Questions tagged [key-authentication]
Questions pertaining to key authentication, a type of authentication that may be used as an alternative to password authentication. Instead of requiring a user's password, it is possible to confirm the client's identity by using asymmetric cryptography algorithms, with public and private keys.
328
questions
1
vote
0answers
38 views
ssh error because pub key not present
I have a .ssh directory with a lot of keys to a lot of systems, using a collection of ssh config files, this has worked flawlessly for a few years now.
I reinstalled my machine yesterday (from Ubuntu ...
0
votes
0answers
31 views
SSH login not working with Kerberos (Linux)
I am trying to perform SSH login using Kerberos authentication.
Instead of Kerberos, password is prompted for login.
There are three computers : client, kdcserver and service (SSHD server).
Client is ...
0
votes
1answer
17 views
When using SSH is it possible to prevent password authentication only if a certificate exists in the user's home directory?
I am spinning up a public facing server with SSH running for remote access. Every standard human user will be using a certificate for authentication.
However one very limited functional account exists ...
0
votes
1answer
22 views
Searching keys with gpg results in key server failure
The following simple command is failing
$ gpg --search-keys "hi"
gpg: error searching keyserver: Server indicated a failure
gpg: keyserver search failed: Server indicated a failure
...
1
vote
0answers
22 views
Ubuntu 16.04.7 sshd won't accept 4096 bit public key authentication
[Ubuntu 16.04.7, OpenSSH_7.2p2 Ubuntu-4ubuntu2.10, OpenSSL 1.0.2g 1 Mar 2016, updated today as part of this activity]
I'm trying to setup public key authentication for a new user I want to give ...
1
vote
1answer
50 views
SSH Publickey+TOTP and Password+TOTP simultaneously
I am trying to setup an SSH server where some users prefer to use an SSH key but others prefer LDAP provided passwords.
I found out that I can set in sshd_config for publickey + PAM or PAM only ...
0
votes
0answers
14 views
Account creation newbie question
I have been told that I need to set up a special account on an older centos 6 linux server. Corporate Security needs to Nexpo Scan it and has asked for this specific user.
Local Accounts
If the ...
0
votes
2answers
83 views
I removed my public key from my ~/.ssh directory, why can I still access host without password?
I generated a public/private key pair on my client machine. They are in ~/.ssh as id_rsa and id_rsa.pub. I added the public key to the host machine's authorized_keys file, and now I can successfully ...
6
votes
2answers
1k views
how to append public keys to remote host instead of copy it
I used in my bash script the follwing cli , in order to send the public key to remote machine
sshpass -p $pass scp /root/.ssh/authorized_keys root@$remote_host:~/.ssh/authorized_keys
but since we ...
0
votes
1answer
35 views
No support authentication methods available (server sent: publickey)
I am trying to connect to my ubuntu instance after rebooting it up off of AWS. The public IPv4 address changed, and I updated the Host Name on PuTTY expecting it to connect like it always does after ...
1
vote
1answer
217 views
SSH client seems to be checking '/dev/null' instead of 'known_hosts' file when checking remote server's ECDSA key
I'd like to know why my known_hosts file doesn't seem to be checked correctly while using SSH. In short, my guess is that my SSH client is checking /dev/null instead of the known_hosts file. Details ...
4
votes
1answer
102 views
encrypt private keys for dropbear ssh-access
I'd like to use dropbear as an alternative, minimal ssh-server and -client. dropbear allows the use of private-public-keys for ssh-access, although the keys are not identical to the ones used by ...
0
votes
1answer
260 views
How to delete SSH keys
I am new to this field.
I had a server administrator but he left. I assume his key was installed in authorized_keys.
How to delete these keys if they exist. How can I find out if they are really (...
1
vote
0answers
16 views
DEBIAN SSH Server with google authenticator. How to allow “publickey+2FA” for user1 and “password+2FA” for user2?
0
The problem is very simple but I'm struggling for hours without finding the good solution.
I want "user1" to log in to the SSH server with publickey + 2FA code (but no password prompt, ...
0
votes
1answer
200 views
Trouble verifying linux, even after downloading key I get “No public key”
Following these instructions, I downloaded and unpacked the kernel.
https://priyachalakkal.wordpress.com/2013/01/19/verifying-digital-signature-using-gpg/
Then I tried to verify the signature but I ...
0
votes
0answers
20 views
How do I access gpg files, after moving to new system?
I don't know how to access my gpg files after moving them to a new os.
