ssh 公钥和私钥

liuyong20395

用ssh-keygen -t rsa 生成公钥和私钥后，并把文件传到另外一台机器，可是每次用ssh连接另外一个机器的时候还是提示需要输入密码，请问可能是怎么个情况？

taojie2000

回复 1# liuyong20395


   log下的 secure 日志里 关于ssh登录的看下   应该是权限不当造成的

liuyong20395

回复 2# taojie2000


    我在log/secure下看到连接日志是这样的
May  6 21:29:27 localhost su: pam_unix(su-l:session): session opened for user root by test2(uid=500)

而我的操作过程是这样：
[trade@localhost ~]$ ssh test
test2@test's password:
Permission denied, please try again.
test2@test's password:
Permission denied, please try again.
test2@test's password:
Permission denied (publickey,gssapi-with-mic,password).

在以前就是这样操作的是可以的，这次不行的话我应该修改怎样的权限呢？

chenyx

ssh -vv test
看下什么地方有问题

liuyong20395

测试时发现其他是正常的，就这后面显示失败了：
debug1: Authentications that can continue: publickey,gssapi-with-mic,password
debug1: Next authentication method: gssapi-with-mic
debug1: Unspecified GSS failure.  Minor code may provide more information
Unknown code krb5 195

debug1: Unspecified GSS failure.  Minor code may provide more information
Unknown code krb5 195

debug1: Unspecified GSS failure.  Minor code may provide more information
Unknown code krb5 195

debug2: we did not send a packet, disable method
debug1: Next authentication method: publickey
debug1: Trying private key: /home/test/.ssh/identity
debug1: Offering public key: /home/test/.ssh/id_rsa
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey,gssapi-with-mic,password
debug1: Trying private key: /home/test/.ssh/id_dsa
debug2: we did not send a packet, disable method
debug1: Next authentication method: password
能判断是怎么回事吗？

taojie2000

回复 3# liuyong20395


    log/secure 下就没个 ssh 字段的日志?     grep  ssh 搜过没?

taojie2000

回复 5# liuyong20395


    再看下你服务器上 相关 KEY 文件 权限属性

liuyong20395

回复 7# taojie2000


    May  6 22:11:08 config sshd[3827]: Accepted password for test from 192.168.1.12 port 45977 ssh2
May  6 22:11:08 config sshd[3827]: pam_unix(sshd:session): session opened for user test by (uid=0)
May  6 22:11:08 config sshd[3827]: pam_unix(sshd:session): session closed for user test

这是var/log/secure下的日志

authorized_keys的权限属性是644

chenyx

那个是正常的日志,不正常的时候日志什么也没有?

liuyong20395

没有不正常的日志，日志都是显示正常的。