Questions tagged [ssh-keys]

an authorization mechanism for SSH involving public-key cryptography.

SSH keys are an authorization mechanism for SSH involving public-key cryptography. It consists of

  • A private/public key pair generated by a utility like ssh-keygen.
  • A configured (in /etc/ssh/sshd_config) SSH daemon that allows public key authentication.
  • A configured user account that has the public key copied to ~/.ssh/authorized_keys.
792 questions
1
vote
2 answers

How are hackers getting into our server without brute-force?

I am a web developer and we have no one specialising in the wellbeing of the server or the network currently at our office. Usually I can sort many of the issues that arise with my basic knowledge but currently, we have some strange things happening…
Emma
  • 11
  • 1
1
vote
1 answer

Cannot connect to my remote server via ssh

I'm trying to connect to a remote AWS (Ubuntu) server using SSH and keep getting this error msg: Load key "/home/potatouser/.ssh/dashboard.pub": invalid format Permission denied (publickey). On my local machine, under ~/.ssh/config I have this set:…
potatoguy
  • 121
  • 2
  • 4
1
vote
3 answers

Does SSHFS support ssh-agent forwarding?

I'd like to be able to mount my backup server on-demand by using my keys on my client terminal only as I don't leave my SSH keys on servers I manage. Does SSHFS support ssh-gent forwarding and how? Didn't find answers to that in the…
dzhi
  • 800
  • 3
  • 10
  • 26
1
vote
1 answer

SSH: remove key authentication to setup a new one

I have a VM with an OpenSSH server running on it. I messed up my SSH server public key authentication setting (installed everything in my SSH session on the VM and not from an external terminal on my computer). I can SSH from my Debian session on…
Wizzardzz
  • 111
  • 4
1
vote
1 answer

Why do SSH keys work for users `root` & `freebsd` but not `postgres` (database owner)?

I have been using FreeBSD running an a virtual machine at DigitalOcean.com. I use Secure Shell (SSH) from my Mac to remote into a console session on the VM. I used ssh-keygen to create the pair of encryption keys. I deployed the public one copied…
Basil Bourque
  • 851
  • 1
  • 11
  • 22
1
vote
0 answers

ssh key revocation list and -z version number

I've been reading about setting up an ssh certificate authority and controlling access via key revocation lists. And in the man page, it lists a -z option for specifying a version number for a key revocation list. It is not very clear from context…
dburke
  • 143
  • 1
  • 7
1
vote
3 answers

How to ssh between two ec2 instance with ssh keys?

I have two EC2 instances: Serve 1, OS: Centos - 7.5 Serve 2, OS: Centos - 7.5 Default username: centos Both are configured for passwordless login, so I have the ssh key with me. I am able to ssh to both servers using the ssh key from my host. But…
Hulk711
  • 13
  • 1
  • 3
1
vote
4 answers

Using SSH keys from backup on another machine to access server

I created a server, and configured SSH to not allow root login and disable password access, so only accepts an SSH key to login. I have a machine A with a key, and I can access my server from that machine without any problems. Also have a backup of…
Pablo Pazos
  • 113
  • 1
  • 5
1
vote
1 answer

How to get Terraform to see the identity when using KeeAgent?

I am creating servers on AWS using Terraform on a Windows machine and that is working great. When they are created I want to install docker on them. However, after creating them, the SSH connection from Terraform fails (manually using Linux…
titusn
  • 111
  • 3
1
vote
0 answers

SSH Gateway Pass-through Authentication

We are looking to configure a 'transparent' SSH gateway that passes authentication on to an upstream SSH server based upon the username in the SSH request. All users will be using public key authentication, no passwords. We'd like for the applicable…
hermetik
  • 73
  • 1
  • 4
1
vote
1 answer

ssh permission denied from remote host

When I ssh from my box (Arch Linux) to a remote box (Fedora server) using a key, it works with one user (user1) but don't with user2. Both users use the same ssh key: the one in user2 ssh home folder. (/home/user2/.ssh/id_rsa with correct modes). On…
gabx
  • 155
  • 2
  • 8
1
vote
0 answers

ssh-keyscan on os x not supporting diffie-hellman-group1-sha1

Trying to ssh and ssh-keyscan from Mac OS (Sierra 10.12.5) to a device, I was getting this error initially, "Unable to negotiate with 10.10.0.1 port 22: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1". I modified the…
radikyl
  • 11
  • 2
1
vote
3 answers

ssh-add -D has no effect

I have several keys registered: $ ssh-add -l 4096 cd:43:96:9e:0c:9a:38:ae:d9:96:f0:c5:d1:bf:9d:96 alex@sunny2 (RSA) 2048 4c:eb:fc:6b:ab:a0:ff:99:c3:ff:13:0a:95:2a:68:70 ███████ (RSA) 4096 01:cc:8d:c9:3c:ca:cf:39:93:57:e5:36:91:30:c2:94…
kerner1000
  • 143
  • 1
  • 7
1
vote
1 answer

sssd cache issues with authorized_keys

I'm running a server with CentOS 7.4.1708 and all patches applied. sssd is version 1.15.2. I have a working sssd setup which enables me to sign in using SSH public keys stored in Active Directory. The config The instance is successfully joined and…
Jonathan
  • 575
  • 1
  • 7
  • 18
1
vote
4 answers

Reset "Too many authentication failures" on ubuntu without server access

I was recently given a bunch of keys and a bunch of servers and had to do some detective work to figure out which key matched which server. After a few tries (maybe 3?) SSH locked me out. My guess is due to the MaxAuthTries setting. We have tracked…
Tony
  • 1,281
  • 4
  • 17
  • 23