The files contains my passwords so it is quite important. Previously I was using the app ' Pass ' to access them. I have the gpg ...
0
votes
1answer
251 views
Trouble accessing remote server with public key
i am posting this question after extensive search in google to create public key and accessing server using public key, i am still unable to resolve this issue, as i am getting below error.
OpenSSH_7....
1
vote
1answer
45 views
ssh login public key authentication private or public key
What should be the value of the -i option when login in using ssh?
I had previously supplied the public key ssh -i ~/.ssh/id_rsa.pub on an OpenBSD machine that worked but when trying to ssh into an ...
1
vote
0answers
116 views
SSH - Key signing of ED25519 style keys does not work
Trying to set up a SSH Cert Authority so I can centralize new key setup rather than modifying the authorized keys on each of my machines. I found something really odd - the keys that I develop work ...
0
votes
1answer
47 views
SSH PKI authentication
At my company, we are currently integrating AD authentication to our Linux servers. I've been able to complete this part using PBISO (Power Broker Identity Service). Users are able to login using AD ...
0
votes
0answers
13 views
Wiered ssh key connection
I couldnt use copy-id to copy ssh key to server (debian) so tried to copy public key manually into the /.ssh/authorized_keys so I generated a ssh key inside the macOs and put the public key inside the ...
1
vote
2answers
107 views
Can a user with no password set login with ssh?
First, I want to be clear, I am not asking about just using public key authentication without a prompt. I have a use case where a user must only be allowed access through SSH public key authentication....
1
vote
0answers
285 views
gnome-keyring: couldn't find any place to import files
I need to use a client certificate. I was able to import it successfully on Windows and Mac, however when I am trying to import it on Linux I am getting the following error:
$ gnome-keyring import ...
0
votes
0answers
30 views
ssh server is rejecting public key [duplicate]
Sometimes I need to login on my Linux Mint 19 PC remotely via ssh. To make this more secure I try to switch to use Public Key authentication (as I already use it on my raspberries).
Basically the ...
0
votes
0answers
980 views
ssh error while logging in using private key “loaded pubkey invalid format” and “error in libcrypto”?
UPDATED
When I am trying to generate a public key it still gives me an error
"error in libcrypto"
Load key "breakthis": error in libcrypto
Private key is given below
I am trying to solve a Hack ...
1
vote
1answer
86 views
Client still can ssh login without password on server after generating new keys
First I generated keys on client (Ubuntu 18.04)
$ ssh-keygen -t rsa -f .ssh/id_rsa
then I copied it to server (Ubuntu Server 18.04)
$ ssh-copy-id 192.168.1.58
Now I can see the key in .ssh/...
1
vote
2answers
41 views
What kind of host key does the `sshd` command require?
The man page for sshd states the -h argument Specifies a file from which to read a host key.
But is it asking for the public host key or the private host key?
I can't seem to find this tidbit of ...
4
votes
2answers
2k views
Specifying allowed client SSH key types that the server accepts
I have a server (running openssh 8.1p1-2) with sshd_config configured like this to accept only ed25519 keys:
PubkeyAcceptedKeyTypes ssh-ed25519-cert-v01@openssh.com,ssh-ed25519
That works great for ...
0
votes
1answer
25 views
How do the server side commands configured in SSH authorized_keys process the incoming data?
Some utilities like git and Gitolite can restrict what commands an SSH key can run by making modifications to the authorized_key files.
Gitolite for instance changes modifies the entry in the ...
1
vote
1answer
1k views
WSL ssh to localhost with publickey but keeping asking for password
I was trying to set up publickey ssh connection to localhost with no password login on my WSL(Ubuntu 16).
But everytime I am keeping being asked to enter password. When I using port22, my password ...
0
votes
1answer
35 views
How can I set a policy to enable public key authentication only if the pubkey has a password that meets requirements?
How can I set a policy to enable public key authentication only if the pubkey has a password that meets requirements?
Currently people make keys with ssh-keygen. We want to enforce creation and use ...
0
votes
1answer
1k views
Stuck not being able to setup the private/public key
So, this is what I'm trying to do, my windows 10 will connect to the remote Operating System, CentOS 7.
I did ssh-keygen on the windows. Then using WinSCP, I copied the contents of id_rsa.pub on the ...
1
vote
1answer
61 views
Can an ssh key be configured to reject a connection if it is not connecting to the right port?
As sshd service can listen on different ports is it possible to configure a key which will work only if the connection was made on one port, but not the other?
By this I mean that the key appears ...
