web-dev-qa-db-ja.com

キーベースのSSHアクセス許可が拒否されました（公開キー）Ubuntu 12-04

DEBUGでLogLevelを使用してキーベースのsshログインを受け入れるようにsshdを構成し、公開キーを〜/ .ssh.authorized_keysにアップロードしました。ここで、アクセス許可は次のように設定されています。

700〜/.ssh 600〜/.ssh/authorized_keys

ルートから、su --USERNAMEを実行できます。クライアントから、許可が拒否されました（公に）。サーバーから「許可されたキーを開けませんでした」/home/USERNAME/.ssh/authorized_keys '：アクセスが拒否されました」というメッセージが表示されます。

    Client protocol version 2.0; client software version OpenSSH_5.2
    match: OpenSSH_5.2 pat OpenSSH*
    Enabling compatibility mode for protocol 2.0
    Local version string SSH-2.0-OpenSSH_5.9p1 Debian-5ubuntu1
    permanently_set_uid: 105/65534 [preauth]
    list_hostkey_types: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256 [preauth]
    SSH2_MSG_KEXINIT sent [preauth]
    SSH2_MSG_KEXINIT received [preauth]
    kex: client->server aes128-ctr hmac-md5 none [preauth]
    kex: server->client aes128-ctr hmac-md5 none [preauth]
    SSH2_MSG_KEX_DH_GEX_REQUEST received [preauth]
    SSH2_MSG_KEX_DH_GEX_GROUP sent [preauth]
    expecting SSH2_MSG_KEX_DH_GEX_INIT [preauth]
    SSH2_MSG_KEX_DH_GEX_REPLY sent [preauth]
    SSH2_MSG_NEWKEYS sent [preauth]
    expecting SSH2_MSG_NEWKEYS [preauth]
    SSH2_MSG_NEWKEYS received [preauth]
    KEX done [preauth]
    userauth-request for user USERNAME service ssh-connection method none [preauth]
    attempt 0 failures 0 [preauth]
    PAM: initializing for "USERNAME"
    PAM: setting PAM_RHOST to "USERHOSTNAME"
    PAM: setting PAM_TTY to "ssh"
    userauth_send_banner: sent [preauth]
    userauth-request for user USERNAME service ssh-connection method publickey [preauth]
    attempt 1 failures 0 [preauth]
    test whether pkalg/pkblob are acceptable [preauth]
    Checking blacklist file /usr/share/ssh/blacklist.RSA-4096
    Checking blacklist file /etc/ssh/blacklist.RSA-4096
    temporarily_use_uid: 1001/1002 (e=0/0)
    trying public key file /home/USERNAME/.ssh/authorized_keys
    Could not open authorized keys '/home/USERNAME/.ssh/authorized_keys': Permission denied
    restore_uid: 0/0
    temporarily_use_uid: 1001/1002 (e=0/0)
    trying public key file /home/USERNAME/.ssh/authorized_keys2
    Could not open authorized keys '/home/USERNAME/.ssh/authorized_keys2': Permission denied
    restore_uid: 0/0
    Failed publickey for USERNAME from IPADDRESS port 57523 ssh2
    Connection closed by IPADDRESS [preauth]
    do_cleanup [preauth]
    monitor_read_log: child log fd closed
    do_cleanup
    PAM: cleanup
sshfile-permissionsssh-keysuser-permissionspublic-key
2
user125176
chown 1001:1002 /home/USERNAME/.ssh/authorized_keys
4
Daniel Prata Almeida

私の場合、再インストールした後でも、/ usr/NX/home/nx/.ssh/authorized_keysの名前が/usr/NX/home/nx/.ssh/authorized_keys2に間違っていました。これが私がそれを修正した方法です：

/usr/NX/home/nx/.ssh # cp authorized_keys2 authorized_keys
/usr/NX/home/nx/.ssh # chown nx authorized_keys

私はそれについてブログを書きました http://www.linuxintro.org/wiki/Nx#The_NX_service_is_not_available

1
Thorsten Staerk