Questions tagged [key-authentication]
The key-authentication tag has no usage guidance.
0
votes
0answers
28 views
configure ssh to allow login with ssh key (and no google 2FA) or password + google 2FA?
I'd like to configure my (debian) machine to allow ssh logins with two different options for authentication:
ssh public key authentication
password authentication with a (google) 2 factor ...
1
vote
0answers
33 views
SSH publicKey auth fails in RH7.4
I'm trying to set publicKey authentication on my RH7.4. Exact same procedure worked on 6.5... so I cannot figure out what is missing.
Tried also step after step from documentation and sites, but all ...
0
votes
1answer
56 views
SFTP over Midnight Commander still asks for a password
In linux command line, when I connect to sftp or ssh this, it connects using my public keys and doesn't ask me for a password.
sftp user@host
It also works when I do
ssh user@host
But somehow ...
0
votes
0answers
42 views
Passwordless SCP from automated script - NO ADMIN RIGHTS server side
I have a cloudways server with no admin rights. I have set up ssh keys using their website interface, to use ssh and scp without passwords from a raspberry pi 3b+ running stretch, however i am having ...
0
votes
2answers
32 views
How to find out which public key is actually in use and remove deprecated ones (gpg)?
I'm on Linux Mint 19.1 Cinnamon.
I have a minor problem with identifying the actual up-to-date GPG public key used by apt-get with Spotify music application.
I would like to remove the old - ...
1
vote
1answer
320 views
Specifying an IdentityFile with SSH
I am trying to make a more streamlined means to establish an SSH client connection to a remote server. I have created a public/private keypair and used ssh-copy-id to install the public key onto the ...
0
votes
0answers
45 views
Why Xagent can't work in Xshell 6 when connectting other servers for SSH key authentication
I want to avoid input password when remote other servers after login jump server.
So I setuped Public Key User Authentication like below and it can work in jump server. But then when I try to remote ...
4
votes
1answer
135 views
Best way to setup sudo authentication on servers that don't use a password?
With sudo, you can either set it to ask for a password or not ask for a password.
Historically, everything was password-protected, which is the model that I am used to. However, encryption seems to ...
1
vote
1answer
41 views
Possible to get sshd (openssh) to log the public key of failed key based login attempts?
As I understand sshd (openssh in my case) typically does/may log the fingerprint/hash of the public key of incoming connections which are attempting to authenticate via key.
What I'm looking for is ...
0
votes
2answers
56 views
Authenticate with a private key
Is it possible to authenticate myself with the private key at the public key?
The scenario: I gave another company the public key so that I can authenticate myself with my private key at the sftp ...
0
votes
1answer
47 views
Add additional key pair for authentication
I need to have a new key pair for an additional host that will be allowed to login to the server ( but I can't share the existing pair due to security reasons).
Now, I created a new pair on the ...
2
votes
0answers
1k views
Add LDAP server certificate to trusted list and enable certificate verification
I am trying to use a secure LDAP connection via TLS ldaps://<server_name>:<port> for various applications (e.g. Gitlab). However, the connection raises certificate errors which is due to ...
1
vote
2answers
60 views
SSH key not found on remote machine [closed]
I have the following setup: I have my laptop A, a computer B, and a remote machine C. C can only be accessed from B via ssh, B may be accessed via ssh from A or used directly. A is always used ...
0
votes
1answer
98 views
Locking account password and instead use RSA key
Setting up a CentOS 7 cloud server for a client, and have run into an issue with setting it to use a public RSA key instead of a password for one of a handful of SFTP users.
Found an online guide on ...
1
vote
1answer
54 views
ssh asking for password when trying to login via public key
Although these lines are present in my server's /etc/ssh/ssd_config
RSAAuthentication yes
PubkeyAuthentication yes
when trying to login to the above server by explicitly providing a private key to ...
1
vote
0answers
31 views
How can a script run by a user logged-in over ssh, get the user's public key? [duplicate]
I need to get the users public key, that was used to authenticate the current ssh session.
Running env only shows:
SSH_CLIENT=192.168.1.2 35538 22
SSH_TTY=/dev/pts/0
SSH_CONNECTION=192.168.1.2 35538 ...
