[ale] ssh authorized_keys2, what am I missing?

Michael B. Trausch fd0man at gmail.com
Wed Jun 8 13:28:45 EDT 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Grant Robertson wrote:
> This is driving me nuts. Any suggestions appreciated.
> 
> Debian 3.1, openssh 3.8.1p1 / Putty
> 
> I'm trying to use an RSA key to authenticate an ssh client connection,
> but the key is refused. I've set logging to DEBUG in the sshd_config,
> and it does show that it's attempting the keyfiles, but it doens't
> give me detail on the failure. The authorized_keys2 file is set to 640
> (I've also tried 440, 400, 600).
> 
> I'm lost as for what to try next, any suggestions?
> 

If you're following this list, cool, but I'd check against it.

On the server:

	(a) You're putting the public key in .ssh/authorized_keys2
	(b) .ssh/authorized_keys2 hard linked with .ssh/authorized_keys

On the client:
	(a) The file .ssh/id_rsa is the private key
	(b) /etc/ssh/ssh_config has the right IdentityFile settings:

		IdentityFile ~/.ssh/identity
		IdentityFile ~/.ssh/id_rsa
		IdentityFile ~/.ssh/id_dsa

That's the only stuff I can think of at the moment, however.

Also, the entire .ssh directory on both sides must be 0600 permission,
and the files within it (all of them) should be 0600 as well.

	- Mike

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCpyhQPXInbkqM7nwRA/exAJ9bKCshPuxVEfwIEyGPQYqNvK9MqgCffZpg
LXTLihiPfmLll96RnvmJooc=
=R2nV
-----END PGP SIGNATURE-----



More information about the Ale mailing list