gpt4 book ai didi

ssh - 通过 SSH key 的服务器身份验证失败

转载 作者:行者123 更新时间:2023-12-04 19:36:59 32 4
gpt4 key购买 nike

我试图在我的服务器(CentOS)上设置私钥/公钥身份验证。以下是我所做的步骤:

  • 使用 puttygen
  • 生成了一个公钥/私钥对
  • 将公钥复制到服务器并使用 cat 命令将其附加到文件/root/.ssh/authorized_keys
  • 检查 .ssh (700) 和 .ssh/authorized_keys (600) 的建议文件所有权和权限
  • 重启sshd服务
  • 在 Connection > SSH > Auth 下的 Putty 配置中,选择私钥

  • 但是当我尝试连接 Putty 时,我收到消息“服务器拒绝我们的 key ”。然后提示我输入密码,并且有效。

    我还提高了身份验证日志级别,这是失败尝试的输出:
        Aug 30 12:55:01 localhost sshd[44558]: debug3: fd 5 is not O_NONBLOCK
    Aug 30 12:55:01 localhost sshd[44558]: debug1: Forked child 44752.
    Aug 30 12:55:01 localhost sshd[44558]: debug3: send_rexec_state: entering fd = 8 config len 803
    Aug 30 12:55:01 localhost sshd[44558]: debug3: ssh_msg_send: type 0
    Aug 30 12:55:01 localhost sshd[44558]: debug3: send_rexec_state: done
    Aug 30 12:55:01 localhost sshd[44752]: debug3: oom_adjust_restore
    Aug 30 12:55:01 localhost sshd[44752]: Set /proc/self/oom_score_adj to 0
    Aug 30 12:55:01 localhost sshd[44752]: debug1: rexec start in 5 out 5 newsock 5 pipe 7 sock 8
    Aug 30 12:55:01 localhost sshd[44752]: debug1: inetd sockets after dupping: 3, 3
    Aug 30 12:55:01 localhost sshd[44752]: Connection from 91.15.164.238 port 58557 on 82.165.78.188 port 22
    Aug 30 12:55:01 localhost sshd[44752]: debug1: Client protocol version 2.0; client software version PuTTY_Release_0.70
    Aug 30 12:55:01 localhost sshd[44752]: debug1: no match: PuTTY_Release_0.70
    Aug 30 12:55:01 localhost sshd[44752]: debug1: Enabling compatibility mode for protocol 2.0
    Aug 30 12:55:01 localhost sshd[44752]: debug1: Local version string SSH-2.0-OpenSSH_6.6.1
    Aug 30 12:55:01 localhost sshd[44752]: debug2: fd 3 setting O_NONBLOCK
    Aug 30 12:55:01 localhost sshd[44752]: debug3: ssh_sandbox_init: preparing rlimit sandbox
    Aug 30 12:55:01 localhost sshd[44752]: debug2: Network child is on pid 44753
    Aug 30 12:55:01 localhost sshd[44752]: debug3: preauth child monitor started
    Aug 30 12:55:01 localhost sshd[44752]: debug1: SELinux support disabled [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug3: privsep user:group 74:74 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug1: permanently_set_uid: 74/74 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug1: list_hostkey_types: ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug1: SSH2_MSG_KEXINIT sent [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug1: SSH2_MSG_KEXINIT received [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: none,zlib@openssh.com [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: none,zlib@openssh.com [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: reserved 0 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,rsa2048-sha256,rsa1024-sha1,diffie-hellman-group1-sha1 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: ssh-rsa,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-dss [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,chacha20-poly1305@openssh.com,blowfish-ctr,blowfish-cbc,3des-ctr,3des-cbc,arcfour256,arcfour128 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,chacha20-poly1305@openssh.com,blowfish-ctr,blowfish-cbc,3des-ctr,3des-cbc,arcfour256,arcfour128 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: hmac-sha2-256,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: hmac-sha2-256,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: none,zlib [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: none,zlib [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_parse_kexinit: reserved 0 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: mac_setup: setup hmac-sha2-256 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug1: kex: client->server aes256-ctr hmac-sha2-256 none [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: mac_setup: setup hmac-sha2-256 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug1: kex: server->client aes256-ctr hmac-sha2-256 none [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug1: kex: curve25519-sha256@libssh.org need=32 dh_need=32 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_request_send entering: type 120 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_request_receive_expect entering: type 121 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_request_receive entering [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_request_receive entering
    Aug 30 12:55:01 localhost sshd[44752]: debug3: monitor_read: checking request 120
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_request_send entering: type 121
    Aug 30 12:55:01 localhost sshd[44752]: debug1: kex: curve25519-sha256@libssh.org need=32 dh_need=32 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_request_send entering: type 120 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_request_receive_expect entering: type 121 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_request_receive entering [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_request_receive entering
    Aug 30 12:55:01 localhost sshd[44752]: debug3: monitor_read: checking request 120
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_request_send entering: type 121
    Aug 30 12:55:01 localhost sshd[44752]: debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_key_sign entering [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_request_send entering: type 6 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_key_sign: waiting for MONITOR_ANS_SIGN [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_request_receive_expect entering: type 7 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_request_receive entering [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_request_receive entering
