSSH_6.6, ...
27
votes
2answers
20k views

SSHFS specify key

I've got a question that I've not been able to find an answer for. I have two computers, both of which run Ubuntu Linux 12.04. I have set up my first computer ("home") to be able to SSH into my second ...
25
votes
5answers
32k views

how to avoid ssh asking permission?

We are attempting to speed up the installation of oracle nodes for RAC installation. this requires that we get ssh installed and configured so that it doesn't prompt for a password. The problem is: ...
20
votes
2answers
9k views

Is there an easy way to update information in known_hosts when you know that a hosts key has changed?

If a host's operating system has been re-installed and had its public key regenerated sshing to it will of course fail because the new key doesn't match the old one. Is there an easier way to tell ...
14
votes
3answers
21k views

SCP from one server to another without password prompt

What is the best way of doing scp from one box to the other without prompting for password? There are two servers: Server A (10.152.2.10): /home/oracle/export/files.txt Server B (10.152.2.11): /...
13
votes
2answers
65k views

SSH key-based authentication: known_hosts vs authorized_keys

I read about setting up ssh keys in Linux and have some questions. Correct me if I'm wrong… Let's say host tr-lgto wants to connect to host tr-mdm using ssh. If we want to be sure that it's the real ...
11
votes
2answers
628 views

A consistent and safe approach to passwordless accounts with SSH

I must admit that I like servers without passwords in some cases. A typical server is vulnerable to anyone who has physical access to it. So in some cases it is practical to lock it physically and ...
10
votes
3answers
1k views

How can I lock my own account from remote ssh login with password?

I don't want to disable remote login with password altogether, but I want to make it so that my account is only accessible with key pair authentication (there are other users who wants to use ...
9
votes
1answer
12k views

SSH asking for passphrase on public key with no passphrase set

I have been using public key authentication on my servers for a while now, but I am experiencing issues on a new 'client' trying to connect to github. I have read many threads to verify that my ...
8
votes
6answers
18k views

SSH public key won't send to server

I've been struggling with this for a couple hours so any help is greatly appreciated... I have 2x servers both of which I can ssh to with public keys from OSX, no issues at all there so I'm certain ...
8
votes
1answer
2k views

Given a private SSH key, how do I recover my public key?

I've somehow lost my id_rsa.pub file. I still have my id_rsa file. How do I recover the public key from the private key? (This question came up after ssh-copy-id was reporting "ERROR: No identities ...
8
votes
2answers
3k views

Restrict password-less backup with SFTP

I need to perform backup of a server to my computer using Duplicity: duplicity /etc sftp://backup@my.dynamic.ip.address//home/backup Before this can be done, I need to allow password-less access by ...
8
votes
2answers
2k views

How to make password-less login work

I generated a key and copied it to my target: ssh-keygen ssh-copy-id username@hostname I left the the location of the key as default and did not set any passphrase. For a small while after that, I ...
8
votes
1answer
205 views

Is there a technical reason why ssh-agent lacks a sudo-like inactivity/idle timeout feature?

There are some brief discussions about the existing ssh-agent -t feature at [1], and there was a post as far back as 2001 on debian-devel [2] wishing for an inactivity timeout feature. There's a ...
7
votes
2answers
5k views

Multiple SSH private keys, possible?

Is it possible to have multiple SSH key in a single client, and let ssh choose the right one automatically?
6
votes
6answers
396 views

Allow regular users to SSH using a private key they cannot read

Let's say I have a set of machines (called here the customers' machines) that only a small list of people (called the support staff) is allowed to SSH into, using only one account by machine (the ...
6
votes
2answers
610 views

Is it possible to use one SSH key per account for each account on a given remote server?

Suppose I have a number of accounts on a server called SERVER. Let's call them ACCOUNT1, ACCOUNT2 and ACCOUNT3. Suppose I don't want to have to type in the password for the account each time I ssh ...
6
votes
2answers
721 views

Send the password through stdin in `ssh-copy-id`

I need to automate some identity deployments, ideally using ssh-copy-id. I'm trying to provide the password through stdin, which is possible on ssh by using the -S flag. I'm aware that I can send ...
6
votes
3answers
711 views

Send an email any time an SSH key is used

I have about 30 nearly-identical CentOS 6 servers that I need to be able to push out updated config files automatically using an rsa key to log in as root. Usually this will just be rsync, but ...
5
votes
3answers
10k views

Authentication refused: bad ownership or modes for file /var/git/.ssh/authorized_keys [duplicate]

EDIT The issue as exposed here is solved (about files modes of the .ssh folder. But an other issue persists so I create a new question : > Unable to login with SSH-RSA key I can no longer ...
5
votes
1answer
2k views

SSH Public key comment separator

I've created a SSH authentication key (with ssh-keygen) in two different servers, both with a useful comment, but the public key of one server has == between the key and the comment, while the other ...
5
votes
3answers
384 views

For a same unix or linux user, different sets of environment variables

I'm using tcsh, and for a specific project every member of my team connects to a server with the same user. (This is something we cannot change). The situation arises because I want to have some ...
5
votes
2answers
2k views

Is it possible to use ssh-copy-id once password based logins are disabled?

Is it possible to use ssh-copy-id once password based logins are disabled? Otherwise, is there an utility for adding an authorized public key to a user or should I edit the ~/.ssh/authorized_keys file ...
5
votes
1answer
772 views

How to use keyfiles,for ZFS whole disk encryption?

