ssh:没有权限(publickey keyboard-interactive)

时间:2022-12-28 14:34:55

I'm using linux system I created a ssh key on local directory $ ssh-keygen -t rsa -f ~/.ssh/id_rsa

我正在使用linux系统,我在本地目录$ ssh-keygen -t rsa -f ~/.ssh/id_rsa中创建了ssh密钥。

and then uploaded the public key to planetLab system

然后将公钥上传至planetLab系统。

then I tried to log in a PlanetLab node using: ssh -v
the debug information is as follows:

然后我尝试使用一个PlanetLab节点登录:ssh -v调试信息如下:

    OpenSSH_5.8p2, OpenSSL 1.0.0j-fips 10 May 2012
    debug1: Reading configuration data /etc/ssh/ssh_config
    debug1: Applying options for *
    debug1: Connecting to openlab01.pl.sophia.inria.fr [138.96.116.22] port 22. 
    debug1: Connection established.
    debug1: identity file /user/wgong/home/.ssh/id_rsa type 1
    debug1: identity file /user/wgong/home/.ssh/id_rsa-cert type -1
    debug1: identity file /user/wgong/home/.ssh/id_dsa type -1
    debug1: identity file /user/wgong/home/.ssh/id_dsa-cert type -1
    debug1: Remote protocol version 2.0, remote software version OpenSSH_5.5
    debug1: match: OpenSSH_5.5 pat OpenSSH*
    debug1: Enabling compatibility mode for protocol 2.0 
    debug1: Local version string SSH-2.0-OpenSSH_5.8
    debug1: SSH2_MSG_KEXINIT sent
    debug1: SSH2_MSG_KEXINIT received
    debug1: kex: server->client aes128-ctr hmac-md5 none
    debug1: kex: client->server aes128-ctr hmac-md5 none
    debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
    debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
    debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
    debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
    debug1: Server host key: RSA 3b:a4:2a:ec:89:d0:7b:d7:b2:08:fe:ca:0d:24:ae:20
    debug1: Host 'openlab01.pl.sophia.inria.fr' is known and matches the RSA host key.
    debug1: Found key in /user/wgong/home/.ssh/known_hosts:10
    debug1: ssh_rsa_verify: signature correct
    debug1: SSH2_MSG_NEWKEYS sent
    debug1: expecting SSH2_MSG_NEWKEYS
    debug1: SSH2_MSG_NEWKEYS received
    debug1: Roaming not allowed by server
    debug1: SSH2_MSG_SERVICE_REQUEST sent
    debug1: SSH2_MSG_SERVICE_ACCEPT received
    debug1: Authentications that can continue: publickey,keyboard-interactive
    debug1: Next authentication method: publickey
    debug1: Offering RSA public key: /user/wgong/home/.ssh/id_rsa
    debug1: Authentications that can continue: publickey,keyboard-interactive
    debug1: Trying private key: /user/wgong/home/.ssh/id_dsa
    debug1: Next authentication method: keyboard-interactive
    debug1: Authentications that can continue: publickey,keyboard-interactive
    debug1: No more authentication methods to try.
    Permission denied (publickey,keyboard-interactive).

how to deal with this problem? thanks!

如何解决这个问题?谢谢!

I notice a problem, previously, our group is tika now it is changed to uslin however, even if I deleted the previous keys and use ssh-keygen to generate new keys, the group is still as below:

我注意到一个问题,之前我们组是tika,现在改为uslin,即使我删除了之前的键并使用ssh-keygen生成新的键,这个组仍然如下:

-rw------- 1 wgong tika 1766 Mar  6 19:06 id_rsa
-rw-r--r-- 1 wgong tika  394 Mar  6 19:06 id_rsa.pub
-rw-r--r-- 1 wgong uslin   3987 Mar  6 18:11 known_hosts

is this the problem? how to fix it? thanks!

这是问题吗?如何修复它吗?谢谢!

1 个解决方案

#1


3  

Make sure your ~/.ssh/authorized_keys file on the server contains your publik key. Also, check this file's permissions - if permissions are too lax, you won't be able to log in:

确保你的~ /。服务器上的ssh/authorized_keys文件包含您的publik密钥。另外,检查该文件的权限——如果权限太松,您将无法登录:

chmod 600 ~/.ssh/authorized_keys
chmod 700 ~/.ssh/
chmod 700 ~

Yes, even your home directory's permissions may make logging in with the key impossible.

是的,甚至您的主目录的权限也可能使登录成为不可能的关键。

#1


3  

Make sure your ~/.ssh/authorized_keys file on the server contains your publik key. Also, check this file's permissions - if permissions are too lax, you won't be able to log in:

确保你的~ /。服务器上的ssh/authorized_keys文件包含您的publik密钥。另外,检查该文件的权限——如果权限太松,您将无法登录:

chmod 600 ~/.ssh/authorized_keys
chmod 700 ~/.ssh/
chmod 700 ~

Yes, even your home directory's permissions may make logging in with the key impossible.

是的,甚至您的主目录的权限也可能使登录成为不可能的关键。