ssh 公鑰和私鑰

liuyong20395

用ssh-keygen -t rsa 生成公鑰和私鑰后，并把文件傳到另外一臺機器，可是每次用ssh連接另外一個機器的時候還是提示需要輸入密碼，請問可能是怎么個情況？

taojie2000

回復(fù) 1# liuyong20395


   log下的 secure 日志里 關(guān)于ssh登錄的看下   應(yīng)該是權(quán)限不當(dāng)造成的

liuyong20395

回復(fù) 2# taojie2000


    我在log/secure下看到連接日志是這樣的
May  6 21:29:27 localhost su: pam_unix(su-l:session): session opened for user root by test2(uid=500)

而我的操作過程是這樣：
[trade@localhost ~]$ ssh test
test2@test's password:
Permission denied, please try again.
test2@test's password:
Permission denied, please try again.
test2@test's password:
Permission denied (publickey,gssapi-with-mic,password).

在以前就是這樣操作的是可以的，這次不行的話我應(yīng)該修改怎樣的權(quán)限呢？

chenyx

ssh -vv test
看下什么地方有問題

liuyong20395

測試時發(fā)現(xiàn)其他是正常的，就這后面顯示失敗了：
debug1: Authentications that can continue: publickey,gssapi-with-mic,password
debug1: Next authentication method: gssapi-with-mic
debug1: Unspecified GSS failure.  Minor code may provide more information
Unknown code krb5 195

debug1: Unspecified GSS failure.  Minor code may provide more information
Unknown code krb5 195

debug1: Unspecified GSS failure.  Minor code may provide more information
Unknown code krb5 195

debug2: we did not send a packet, disable method
debug1: Next authentication method: publickey
debug1: Trying private key: /home/test/.ssh/identity
debug1: Offering public key: /home/test/.ssh/id_rsa
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey,gssapi-with-mic,password
debug1: Trying private key: /home/test/.ssh/id_dsa
debug2: we did not send a packet, disable method
debug1: Next authentication method: password
能判斷是怎么回事嗎？

taojie2000

回復(fù) 3# liuyong20395


    log/secure 下就沒個 ssh 字段的日志?     grep  ssh 搜過沒?

taojie2000

回復(fù) 5# liuyong20395


    再看下你服務(wù)器上 相關(guān) KEY 文件 權(quán)限屬性

liuyong20395

回復(fù) 7# taojie2000


    May  6 22:11:08 config sshd[3827]: Accepted password for test from 192.168.1.12 port 45977 ssh2
May  6 22:11:08 config sshd[3827]: pam_unix(sshd:session): session opened for user test by (uid=0)
May  6 22:11:08 config sshd[3827]: pam_unix(sshd:session): session closed for user test

這是var/log/secure下的日志

authorized_keys的權(quán)限屬性是644

chenyx

那個是正常的日志,不正常的時候日志什么也沒有?

liuyong20395

沒有不正常的日志，日志都是顯示正常的。