Does anyone have a working implementation using keyfiles, preferably on SD Card, instead of a prompt for ZFS? I know how to do this with linux LVM/LUKS. In my opinion the FreeBSD full disk ...
5
votes
1answer
487 views

Automated ssh login with passphrase?

Logging onto a machine over ssh typically requires a password to be entered before access is granted. Alternatively, a key/certificate (without a passphrase) can be installed onto the remote machine ...
5
votes
1answer
1k views

Ssh keeps asking for passphrase several times

I have a remote machine, with which I have set up public-key ssh auth - that is, I can ssh to it without typing in password each time. And I have a set of actions in a script, which use that ssh ...
5
votes
1answer
624 views

SSH public keys not working; my home directory is encrypted

I installed Ubuntu LTS 14.04 server edition on a remote computer, and added my local public key to ~/.ssh/authorized_keys on the remote computer. I found that I still needed to use password to log in ...
4
votes
3answers
302 views

Automatic login via ssh (no GUI environment installed / no ssh-agent available)?

I have three systems, and I want to have them doing backups between them periodically. The two of them, have Debian Wheezy installed and the other one has Ubuntu 12.04 installed. Only the Ubuntu has a ...
4
votes
4answers
1k views

Must I store a private key in a file?

I have a db-driven application that needs to communicate with another server via ssh. The web app can generate a keypair and give the user the pubkey, or it can accept the unencrypted private key in a ...
4
votes
6answers
19k views

SSH: “Server refused our key” with no reason

I was trying to set up a simple backup script to run automatically that would copy a file from a Windows machine to a Linux one through SSH. As a lot of simple online tutorials suggest I used pscp ...
4
votes
3answers
6k views

parallel-ssh with Passphrase Protected SSH Key

I'd like to use my passphrase protected SSH key when performing tasks with parallel-ssh (and related tools). However, I can't get this to work. All the documentation, regarding parallel-ssh, show ...
4
votes
1answer
1k views

How to point to ssh folder with private keys to automatically choose one?

I would like to be able to use ssh user@host without the -i identity_rsa_or_else_private_key_file . Is there a place somewhere in ssh configs where I can point where are the private keys located ...
4
votes
1answer
2k views

Centos 6.5 not able to login with public key and login is sloooooow

I set up a new system with CentOS 6.5. I copied my public key key with: ssh-copy-id root@192.168.1.202 It took 15+ seconds for the password prompt to show, but then it copied. However ssh to root@...
4
votes
1answer
160 views

Accept any private key for authentication

Is it possible to configure OpenSSH (or any other standard sshd) to accept any key offered by a connecting client? EG ssh -i ~/arbitraryKey hostname grants a login shell while ssh hostanme doesn't. ...
4
votes
1answer
50 views

How do I stop ssh from offering other keys?

I have some server dev.example.com and in its authorized_keys file I have my ~/.ssh/id_rsa.pub key. I also have an ~/.ssh/my_test.pub key. My ~/.ssh/config specifies that for dev.example.com it ...
4
votes
2answers
282 views

SSH password requested when in Tmux

When I connect to my remote machine I do authenticate using a rsa key (I think is rsa, don't remember). If I do ssh from a regular shell I get logged on the machine without a password. However if I ...
4
votes
1answer
1k views

Why ssh-copy-id prompts for the local user password three times?

Noticed from my previous question that when trying to copy an SSH public key to a remote host via ssh-copy-id, I am prompted for the local user password three times: ssh-copy-id myuser@myserver ...
4
votes
1answer
4k views

ssh into an account which has no home directory

As a follow up to my previous question, I have decided to create the local user accounts as below. adduser --system --no-create-home USERNAME Now, I would like the local users to be able to access ...
4
votes
1answer
149 views

How can I determine which SSH keyfile was used to authenticate a login?

We have a hosted CentOS 6.5 server in which we have a single user account. That account has been configured to use SSH keyfile authentication for the users who need to access it. I would like to be ...
4
votes
1answer
372 views

Why do I need to insert the passphrase for an RSA key on a remote host after SSH?

From host B I can SSH various other hosts (C, D) without using any password as I put the public key in the correspondent authorized_keys files (in hosts C and D). From host A I can SSH host B (via ...
4
votes
1answer
643 views

Force pubkey-auth user to set password at first login

When I create a new user account I ask users to send me a public key, and want to force users to set the password the first time they log in with keypair authentication. If I create an account with an ...
3
votes
1answer
2k views

SSH Public Key authentication - works only after a physical login

I am trying to connect via SSH to my ubuntu server with public key authentication. For some reasons I get an "Permission denied (publickey)." on the client, whenever I execute ssh -i ~/.ssh/id_rsa &...
3
votes
1answer
246 views

How to know which public key was used when someone used passwordless ssh login?

Say for some reason, there is only a "user" account on a shhd server. Everyone has his own private key to ssh to the server, as "user". Then, is there a way to see who is he (during or after his ...
3
votes
2answers
80 views

Is there a one liner which can list public key fingerprints with authorized_keys as input?

I'd like to audit the authorized_keys file on a number of servers and match them with known AWS key fingerprints. Is there a one-liner which incorporates ssh-keygen -lf which will output the ...