Ssh-keygen problems Post: 303032969

Sponsored Content

Top Forums UNIX for Beginners Questions & Answers Ssh-keygen problems Post 303032969 by stomp on Wednesday 27th of March 2019 01:15:53 PM

03-27-2019

Registered User

Quote:

I am still having to enter my password when I ssh onto the network, shouldn't the presence of my public key on that network allow me to log on without a password check?

When the target-servers target-users $HOME/.ssh/authorized_keys does not contain your key (from /home/rob/Work/Keys/keys.txt.pub), it's absolutely clear why key-based auth does not work:

Because your key hadn't been copied or you login with a key that's not permitted.

----

Another Question:

When your public key is /home/rob/Work/Keys/keys.txt.pub. Where's your private key then? Since this is not a standard location you have to configure the Key for the connection to your server.

For example in $HOME/.ssh/config

Code:

Host YOUR-SERVER-ALIAS
  Hostname FQDN-HOSTNAME-OR-IP-ADDRESS
  User TARGET-SYSTEM-USER-NAME
  IdentityFile PRIVATE-KEY-FULL-PATH

# Example
Host webserver
  Hostname 192.168.10.2
  User root
  IdentityFile /home/rob/Work/Keys/private-key.txt

Code:

ssh webserver

Furthermore $HOME/.ssh is a good place to deposit private keys, because it's very restricted by default. And an ssh private key should be protected well from any unauthorized access if possible. And as everybody else says here: Check the permissions! ;-)

Last edited by stomp; 03-28-2019 at 09:39 AM..

This User Gave Thanks to stomp For This Post:

stomp

View Public Profile for stomp

Find all posts by stomp

10 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

SSH-Keygen script

Hello friends, I wanna to make new script which work as i defined below (1) it connect (using ssh) to remote server (2) remote server having passphrase key with password (3) Generate new passphrase on local machine with random 8 character password. (4) It will atomatically uploaded to...

2. UNIX for Advanced & Expert Users

ssh-keygen configuration problem

I am unable to set password less entry from one server to another even after i have generated public key and have put in the authorized_keys of the target server. When i try to debug the ssh using ssh -v, it gives me debug1: Authentications that can continue:...

3. UNIX for Advanced & Expert Users

ssh-keygen stops working

Hey guys, I was using ssh-keygen settings for a long time to login on remote machines without password. 2 days back it suddenly stops working, i tried by reset all ssh-keygen setting but it not works. what could be the reason of this issue and how can i resolve this?

4. Shell Programming and Scripting

Query regarding ssh keygen

Hi, I have two Unix servers A and B. I have a script in server A. I want to connect to server B from A using ssh only and without giving passwords everytime i connect. I went through other posts regarding this and I generated a public key in server A and copied that in server B. Now when I...

5. UNIX for Dummies Questions & Answers

ssh-keygen

Hi, I am new to unix, recently i was exploring password less remote connection to the ftp server and in that I was exploring the ssh-keygen utility, that it generates private & public keys that helps in transmitting files in encrypted format.Could you please explain me in detail about the...

6. UNIX for Dummies Questions & Answers

keygen-ssh

Hi, I was going thruough the password less authentication of keygen-ssh that will help us in generating keys...One thing that is not clear to me that if in nearby future we conncet to remote ftp server in that case now we need to only provide the user id itself that is password would not be...

7. UNIX for Dummies Questions & Answers

ssh-keygen error

Hi, I using ssh-keygen for passwordless authenciation firstly and I am following these steps mentioned below... 1) Login to pngpcdb1 using your user/pass 2) type 'bash' (without quotes) 3) ssh-keygen #generates private and public key. 4) copy this private key to the location of your sftp...

8. Shell Programming and Scripting

sftp ssh-keygen

sftp username@host <<EOF lcd /home/dirA cd /home/dirB mput *.txt exit EOF Hi, i have done the keygen-ssh settings but rite now I log through putty I enter my credentials and then when i successfully log in, then I issue the command ssh server name then I again enter into the server but...

9. AIX

ssh-keygen issue on AIX

Hi , I am trying to create public key on my AIX server on other than home directory.However the command does not ask for Enter file in which to save the key : It is directly taking me to Enter the passphrase. I don't want to save the key in home dir as that is the home dir for other userID...

10. Shell Programming and Scripting

ssh keygen in unix server

I have a central unix server and more than 200 unix server to connect from central server .For this to take place i want to use ssh keygen between & among servers .Do anybody has an idea how to automate this process . The server has same user id and same password

LEARN ABOUT FREEBSD

moduli

MODULI(5)						      BSD File Formats Manual							 MODULI(5)

NAME

     moduli -- Diffie-Hellman moduli

DESCRIPTION

     The /etc/ssh/moduli file contains prime numbers and generators for use by sshd(8) in the Diffie-Hellman Group Exchange key exchange method.

     New moduli may be generated with ssh-keygen(1) using a two-step process.  An initial candidate generation pass, using ssh-keygen -G, calcu-
     lates numbers that are likely to be useful.  A second primality testing pass, using ssh-keygen -T, provides a high degree of assurance that
     the numbers are prime and are safe for use in Diffie-Hellman operations by sshd(8).  This moduli format is used as the output from each pass.

     The file consists of newline-separated records, one per modulus, containing seven space-separated fields.	These fields are as follows:

	   timestamp	The time that the modulus was last processed as YYYYMMDDHHMMSS.

	   type 	Decimal number specifying the internal structure of the prime modulus.	Supported types are:

			0     Unknown, not tested.
			2     "Safe" prime; (p-1)/2 is also prime.
			4     Sophie Germain; 2p+1 is also prime.

			Moduli candidates initially produced by ssh-keygen(1) are Sophie Germain primes (type 4).  Further primality testing with
			ssh-keygen(1) produces safe prime moduli (type 2) that are ready for use in sshd(8).  Other types are not used by OpenSSH.

	   tests	Decimal number indicating the type of primality tests that the number has been subjected to represented as a bitmask of
			the following values:

			0x00  Not tested.
			0x01  Composite number - not prime.
			0x02  Sieve of Eratosthenes.
			0x04  Probabilistic Miller-Rabin primality tests.

			The ssh-keygen(1) moduli candidate generation uses the Sieve of Eratosthenes (flag 0x02).  Subsequent ssh-keygen(1) pri-
			mality tests are Miller-Rabin tests (flag 0x04).

	   trials	Decimal number indicating the number of primality trials that have been performed on the modulus.

	   size 	Decimal number indicating the size of the prime in bits.

	   generator	The recommended generator for use with this modulus (hexadecimal).

	   modulus	The modulus itself in hexadecimal.

     When performing Diffie-Hellman Group Exchange, sshd(8) first estimates the size of the modulus required to produce enough Diffie-Hellman out-
     put to sufficiently key the selected symmetric cipher.  sshd(8) then randomly selects a modulus from /etc/ssh/moduli that best meets the size
     requirement.

SEE ALSO

     ssh-keygen(1), sshd(8)

     Diffie-Hellman Group Exchange for the Secure Shell (SSH) Transport Layer Protocol, RFC 4419, 2006.

BSD
								   July 19, 2012							       BSD