Questions tagged [key-authentication]
The key-authentication tag has no usage guidance.
279
questions
0
votes
0answers
16 views
Registration of new nodes in a network
We install Debian (server variant) on a new client node (possibly behind a masquerader) in our network.
Now we need to assign an autogenerated UID and secret keys(s) (for SSH and for API such as ...
3
votes
1answer
39 views
ssh won't connect with RSA key pairs iff /home directory is ceph-mounted
I've got the problem that on a server I maintain, after switching to a Ceph filesystem for the homedirectories, suddenly ssh login through RSA keys stopped working. I've tried checking several things ...
0
votes
1answer
28 views
Weird SSH behaviour
I have 3 computers. All have SSH running and All have No password mode on, PKI only.
The first has a keyPair used for SSH access to the other two, call this machine A.
Therefore, both B and C have A'...
2
votes
2answers
65 views
How does ssh-copy-id get the public key when only the private key is loaded?
When I have a private key loaded for a user, I can run ssh-copy-id user@remotehostname and will be prompted for a password. When I enter the correct password, I can now log in with the key. I have ...
2
votes
2answers
39 views
FreeBSD sudo root and ssh-agent
I'm trying to access a git server from my FreeBSD 11.3 box via root account. git server is secured to only allow access via SSH public key authentication.
When I log into my FreeBSD box, I do that as ...
0
votes
1answer
39 views
Required key not available when running nslookup, dig
I upgraded my system recently, and now I am seeing a really bizarre error, any ideas on what I can do to fix this issue?:
nslookup 8.8.8.8
../../../../lib/isc/unix/socket.c:2135: internal_send: 192....
0
votes
2answers
60 views
SSH keys that can be used only in one machine
My requirement is simple. I have generated a SSH key-pair (Public and Private) on a server say "A". Now I have uploaded my Public SSH key in AWS IAM and have generated a SSH key ID to connect to a ...
1
vote
1answer
26 views
SSH - Permission denied (publickey) - doesn't work in case of one node
I have 3 nodes: node A, B and C. A wants to connect to B and C via ssh. B and C are identical servers. A can connect to B but cannot to C.
ssh user@node
The error I see:
Permission denied (...
0
votes
1answer
49 views
Passwordless (key based) SSH Access to a Linux system from a MAC?
New Edits:
So I went back and did some significant testing and revised my opinions about my problem a little.
First, here's a link to a thorough and quickly graspable diagram of the SSH Handshake (...
0
votes
0answers
38 views
How to set SSH key file to different directory?
Using Debian 8.
I need a myuser user, which should have no password, just key file based SSH login.
My /etc/passwd contains the following:
myuser:x:11:11:myuser:/my/specific/path:/usr/sbin/nologin
...
0
votes
1answer
51 views
SSH not using public/private keys
I have a system where SSH-ing still asks for the password even though:
My public key is correctly in the authorized_keys file on the remote server.
My private key is stored as id_rsa in my .ssh ...
0
votes
1answer
36 views
Debian does't work ssh authorize key
I have server access on Debian on my machine №1.
Authorization is good.
I want to do the same on the machine №2. Generated keys, write public at the end ~/.ssh/authorized_keys. But I have an error ...
0
votes
0answers
22 views
What are the performance overheads between logging in to another user account via ssh vs login
In Gnu/linux systems, I can perform a full local login (i.e. where logname returns the same output as whoami) by two methods:
login:
sudo login second_user (prompted for password)
ssh:
ssh ...
1
vote
0answers
83 views
SSH Key authentication on WSL always says 'debug2: we did not send a packet, disable method'
/etc/ssh/sshd_config looks like this: pastebin.ubuntu.com link. It's default except I uncommented authorized keys, pubkey auth and listenaddress.
Then I did ssh-copy-id -i ~/.ssh/id_ed25519 user@host,...
1
vote
0answers
32 views
ssh to one machine and than another wihout password
If I ssh a server from my work PC, I do not have to enter password, it uses keys for passwordless authentication.
Yet If I use vpn and ssh to connect to my work PC (with a password) and then ssh to ...
1
vote
1answer
24 views
Several representations for key fingerprint
In ssh server and client authentication, key fingerprints are presented in different ways, even using the same command ssh-keygen -lf (in different hosts or as regards different keys).
Representation ...