2
votes
0answers
97 views
SSH asking for passphrase although ssh-agent / keychain is running
Disclaimer:
It would be very nice to read this question thoroughly before marking it as duplicate. I have read dozens of other questions (here, at superuser.com, serverfault.com and so on), all ...
0
votes
0answers
178 views
ssh to another user of the same host using dns domain
Is it a problem to ssh to another user of the same host using dns domain? I cannot conigure it. I cannot configure it to passwordless connection. Also when I am trying to connect with password the ...
1
vote
3answers
69 views
How to tell what method was used to log in (Password vs. Keyfile) from the bashrc
Is there a way how you can check what auth method the user which just logged in to an account were using?
I like to print out a warning after login if someone is using a password instead of a keyfile....
0
votes
1answer
95 views
multiple users remote access using ssh key based authentication
I'm new to Linux, I'm having CentOS 7. I want to allow multiple users for one server (Path - /var/www/ folder) using ssh key based authentication.
For that I have created 2 new users from my root ...
1
vote
2answers
164 views
Check whether root-access is allowed without ssh-key
I want to check via BASH if root access on a certain server is possible without a ssh-key. So the script should check if you have access without SSH key or not. Here is my attempt: (pseudocode)
/usr/...
0
votes
1answer
1k views
How to add a public key into system keyring for kernel without recompile?
I want to add a public key from the keypair that I used to sign my kernel module, into system_keyring. However, there's a problem:
With the command of cat /proc/keys | grep system_keyring, I've got ...
1
vote
1answer
34 views
Setting up Public/Private Key Pair for Linux Login (not SSH)
I've searched Google and this site for the answer to this question, and haven't been able to find the answer. My goal is to use a public/private key pair to login to my desktop computer from a USB ...
2
votes
4answers
2k views
Sharing SSH Keys to login?
I am little bit lost or confused.
I have some secure server where inside ~/.ssh/authorized_keys i have a key to remotely login those servers from my desktop (mac book )
Now that secure server need ...
1
vote
2answers
1k views
How to verify that ssh certificate was signed by specified ssh CA private key?
I am trying to harden my ssh setup using this material. It works fine, but I've got a question which I'm struggling to find the answer to.
Does anyone know if there is a way to check the ssh host/...
0
votes
0answers
32 views
How to use 2FA with cert based SSH auth?
I used this guide to enable Google TOTP auth on Ubuntu 16.04.
SSH only allows cert based auth (PasswordAuthentication no)
I set ChallengeResponseAuthentication yes and restarted the SSH service.
I ...
2
votes
1answer
106 views
How to enable usage of SSH keys pair without exposing it
We have a topsecret@remote.org SSH account that can be accessed with SSH key pair ts_key.pub/ts_key.priv from our gateway server (gateway.org). We have many sysadmins that need to access that account. ...
1
vote
2answers
1k views
What is the difference between /etc/ssh/ and ~/.ssh?
I’m having fun with OpenSSH, and I know the /etc/ssh directory is for the ssh daemon and the ~/.ssh directory is for a particular user.
Both directories contain private and public keys:
But what is ...
-1
votes
2answers
44 views
SSH key creation in stand alone machine
is it possible to create ssh keys (ssh-keygen) in stand alone machine. and then copy private ssh and public ssh key to client ssh directory and server ssh directory to perform password less ...
-1
votes
1answer
271 views
Shell script “apachectl restart” password automation
In a shell/bash script (I use it for vagrant provision), I configure apache2 server and then restart it. But since I use a key file for https, apache asks for a password. How can I automate this and ...
1
vote
0answers
24 views
How can I list which users can login without key auth?
I have recently been charged with a large amount of Ubuntu servers that are exclusively accessed via private/public SSH authentication.
There is no information regarding how these servers were ...
0
votes
0answers
411 views
SSH Login success, Permission denied in remote machine
I copied the ssh public key to a remote linux server with ssh-copy-id. (Ref: here) . And I am able to login with
local@Me$ ssh myuser@remote.ser.ver
login success
myuser@remote $ ll
drwxr-xr-x 3 ...
4
votes
2answers
654 views
Can I ssh via public key if there is no home directory on the remote system?
I currently have to ssh with user FOO then sudo to user BAR.
I would like to ssh using a public key, but on the remote system there is no home directory for user FOO, so obviously no .ssh/...
3
votes
1answer
1k views
Seahorse / GNOME Keyring does not recognize my new ed25519 SSH key, is there another way to have the key unlocked upon login?
