Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #165941 > unrolled thread

New Deb 8 and no sshd access from other hosts

Back to article view | Back to linux.debian.user

Contents

  New Deb 8 and no sshd access from other hosts Tom Browder <tom.browder@gmail.com> - 2016-03-25 18:20 +0100
    Re: New Deb 8 and no sshd access from other hosts David Wright <deblis@lionunicorn.co.uk> - 2016-03-25 18:40 +0100
      Re: New Deb 8 and no sshd access from other hosts Tom Browder <tom.browder@gmail.com> - 2016-03-25 20:00 +0100
    Re: New Deb 8 and no sshd access from other hosts Jörg-Volker Peetz <jvpeetz@web.de> - 2016-03-25 18:40 +0100
      Re: New Deb 8 and no sshd access from other hosts Tom Browder <tom.browder@gmail.com> - 2016-03-25 20:00 +0100

#165941 — New Deb 8 and no sshd access from other hosts

I have installed Deb on my laptop and reused my old Deb 7 .ssh directory.

I can now ssh into the existing remote servers but cannot ssh into my
laptop from them (as a normal user)--I always get asked for a
password.  So the remote servers recognize my old Deb 7 keys, but
apparently my laptop doesn't recognize the other servers' keys.

I have compared files:

  /etc/ssh/ssh_conf
  /etc/ssh/sshd_conf
  /etc/pam.d/ssh/sshd

between the laptop and the remote server and can see no significant
difference for a normal user.

I can also see the host names in the .ssh/known_hosts file.  I do see
that my laptop host's entries in the remote host's known_hosts are of
type "EDCSA" while the remote host's entries in the laptop's
known_hosts file are of type "RSA."

Can anyone suggest where to look next?

Thanks.

Best regards,

-Tom

[toc] | [next] | [standalone]

#165943

On Fri 25 Mar 2016 at 12:12:44 (-0500), Tom Browder wrote:
> I have installed Deb on my laptop and reused my old Deb 7 .ssh directory.
> 
> I can now ssh into the existing remote servers but cannot ssh into my
> laptop from them (as a normal user)--I always get asked for a
> password.  So the remote servers recognize my old Deb 7 keys, but
> apparently my laptop doesn't recognize the other servers' keys.
> 
> I have compared files:
> 
>   /etc/ssh/ssh_conf
>   /etc/ssh/sshd_conf
>   /etc/pam.d/ssh/sshd
> 
> between the laptop and the remote server and can see no significant
> difference for a normal user.
> 
> I can also see the host names in the .ssh/known_hosts file.  I do see
> that my laptop host's entries in the remote host's known_hosts are of
> type "EDCSA" while the remote host's entries in the laptop's
> known_hosts file are of type "RSA."
> 
> Can anyone suggest where to look next?

What you lost on your laptop is ~/.ssh/authorized_keys which would
have had the public keys from your ~/.ssh/ on each of the remote hosts.
You can write them back by typing
$ ssh-copy-id -i ~/.ssh/id_rsa.pub your-user-name@laptop
on each of the remote servers in turn.

Now, when you-on-the-remote-host try to contact the laptop with ssh,
the laptop will use the public key (that you just copied) to ascertain
that you-on-the-remote-host know the private key of the pair, and let
you in.

Cheers,
David.

[toc] | [prev] | [next] | [standalone]

#165948

On Fri, Mar 25, 2016 at 12:38 PM, David Wright <deblis@lionunicorn.co.uk> wrote:
> On Fri 25 Mar 2016 at 12:12:44 (-0500), Tom Browder wrote:
>> I have installed Deb on my laptop and reused my old Deb 7 .ssh directory.
>>
>> I can now ssh into the existing remote servers but cannot ssh into my
>> laptop from them (as a normal user)--I always get asked for a
>> password.  So the remote servers recognize my old Deb 7 keys, but
>> apparently my laptop doesn't recognize the other servers' keys.
...
>> Can anyone suggest where to look next?
>
> What you lost on your laptop is ~/.ssh/authorized_keys which would
> have had the public keys from your ~/.ssh/ on each of the remote hosts.

No, the authorized_keys are still there.

Thanks.

-Tom

[toc] | [prev] | [next] | [standalone]

#165944

I'd first check file permissions in your .ssh directory (see man ssh).
If they are o.k.,  I'd call ssh with one or more -v switches.

Regards,
jvp.

[toc] | [prev] | [next] | [standalone]

#165949

On Fri, Mar 25, 2016 at 12:33 PM, Jörg-Volker Peetz <jvpeetz@web.de> wrote:
> I'd first check file permissions in your .ssh directory (see man ssh).
> If they are o.k.,  I'd call ssh with one or more -v switches.

On, duh, forgot about the '-v' option--I'll work with that and report back.

Thanks, jvp!

-Tom

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web