1
vote
1answer
141 views
sudo authentication when using SSH key auth with Keepass+Putty
I an using Putty to login via SSH to various Linux machines (mostly CentOS and Ubuntu). I use SSH key authentication, whereas the key ist stored in Keepass 2.x and handed over to Putty via tha ...
0
votes
0answers
38 views
Create Passwordless SSH login without exectuting SSH-KEYGEN on Client?
The normal installation/configuration of SSH on a client requires the use of ssh-keygen to create a local private/public key pair in the .ssh folder of the user's profile.
To configure the normal, ...
0
votes
1answer
57 views
Is file specified in .ssh/config/IdentityFile private or public key?
If I specify in my ssh config
Host myhost
User myname
IdentityFile mykey
then what is IdentitfyFile: private or public key?
0
votes
1answer
83 views
Cannot SSH into server because authorized_keys is in a different folder
I was able to SSH into this remote server using password authentication before. I wanted to change that to make it use private/public key pairs instead. I followed the necessary steps by generating a ...
0
votes
0answers
39 views
configure ssh to allow login with ssh key (and no google 2FA) or password + google 2FA?
I'd like to configure my (debian) machine to allow ssh logins with two different options for authentication:
ssh public key authentication
password authentication with a (google) 2 factor ...
1
vote
0answers
49 views
SSH publicKey auth fails in RH7.4
I'm trying to set publicKey authentication on my RH7.4. Exact same procedure worked on 6.5... so I cannot figure out what is missing.
Tried also step after step from documentation and sites, but all ...
0
votes
1answer
303 views
SFTP over Midnight Commander still asks for a password
In linux command line, when I connect to sftp or ssh this, it connects using my public keys and doesn't ask me for a password.
sftp user@host
It also works when I do
ssh user@host
But somehow ...
0
votes
0answers
115 views
Passwordless SCP from automated script - NO ADMIN RIGHTS server side
I have a cloudways server with no admin rights. I have set up ssh keys using their website interface, to use ssh and scp without passwords from a raspberry pi 3b+ running stretch, however i am having ...
0
votes
2answers
42 views
How to find out which public key is actually in use and remove deprecated ones (gpg)?
I'm on Linux Mint 19.1 Cinnamon.
I have a minor problem with identifying the actual up-to-date GPG public key used by apt-get with Spotify music application.
I would like to remove the old - ...
2
votes
1answer
3k views
Specifying an IdentityFile with SSH
I am trying to make a more streamlined means to establish an SSH client connection to a remote server. I have created a public/private keypair and used ssh-copy-id to install the public key onto the ...
0
votes
0answers
75 views
Why Xagent can't work in Xshell 6 when connectting other servers for SSH key authentication
I want to avoid input password when remote other servers after login jump server.
So I setuped Public Key User Authentication like below and it can work in jump server. But then when I try to remote ...
4
votes
1answer
150 views
Best way to setup sudo authentication on servers that don't use a password?
With sudo, you can either set it to ask for a password or not ask for a password.
Historically, everything was password-protected, which is the model that I am used to. However, encryption seems to ...
1
vote
1answer
54 views
Possible to get sshd (openssh) to log the public key of failed key based login attempts?
As I understand sshd (openssh in my case) typically does/may log the fingerprint/hash of the public key of incoming connections which are attempting to authenticate via key.
What I'm looking for is ...
0
votes
2answers
58 views
Authenticate with a private key
Is it possible to authenticate myself with the private key at the public key?
The scenario: I gave another company the public key so that I can authenticate myself with my private key at the sftp ...
0
votes
1answer
72 views
Add additional key pair for authentication
I need to have a new key pair for an additional host that will be allowed to login to the server ( but I can't share the existing pair due to security reasons).
Now, I created a new pair on the ...
2
votes
0answers
3k views
Add LDAP server certificate to trusted list and enable certificate verification
I am trying to use a secure LDAP connection via TLS ldaps://<server_name>:<port> for various applications (e.g. Gitlab). However, the connection raises certificate errors which is due to ...
1
vote
2answers
152 views
SSH key not found on remote machine [closed]
I have the following setup: I have my laptop A, a computer B, and a remote machine C. C can only be accessed from B via ssh, B may be accessed via ssh from A or used directly. A is always used ...