    Aug 30 12:55:01 localhost sshd[44752]: debug3: monitor_read: checking request 6
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_answer_sign
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_answer_sign: signature 0x7f0b70e15390(271)
    Aug 30 12:55:01 localhost sshd[44752]: debug3: mm_request_send entering: type 7
    Aug 30 12:55:01 localhost sshd[44752]: debug2: monitor_read: 6 used once, disabling now
    Aug 30 12:55:01 localhost sshd[44752]: debug2: kex_derive_keys [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: set_newkeys: mode 1 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug1: SSH2_MSG_NEWKEYS sent [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug1: expecting SSH2_MSG_NEWKEYS [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug2: set_newkeys: mode 0 [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug1: SSH2_MSG_NEWKEYS received [preauth]
    Aug 30 12:55:01 localhost sshd[44752]: debug1: KEX done [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug1: userauth-request for user root service ssh-connection method none [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug1: attempt 0 failures 0 [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_getpwnamallow entering [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_send entering: type 8 [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_receive_expect entering: type 9 [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_receive entering [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_receive entering
    Aug 30 12:55:04 localhost sshd[44752]: debug3: monitor_read: checking request 8
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_answer_pwnamallow
    Aug 30 12:55:04 localhost sshd[44752]: debug3: Trying to reverse map address 91.15.164.238.
    Aug 30 12:55:04 localhost sshd[44752]: debug2: parse_server_config: config reprocess config len 803
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_send entering: type 9
    Aug 30 12:55:04 localhost sshd[44752]: debug2: monitor_read: 8 used once, disabling now
    Aug 30 12:55:04 localhost sshd[44752]: debug2: input_userauth_request: setting up authctxt for root [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_start_pam entering [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_send entering: type 100 [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_inform_authserv entering [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_send entering: type 4 [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_inform_authrole entering [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_send entering: type 80 [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug2: input_userauth_request: try method none [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: userauth_finish: failure partial=0 next methods="publickey,gssapi-keyex,gssapi-with-mic,password" [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_receive entering
    Aug 30 12:55:04 localhost sshd[44752]: debug3: monitor_read: checking request 100
    Aug 30 12:55:04 localhost sshd[44752]: debug1: PAM: initializing for "root"
    Aug 30 12:55:04 localhost sshd[44752]: debug1: PAM: setting PAM_RHOST to "p5b0fa4ee.dip0.t-ipconnect.de"
    Aug 30 12:55:04 localhost sshd[44752]: debug1: PAM: setting PAM_TTY to "ssh"
    Aug 30 12:55:04 localhost sshd[44752]: debug2: monitor_read: 100 used once, disabling now
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_receive entering
    Aug 30 12:55:04 localhost sshd[44752]: debug3: monitor_read: checking request 4
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_answer_authserv: service=ssh-connection, style=
    Aug 30 12:55:04 localhost sshd[44752]: debug2: monitor_read: 4 used once, disabling now
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_receive entering
    Aug 30 12:55:04 localhost sshd[44752]: debug3: monitor_read: checking request 80
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_answer_authrole: role=
    Aug 30 12:55:04 localhost sshd[44752]: debug2: monitor_read: 80 used once, disabling now
    Aug 30 12:55:04 localhost sshd[44752]: debug1: userauth-request for user root service ssh-connection method publickey [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug1: attempt 1 failures 0 [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug2: input_userauth_request: try method publickey [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug1: test whether pkalg/pkblob are acceptable [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_key_allowed entering [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_send entering: type 22 [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_key_allowed: waiting for MONITOR_ANS_KEYALLOWED [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_receive_expect entering: type 23 [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_receive entering [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_receive entering
    Aug 30 12:55:04 localhost sshd[44752]: debug3: monitor_read: checking request 22
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_answer_keyallowed entering
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_answer_keyallowed: key_from_blob: 0x7f0b70e1ca10
    Aug 30 12:55:04 localhost sshd[44752]: debug1: temporarily_use_uid: 0/0 (e=0/0)
    Aug 30 12:55:04 localhost sshd[44752]: debug1: trying public key file /root/.ssh/authorized_keys
    Aug 30 12:55:04 localhost sshd[44752]: debug1: fd 4 clearing O_NONBLOCK
    Aug 30 12:55:04 localhost sshd[44752]: debug2: key_type_from_name: unknown key type '----'
    Aug 30 12:55:04 localhost sshd[44752]: debug3: key_read: missing keytype
