[NTLUG:Discuss] SSH RSA

Greg Edwards greg at edwards-tx.us
Mon Mar 4 20:59:25 CST 2013


This did the trick.

home and .ssh at 755 and authorized_keys at 600 worked fine

Thanks,
--
Greg Edwards
http://www.edwards-tx.us


Christopher Cox wrote:
> Permissions are VERY important to ssh.. that means things needs to be
> secure.
>
> Home dir above .ssh needs to be writable ONLY by the owner 755 (or
> better)
> .ssh needs to be 700 and files inside should be 600
>
> Maybe that's the issue.
>
> On 03/02/2013 07:01 PM, Greg Edwards wrote:
>> Oops, didn't think to check the log, my bad!!
>>
>> remote .ssh/authorized_keys is rw-r--r--, local .ssh/id_rsa is r------
>>
>> IIRC, ssh runs as root so permissions shouldn't be an issue?
>>
>> Telnet is open on the VM and I get access denied on rcp too.  Could
>> SELinux be
>> blocking me?  I haven't looked at that yet either.
>>
>> Greg Edwards
>> http://www.edwards-tx.us
>>
>>
>> Eric Schnoebelen wrote:
>>>
>>> Greg Edwards writes:
>>> - I'm trying to setup an SSH tunnel from an RHEL server to a VM RHEL
>>> - instance.  I can SSH and scp to the VM but I can't get the VM to
>>> auto
>>> - login even though I've put a public key in the authorized_keys file.
>>> -
>>> - Any ideas?
>>>
>>> What do the logs say?  I think the interesting log on a
>>> RHEL/CentOS system (at least for 5.x) is /var/log/secure.
>>>
>>> Absent anything from the logs, I'd check the mode on
>>> ~/.ssh/authorized_keys.
>>> It should be 600 (aka rw-------).
>>>
>>> --
>>> Eric Schnoebelen        eric at cirr.com        http://www.cirr.com
>>>     "Hatred does not cease by hatred, but only by love;
>>>          this is the eternal rule."  -- Buddha
>>>
>>> _______________________________________________
>>> http://www.ntlug.org/mailman/listinfo/discuss
>>>
>>
>> _______________________________________________
>> http://www.ntlug.org/mailman/listinfo/discuss
>>
>>
>
>
> _______________________________________________
> http://www.ntlug.org/mailman/listinfo/discuss



More information about the Discuss mailing list