Re: ssh only password authentication

From: Darren Tucker (dtucker@dodgy.net.au)
Date: 02/12/03 

From: dtucker@dodgy.net.au (Darren Tucker)
Date: Wed, 12 Feb 2003 06:18:38 GMT

In article <20030211214105625+0100@news.t-online.de>,
Jens Frederich <jens_frederich@web.de> wrote:
>hi,
>
>I've little problem. I've a Linux and a MacOSX machine with ssh.
>I've generated a rsa key. Then I've copy the indentity.pub to authorized_
>keys of the remote machine.
>I can't login with key, only password. Why?
>Here is the ssh -v output from one machine.

[snip]

A couple of possible reasons:

Older versions of openssh used authorized_keys2 for v2 keys, whereas
newer versions will accept v1 or v2 keys in authorized_keys.

The permissions on your directories may not be to sshd's liking if
StrictModes is yes (which is the default). You can find out which
it is by starting up your sshd in debug mode on a different port and
seeing which it complains about ("sshd -ddd -p 222"). 

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

Relevant Pages

  • Re: Opening ports in my firewall
    ... >> only with DSA keys, and not allowing manual password logins. ... - copy the .ssh directory to the new machine, if you control it, or ... Walter Dnes; my email address is *ALMOST* like wzaltdnes@waltdnes.org ...
    (comp.os.linux.security)
  • RE: sshd / ssh setup
    ... USA server and his windows/xp notebook to use SSH. ... followed sshd instruction and built ... and require users to submit keys. ...
    (freebsd-questions)
  • Re: SSH via Expect disconnects
    ... using autoexpect was the answer (please refer to thread ... >> I have received one suggestion that I explore the idea of using keys ... >> have poured through the manpage for Expect as well as SSH, ... >>> I am using an expect script to initiate an SSH session to another host ...
    (comp.lang.tcl)
  • Re: Firewall security: Re: Problems with simple Samba file share
    ... Man ssh ... ... Why is that, Peter? ... The firewall does help protect ... against someone stealing the keys and using them at another location. ...
    (comp.os.linux.misc)
  • [Full-Disclosure] SSH vs. TLS
    ... I'm having an interesting debate with a security architect about the ... This person is pushing for the use of TLS Telnet instead of SSH for the ... - There must be a secure means by which all server keys are distributed to ... appropriate ssh clients. ...
    (Full-Disclosure)