Re: getting public key authentication working on openssh

Path	csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!gegeweb.42!gegeweb.eu!nntpfeed.proxad.net!proxad.net!feeder1-2.proxad.net!74.125.46.80.MISMATCH!postnews.google.com!news1.google.com!npeer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!post01.iad.highwinds-media.com!newsfe06.iad.POSTED!b20e9f34!not-for-mail
From	Richard E. Silverman <res@qoxp.net>
Newsgroups	comp.security.ssh
Subject	Re: getting public key authentication working on openssh
Message-ID	<m2sjqiyb64.fsf@darwin.oankali.net> (permalink)
User-Agent	Gnus/5.13 (Gnus v5.13) Emacs/23.3 (darwin)
Cancel-Lock	sha1:jWyPhZItRGBmY5EOj3w4RO7MTNk=
MIME-Version	1.0
Content-Type	text/plain; format=flowed
Lines	35
X-Complaints-To	abuse@thundernews.com
NNTP-Posting-Date	Thu, 07 Jul 2011 04:20:11 UTC
Organization	Thundernews
Date	Thu, 07 Jul 2011 00:20:03 -0400
Xref	x330-a1.tempe.blueboxinc.net comp.security.ssh:130

Show key headers only | View raw

Aaron <resera@gmail.com> writes:

> I have openssh running on windows (SSHWindows.SourceForge.Net) 
and a remote Linux (Ubuntu) server.  
>
> I'm trying to use passwordless ssh to ssh into my Ubuntu box 
from windows.
>
> In preparation I created the public key on Ubuntu ("ssh-keygen 
-t dsa") and copied id_dsa.pub from Ubuntu into C:\Documents and 
Settings\jsmith\.ssh
>
> Then, on windows I type "ssh -vvv root@ninja"
>
> As you can see from the debug output below, publickey 
authentication is skipped and I'm prompted for a password.
>
> What am I doing wrong?

There are many things that could be wrong.  One common issue is 
permissions: by default, sshd has requirements for the permissions 
on the authorized_keys file, as well as its containing directory 
~/.ssh, and the home directory. Specifically, none of these may be 
writable by any uid except the owner or root. That means the most 
permissive modes you can have here are:

$ chmod 755 ~
$ chmod 755 ~/.ssh
$ chmod 644 ~/.ssh/authorized_keys

Usually the fastest way to see what's wrong is to run the server 
in debug mode on an alternate port (e.g. sshd -dp221), connect to 
it, and see what it says.

- Richard

Back to comp.security.ssh | Previous | Next | Find similar

Thread

Re: getting public key authentication working on openssh Richard E. Silverman <res@qoxp.net> - 2011-07-07 00:20 -0400

csiph-web