ssh公钥验证需要密码

rongur

服务器操作系统：

Linux R910 2.6.32-431.el6.x86_64 #1 SMP Sun Nov 10 22:19:54 EST 2013 x86_64 x86_64 x86_64 GNU/Linux


服务器ssh版本：
OpenSSH_5.3p1, OpenSSL 1.0.0-fips 29 Mar 2010

服务器sshd-config配置：
#StrictModes yes
#MaxAuthTries 6
#MaxSessions 10

RSAAuthentication yes
PubkeyAuthentication yes
AuthorizedKeysFile      .ssh/authorized_keys



客户端是mac系统，目录权限已经设置：
drwx------. 2 sjz users 4096 Aug  4 11:31 .ssh
-rw-r--r--. 1  sjz users  618 Aug  4 11:27 authorized_keys

用v选项ssh登陆服务器，输出结果如下：

debug1: Reading configuration data /etc/ssh_config
debug1: Connecting to 10.32.8.96 [10.32.8.96] port 22.
debug1: Connection established.
debug1: identity file /Users/sjz/.ssh/identity type -1
debug1: identity file /Users/sjz/.ssh/id_rsa type -1
debug1: identity file /Users/sjz/.ssh/id_dsa type 2
debug1: Remote protocol version 2.0, remote software version OpenSSH_5.3
debug1: match: OpenSSH_5.3 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_5.2
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-ctr hmac-md5 none
debug1: kex: client->server aes128-ctr hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host '10.32.8.96' is known and matches the RSA host key.
debug1: Found key in /Users/sjz/.ssh/known_hosts:1
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password
debug1: Next authentication method: publickey
debug1: Offering public key: /Users/sjz/.ssh/id_dsa
debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password
debug1: Trying private key: /Users/sjz/.ssh/identity
debug1: Trying private key: /Users/sjz/.ssh/id_rsa
debug1: Next authentication method: password
sjz@10.32.8.96's password:

公钥验证失败，提示输入密码。

把服务器上的sshd-config的strictmodes 改成no公钥认证也失败。

请问这是什么原因

Shell_HAT

用 ssh-keygen 命令生成密钥对的时候不要设置密码

q1208c

回复 1# rongur

注意权限. 你现在的权限是错的.

700 $HOME
700 $HOME/.ssh
600 $HOME/.ssh/authorized_keys

楼主试试看.
   

rongur

回复 2# Shell_HAT


    提示的不是这个密码，应该是登陆服务器账号的密码

rongur

q1208c 发表于 2014-08-04 13:31
回复 1# rongur

注意权限. 你现在的权限是错的.

试过，仍然不行
看了/var/log/secure日志，没有提示说是权限问题

q1208c

权限问题没有任何提示.

只是 public key 验证失败.

确认两边的权限. 两边都需要确认的.

rongur

q1208c 发表于 2014-08-04 16:26
权限问题没有任何提示.

只是 public key 验证失败.

把客户端权限改成600就OK了
非常感谢

q1208c

回复 7# rongur

rongur

q1208c 发表于 2014-08-04 16:48
回复 7# rongur

仔细查了一下，不是权限问题
吧selinux关了就好

q1208c

回复 9# rongur



默认情况下, 我都是关掉selinux的.

这东西虽说是 说得很安全, 但有它在, 很多东西处理起来很麻烦, 有些, 还是根本处理不了的.