ssh localhost “Permission denied (publickey)

时间 2019-12-11

标签 ssh localhost permission denied publickey 繁體版

原文原文链接

再次遇到 SSH Server And “Permission denied (publickey)

用这个关键词搜索才找到howtogeek上答案： sshd : Authentication refused: bad ownership or modes for directory /html

直接用我文章题目中的搜索，此次无论用。ssh

看log

$ grep sshd /var/log/audit/audit.log

这个命令颇有用。它会告诉你缘由。this

May 17 16:21:25 localhost sshd[30255]: Authentication refused: bad ownership or modes for directory /home/usernamecode

缘由很清楚了。是目录权限不对。orm

方法是：

Fixing Authentication refused: bad ownership or modes for directoryFrom HowToGeekIf you get this error in your logs when trying to setup public key authenticated automatic logins, the problem is a permissions one.You’ll need to perform the following commands on the user account you are trying to setup:server

chmod go-w ~/
    chmod 700 ~/.ssh
    chmod 600 ~/.ssh/authorized_keys

http://www.howtogeek.com/wiki/Fixing_Authentication_refused:_bad_ownership_or_modes_for_directoryhtm

chmod go-w ~/  这个很重要。若是你的用户目录被设定为其它用户和组用户能够写，那么即时你更改了 .ssh 目录和其文件也无论用！！！！！ 我浪费了多少时间啊。 ：（ 我作了下面两步，但仍是不行。 Permission denied (publickey).

Make sure you do the following:blog

Make sure the permissions of the .ssh folder are 0700Make sure the permissions of the authorized_keys file are 0600Make sure the user owns the .ssh folder and contents (normally that’s the case but just to make sure)http://blog.artooro.com/2010/02/19/ssh-server-and-permission-denied-publickey/ip

$ grep sshd /var/log/audit/audit.log get

May 17 16:21:25 localhost sshd[30255]: Authentication refused: bad ownership or modes for directory /home/fltrpMay 17 16:21:35 localhost sshd[30257]: Authentication refused: bad ownership or modes for directory /home/fltrphttp://serverfault.com/questions/230771/ssh-configuration-publickeys-permission-denied-publickey-password-error

原文地址：

http://pengyou.rijiben.org/2012/2012-08-29-%E5%86%8D%E6%AC%A1%E9%81%87%E5%88%B0_SSH_Server_And_Permission_denied_publickey.html

public-key生成命令(客户端)

# ssh-keygen -t dsa -f ~/.ssh/id_dsa

# cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys

[注释：~/.ssh/id_dsa.pub文件为公钥，拷贝到Server的~/.ssh/目录中，执行cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys,权限只给用户本人，不然没法链接]

容许root直接登陆

编辑/etc/ssh/sshd_config, 从新启动sshd

PermitRootLogin yes