    Aug 30 12:55:04 localhost sshd[44752]: debug2: user_key_allowed: check options: '---- BEGIN SSH2 PUBLIC KEY ----\r\n'
    Aug 30 12:55:04 localhost sshd[44752]: debug2: key_type_from_name: unknown key type 'BEGIN'
    Aug 30 12:55:04 localhost sshd[44752]: debug3: key_read: missing keytype
    Aug 30 12:55:04 localhost sshd[44752]: debug2: user_key_allowed: advance: 'BEGIN SSH2 PUBLIC KEY ----\r\n'
    Aug 30 12:55:04 localhost sshd[44752]: debug2: key_type_from_name: unknown key type 'Comment:'
    Aug 30 12:55:04 localhost sshd[44752]: debug3: key_read: missing keytype
    Aug 30 12:55:04 localhost sshd[44752]: debug2: user_key_allowed: check options: 'Comment: "rsa-key-20170830"\r\n'
    Aug 30 12:55:04 localhost sshd[44752]: debug3: key_read: missing whitespace
    Aug 30 12:55:04 localhost sshd[44752]: debug2: user_key_allowed: advance: '"rsa-key-20170830"\r\n'
    Aug 30 12:55:04 localhost sshd[44752]: debug3: key_read: missing whitespace
    Aug 30 12:55:04 localhost sshd[44752]: debug2: user_key_allowed: check options: 'AAAAB3NzaC1yc2EAAAABJQAAAQEAkO9lXNIVuohGAOsCQy+NDIJv7a+a6z6ekmSp\r\n'
    Aug 30 12:55:04 localhost sshd[44752]: debug3: key_read: missing whitespace
    Aug 30 12:55:04 localhost sshd[44752]: debug2: user_key_allowed: advance: ''
    Aug 30 12:55:04 localhost sshd[44752]: debug3: key_read: missing whitespace
    Aug 30 12:55:04 localhost sshd[44752]: debug2: user_key_allowed: check options: 'HfFduHAvOadeX/HDidL1696CVOHjX8fJ7ITTCaFl2ljI06lobZ2baDAsezpMhut9\r\n'
    Aug 30 12:55:04 localhost sshd[44752]: debug3: key_read: missing whitespace
    Aug 30 12:55:04 localhost sshd[44752]: debug2: user_key_allowed: advance: ''
    Aug 30 12:55:04 localhost sshd[44752]: debug3: key_read: missing whitespace
    Aug 30 12:55:04 localhost sshd[44752]: debug2: user_key_allowed: check options: 'xmovTOmTJK3pOAI9E1S3Hmhum0QViFsE5oCiMHwZixLmWoeZt09ZwSZyQZAvtHTU\r\n'
    Aug 30 12:55:04 localhost sshd[44752]: debug3: key_read: missing whitespace
    Aug 30 12:55:04 localhost sshd[44752]: debug2: user_key_allowed: advance: ''
    Aug 30 12:55:04 localhost sshd[44752]: debug3: key_read: missing whitespace
    Aug 30 12:55:04 localhost sshd[44752]: debug2: user_key_allowed: check options: '73bviqiky/j2xYpG+5QKyViyCEAa6KbJKnGpLw8UTf0rEBhUES9wLBt4vU3AZuQd\r\n'
    Aug 30 12:55:04 localhost sshd[44752]: debug3: key_read: missing whitespace
    Aug 30 12:55:04 localhost sshd[44752]: debug2: user_key_allowed: advance: ''
    Aug 30 12:55:04 localhost sshd[44752]: debug3: key_read: missing whitespace
    Aug 30 12:55:04 localhost sshd[44752]: debug2: user_key_allowed: check options: 'evfZSr3lDBlCCdX3vyJJP8m4x3+8YMSvJSfKa9MErWpxjNE+4GMhyexNILSP+lgy\r\n'
    Aug 30 12:55:04 localhost sshd[44752]: debug3: key_read: missing whitespace
    Aug 30 12:55:04 localhost sshd[44752]: debug2: user_key_allowed: advance: ''
    Aug 30 12:55:04 localhost sshd[44752]: debug3: key_read: missing whitespace
    Aug 30 12:55:04 localhost sshd[44752]: debug2: user_key_allowed: check options: '5tqWIehpSekThkJLpi0KPvGiK/bm7oXMVNLN0KdLAf/MKUzB9w==\r\n'
    Aug 30 12:55:04 localhost sshd[44752]: debug3: key_read: missing whitespace
    Aug 30 12:55:04 localhost sshd[44752]: debug2: user_key_allowed: advance: ''
    Aug 30 12:55:04 localhost sshd[44752]: debug2: key_type_from_name: unknown key type '----'
    Aug 30 12:55:04 localhost sshd[44752]: debug3: key_read: missing keytype
    Aug 30 12:55:04 localhost sshd[44752]: debug2: user_key_allowed: check options: '---- END SSH2 PUBLIC KEY ----\r\n'
    Aug 30 12:55:04 localhost sshd[44752]: debug2: key_type_from_name: unknown key type 'END'
    Aug 30 12:55:04 localhost sshd[44752]: debug3: key_read: missing keytype
    Aug 30 12:55:04 localhost sshd[44752]: debug2: user_key_allowed: advance: 'END SSH2 PUBLIC KEY ----\r\n'
    Aug 30 12:55:04 localhost sshd[44752]: debug2: key not found
    Aug 30 12:55:04 localhost sshd[44752]: debug1: restore_uid: 0/0
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_answer_keyallowed: key 0x7f0b70e1ca10 is not allowed
    Aug 30 12:55:04 localhost sshd[44752]: Failed publickey for root from 91.15.164.238 port 58557 ssh2: RSA 4c:13:08:b4:06:eb:ea:98:54:69:50:3e:cf:22:9e:da
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_send entering: type 23
    Aug 30 12:55:04 localhost sshd[44752]: debug2: userauth_pubkey: authenticated 0 pkalg ssh-rsa [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: userauth_finish: failure partial=0 next methods="publickey,gssapi-keyex,gssapi-with-mic,password" [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug1: userauth-request for user root service ssh-connection method gssapi-with-mic [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug1: attempt 2 failures 1 [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug2: input_userauth_request: try method gssapi-with-mic [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_send entering: type 42 [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_receive_expect entering: type 43 [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_receive entering [preauth]
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_receive entering
    Aug 30 12:55:04 localhost sshd[44752]: debug3: monitor_read: checking request 42
    Aug 30 12:55:04 localhost sshd[44752]: debug1: Unspecified GSS failure. Minor code may provide more information\nKey table file '/etc/krb5.keytab' not found\n
    Aug 30 12:55:04 localhost sshd[44752]: debug3: mm_request_send entering: type 43
    Aug 30 12:55:04 localhost sshd[44752]: debug3: userauth_finish: failure partial=0 next methods="publickey,gssapi-keyex,gssapi-with-mic,password" [preauth]

