SSH Tunnel with Public-Key

From: Jan Husseini (test_at_bo.com)
Date: 10/22/04 

Date: Fri, 22 Oct 2004 12:54:50 +0200

Hey guys,

I have some slide problems with the public key authentication!

I found a lot of documentation about that - but to be honest I just can't
get it to work!

What I want to do is:

use public key authentication to open a tunnel to our terminal server.

What I can do:

login with the unsername and the password and create a tunnel.

My current setup:

Client: Windows 2000 sp4 / Windows XP sp2

Server: OpenSSH 3.4 on a Debian machine.

So what I did was:

generating a public and private key using the putty key generator.

transfering the public key to the server and put it in the (homedir)\.ssh
and called the file "authorized_keys" - I also tried it with
"authorized_keys2".

But putty only says:

"Server refused our key" when I try to log in!

Can you may help me?

One additional question:

When I did it setting up that users can authenticate by public key - is
there a way of keeping them away to get access to the shell?

I know that about the "bin/false", but if I do that in the /etc/shadow then
they will not be able to log on at all! Then they will get and "access
denied".

Which means that they won't even be able to start the tunnel!

So what I actually want is that they do not have any access to my linux box
and just open the tunnel.

Thanks in advance!

Jan

Relevant Pages

  • Re: TIPS FOR THE NEWCOMER
    ... As long as the private key is readable by the ssh client when it comes ... When the ssh client connects to the server, ... private key which matches the public key. ...
    (SSH)
  • Cryptography and Site Security: Please critique my security idea
    ... get direct access to the server whether ... The public key for each user's private key is stored on an internal ... upload the public keys in to applciation memory. ... this now decrypted key "A" will be used to decrypt the ...
    (sci.crypt)
  • Re: Debian SSH server configuration
    ... I would like to configure a Debian server to only allow clients to ssh ... I don't want any client computers to be able to ssh into ... It sounds like what you are asking for is host based authentication, ... where the server check to make sure that it has the host public key ...
    (Debian-User)
  • Re: Security - ciphers - autentification
    ... is a web server on the firewall or on a trusted, ... firewall. ... > throw filrewall (and process 'real' autentification). ... Communication with services is done by public key ...
    (SecProg)
  • Digital signature to e-mail.
    ... Digital Signature to E-mail in Server Side ... to store public key. ... one password to access your SMTP account (SMTP Authentication, ...
    (Security-Basics)