I am unsure if I did the whole procedure right, so let's start with what I've done:
$ ssh-keygen -vvv -o -a 1000 -t ed25519 -f ~/.ssh/id_ed25519 -C "$(whoami)@$(hostname)--$(date -I)"
with some real ...
2
votes
1answer
186 views
SSH public key exchange
I frequently SSH into a remote Linux server of which I am an authorized user. In order to make the communication more secure, I setup the public/private key authentication instead of using password ...
0
votes
1answer
79 views
What is the default number of login attempts before login fail
When I connect to a remote machine using ssh, my ssh agent will try all key files available in .ssh.
Per default, how many key files can the agent try for the log-in until server sends permission ...
0
votes
2answers
5k views
SSH - Permission denied (publickey)
I know this question has been asked many times and I have tried the top answers from all of them, but I still can't get mine to work. It says that files like /home/valachio/.ssh/id_rsa are not found ...
2
votes
1answer
2k views
Connecting to server with SSH using public key
(I've previously asked this question on SuperUser, but having tested that the key works fine on a MacBook running OSX, I feel the problem must be with Debian):
The problem
I've recently setup a ...
0
votes
1answer
305 views
Passwordless SSH using pem file or ppk file not working anymore
I have an instance on OpenStack installed with CentOS-7-x86_64 that is accessed using putty, the pem file which was converted to ppk file using the puttygen, worked fine and provided passwordless ...
2
votes
1answer
327 views
Warning: remote host identification has changed!
As we all know, when we try to login to remote Linux machine we do ssh $remote_machine and enter password.
In case the remote machine has been reinstalled from scratch then we should get the message:
...
4
votes
4answers
3k views
SSH is requiring password when public key is on remote host
So I have been struggling with trying to authenticate without a password. Here is all my steps.
On Source Host ssh-keygen and saved the file into the default directory with a blank key phrase (enter)
...
2
votes
1answer
925 views
Who SSH'd into User using auth.log/RSA Key
Ubuntu 14.04:
Using the auth.log im able to see: accepted publickey for $user from 192.168.xx.xx port xxxxx ssh2: RSA xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx
Using that RSA Key how do i know ...
2
votes
2answers
3k views
Error: GPG check FAILED when upgrading system using dnf in Fedora
When I tried to upgrade a Fedora 26 Server earlier today, I got this error message after downloading packages:
warning: /var/cache/dnf/forensics-5e8452ee3a114fbe/packages/protobuf-c-1.3.0-1.fc26....
0
votes
0answers
237 views
Key in DER format. Convert to line for .ssh/authorized_keys?
I have a file in DER format. I want to convert this file to a line for .ssh/authorized_keys.
How could this be done?
0
votes
2answers
34 views
Configured Public/Private Key on CentOS6 - Still letting me connect without Private Key
I have a VPS with CentOS 6. I've noticed a lot of login attempts via SSH, so I want to lock it down with key based authentication. Here is what I have done so far....
Ran the following on my client ...
1
vote
1answer
1k views
SSH Connection on Remmina using AWS public key
I am trying to login to remmina using the ssh .pub key. but when I try to connect it is asking me to ssh private key passphrase.
I do not know what I am doing wrong but here is a debug log.
[SSH] ...
4
votes
2answers
6k views
How to login with ssh as a specific user?
On an Ubuntu AWS instance I want to ssh in as "thufir" with sudo privileges. Create user thufir with sudo adduser thufir and then adduser thufir sudo from the "ubuntu" user? Simply add my public key ...
1
vote
0answers
60 views
Ability to use GNUPG's Webkey as a Web Services authentication mechanism
Is there a way to use GNUPG's new Webkey capability to create a federated passwordless public key authentication mechanism for web services login?
Something like the following architecture:
.----...
5
votes
3answers
2k views
Best way to distribute user's public SSH key to many hosts?
Obviously I could scp the key to every host the user needs SSH access to. But if there are many hosts this could take a long time. Especially if public key authentication is not set up yet, every scp ...
-1
votes
1answer
128 views
Using public keys for SSH authentication on several servers
I'm using a key pairs method for authenticating my sftp client on a remore server, that is a black box for me. So I've sent them the public key that I've generated with ssh-keygen command.
So far ...