    最佳答案

    这是它不起作用的原因。正如许多分步教程所建议的那样,应该生成公钥文件,将其复制到服务器,然后使用 cat 命令将公钥附加到 authorized_keys 文件中,如下所示:
    cat id_rsa.mypublickey.pub >> ~/.ssh/authorized_keys
    我的情况是我使用 PuTTYgen 生成 key 。但是生成的公钥文件(使用保存按钮时保存的文件)在语法上不适用于附加到授权 key 。

    要获得正确格式的 公钥 字符串,请将生成的片段从 PuTTYgen 窗口复制并粘贴到 ~/.ssh/authorized_keys 文件中的 一个新行 。正确格式化的行看起来像这样,但是,语法也允许注释等:

    ssh-rsa AAAAB3NzaEAAAAB/*...more letters...*/cPogeHB2XQBQ== rsa-key-20170831

    要获取 私钥 的格式,您可以与 Putty 以外的其他 ssh 代理一起使用,您可以使用 PuTTYgen 的转换选项并将 key 保存为 OpenSSH 格式。

    正如用户 ilansch 所建议的,在这里可以找到更全面的信息: How to convert SSH keypairs generated using PuttyGen(Windows) into key-pairs used by ssh-agent and KeyChain(Linux)

    关于ssh - 通过 SSH key 的服务器身份验证失败,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/45961118/

    32 4 0
    Copyright 2021 - 2024 cfsdn All Rights Reserved 蜀ICP备2022000587号
    广告合作:1813099741@qq.com 6ren.com