0
votes
1answer
140 views
Locking account password and instead use RSA key
Setting up a CentOS 7 cloud server for a client, and have run into an issue with setting it to use a public RSA key instead of a password for one of a handful of SFTP users.
Found an online guide on ...
1
vote
1answer
75 views
ssh asking for password when trying to login via public key
Although these lines are present in my server's /etc/ssh/ssd_config
RSAAuthentication yes
PubkeyAuthentication yes
when trying to login to the above server by explicitly providing a private key to ...
1
vote
0answers
31 views
How can a script run by a user logged-in over ssh, get the user's public key? [duplicate]
I need to get the users public key, that was used to authenticate the current ssh session.
Running env only shows:
SSH_CLIENT=192.168.1.2 35538 22
SSH_TTY=/dev/pts/0
SSH_CONNECTION=192.168.1.2 35538 ...
2
votes
0answers
129 views
SSH asking for passphrase although ssh-agent / keychain is running
Disclaimer:
It would be very nice to read this question thoroughly before marking it as duplicate. I have read dozens of other questions (here, at superuser.com, serverfault.com and so on), all ...
0
votes
0answers
235 views
ssh to another user of the same host using dns domain
Is it a problem to ssh to another user of the same host using dns domain? I cannot conigure it. I cannot configure it to passwordless connection. Also when I am trying to connect with password the ...
1
vote
3answers
79 views
How to tell what method was used to log in (Password vs. Keyfile) from the bashrc
Is there a way how you can check what auth method the user which just logged in to an account were using?
I like to print out a warning after login if someone is using a password instead of a keyfile....
0
votes
1answer
158 views
multiple users remote access using ssh key based authentication
I'm new to Linux, I'm having CentOS 7. I want to allow multiple users for one server (Path - /var/www/ folder) using ssh key based authentication.
For that I have created 2 new users from my root ...
1
vote
2answers
222 views
Check whether root-access is allowed without ssh-key
I want to check via BASH if root access on a certain server is possible without a ssh-key. So the script should check if you have access without SSH key or not. Here is my attempt: (pseudocode)
/usr/...
-1
votes
2answers
7k views
“Permission denied (publickey,gssapi-keyex,gssapi-with-mic)” AWS .pem provided
I'm quite new to this and it's the second server that I setup on my own, it should be straight forward and simple but I'm getting this error.
Looked all around but the solutions don't meet my ...
1
vote
1answer
2k views
How to add a public key into system keyring for kernel without recompile?
I want to add a public key from the keypair that I used to sign my kernel module, into system_keyring. However, there's a problem:
With the command of cat /proc/keys | grep system_keyring, I've got ...
1
vote
1answer
39 views
Setting up Public/Private Key Pair for Linux Login (not SSH)
I've searched Google and this site for the answer to this question, and haven't been able to find the answer. My goal is to use a public/private key pair to login to my desktop computer from a USB ...
2
votes
4answers
2k views
Sharing SSH Keys to login?
I am little bit lost or confused.
I have some secure server where inside ~/.ssh/authorized_keys i have a key to remotely login those servers from my desktop (mac book )
Now that secure server need ...
1
vote
2answers
2k views
How to verify that ssh certificate was signed by specified ssh CA private key?
I am trying to harden my ssh setup using this material. It works fine, but I've got a question which I'm struggling to find the answer to.
Does anyone know if there is a way to check the ssh host/...
2
votes
1answer
112 views
How to enable usage of SSH keys pair without exposing it
We have a topsecret@remote.org SSH account that can be accessed with SSH key pair ts_key.pub/ts_key.priv from our gateway server (gateway.org). We have many sysadmins that need to access that account. ...
2
votes
2answers
2k views
What is the difference between /etc/ssh/ and ~/.ssh?
I’m having fun with OpenSSH, and I know the /etc/ssh directory is for the ssh daemon and the ~/.ssh directory is for a particular user.
Both directories contain private and public keys:
But what is ...
-1
votes
2answers
49 views
SSH key creation in stand alone machine
is it possible to create ssh keys (ssh-keygen) in stand alone machine. and then copy private ssh and public ssh key to client ssh directory and server ssh directory to perform password less ...
-1
votes
1answer
362 views
Shell script “apachectl restart” password automation
In a shell/bash script (I use it for vagrant provision), I configure apache2 server and then restart it. But since I use a key file for https, apache asks for a password. How can I automate this and ...