1
vote
1answer
364 views
Not able to install latest R statistical package in Debian Stable
I am trying to install latest R package on Debian Stable (Buster) following instructions on this page: https://cloud.r-project.org/
I added following to /etc/apt/sources.list:
deb https://cran....
0
votes
1answer
246 views
problem sftp connection with rsa keys
I am on RHEL 6. I have a user Jack which doesn't have shell access but SFTP. With my own user, I have created an RSA key pair with ssh-keygen command for jack (the user). I have created .ssh folder ...
0
votes
1answer
326 views
SSH connection with public key not working with specific name
When trying to connect to a server with:
ssh -i MYKEY_SSH user@IP
It prompts for the password. However, if I rename that key for any other name the connection is properly established.
That is, if I ...
0
votes
1answer
1k views
How can I use public key authentication to access a ssh server on android?
My android 4.4.2 (it is old but can't be upgraded) phone runs a SSH server by SimpleSSHD app. It generates different random password at every login, so is very inconvenient for me as a client user. ...
0
votes
0answers
245 views
Add a remote server to known_hosts automatically without ssh-keyscan
I have a BusyBox environment without ssh-keyscan and I need to add a host to the known_host file, so that scp doesn't ask if I can trust the host.
I read this question and it looks like it could be ...
1
vote
0answers
160 views
authorized_keys in non standard place
authorized_keys in usualy put under .ssh in one HOME's directory.
I want to put it in a non standard place like /etc/AK/authorized_keys.archemar
I set up sshd_config with a match rule
Match user ...
0
votes
1answer
2k views
Authentication refused: bad ownership or modes for directory /root
I'm trying to SSH into my remote VPS with Debian onboard. Running sshd in debug mode, I found that:
Authentication refused: bad ownership or modes for directory /root
I tried setting permissions as ...
1
vote
3answers
745 views
ssh not allowing passwordless login
I use passwordless logins all the time and have set it up on numerous systems and have debugged a lot of issues with it. However, I'm in a situation that I can't diagnose the root cause. I have an ...
16
votes
3answers
16k views
Is it possible to have 2 ports open on SSH with 2 different authentication schemes?
I'm currently trying to set up an SSH server so that access to it from outside the network is ONLY allowed using an SSH Key and does not allow access to root or by any other username/password ...
0
votes
1answer
137 views
Trying to connect to remote server via SSH but still prompts for password
I generated a ssh key pair with ssh-keygen, use ssh-copy-id to the server and checked that the public key was added to authorized_keys, but then when i try to connect with ssh -i ~/.ssh/MY_KEY user@...
1
vote
1answer
374 views
Add an SSH key on boot
I have a Git repo that is authenticated with an SSH key - the key is not the standard id_rsa.
I can run:
eval $(ssh-agent -s)
ssh-add /home/forge/.ssh/otherkey
Then
git pull origin master
This ...
0
votes
2answers
88 views
SSH - Periodically require password even when public key is present
How do I allow public key authentication but still require user's password every 24 hours? Preferred host OS is Debian.
2
votes
1answer
67 views
Does ssh-add honor the declarations made in ssh_config file(s)?
Background
I use a 4096-bit RSA key-pair for authorizing access to my server. By ssh_config files I am referring to ~/.ssh/config and /etc/ssh/ssh_config.
Here's what my ~/.ssh/config looks like:
...
2
votes
2answers
128 views
Allow “another” user to make personal backups on my server through sshd with no shell access (public key login)
I have set up a Ubuntu server at my home just to learn "stuff". I overdid a bit and have some spare room on my SSD. I am prepared to give a friend some of that space to make backups on my computer. He ...
1
vote
1answer
519 views
How to mount Windows CIFS in Linux server using PKI authentication?
I have a Windows File Share server and want to mount those CIFS in Linux server using PKI authentication. This is the command to mount Windows shares in Linux using username & password:
mount....
1
vote
1answer
3k views
How to Require PubkeyAuthentication using SSH from Linux client to Windows OpenSSH server
I know there are a million similar posts, but I have not yet found one that answers this question.
I'm trying to establish an ssh connection from an Ubuntu 18.04 client to the built-in OpenSSH SSH ...
0
votes
2answers
525 views
Compare Key ID of RPM package with Key Fingerprint of RPM-GPG-KEY
During work with RPM packages I frequently need to validate signatures against available GPG keys.
Using
rpm -qip --nosignature <package.rpm> | grep Signature
gives me an Key ID, i.e.:
...
