Kugelfisch :'( Komme mit meinem Mac nicht auf vServer Linux Debian per Public Key SSH

[watchnerd]

Hallo,

auf meinem vServer liegt eine /home/userxyz/.ssh/authorized_keys Datei, dort befindet sich mein Public Key drin (Meinen Public RSA-Key habe ich mit dem Mac generiert). In der sshd_config habe ich diese Datei unter AuthorizedKeysFile /home/userxyz/.ssh/authorized_keys angegeben. Meinem Mac habe ich gesagt, er soll den private Key als Identität verwenden, siehe hier:

macbook-pro:~ Apollo$ ssh-add -l
2048 **:**:**:**:a9:e6:88:**:a9:d9:f8:**:**:**:**:** /Users/Apollo/.ssh/id_rsa (RSA)

Trotz allem lässt mein verdammter vServer den Mac nicht drauf.
Die Fehlermeldung:

macbook-pro:~ Apollo$ ssh userxyz@xx.xx.xx.xx.xx
Permission denied (publickey).

Nach jeder Konfigurationsänderung habe ich natürlich den SSH-Dienst auf dem Server neu gestartet und die Konfiguration neu eingelesen.

Normal mit Username und Passwort kann ich drauf mit meinem Mac, aber mit Public Key nicht. Was mache ich falsch? Ich sitze schon 4-5 Stunden an diesem Problem und verzweifle so langsam. Ich habe das ganze auch schon mit DSA probiert, geht auch nicht.

Dieses Tutorial habe ich benutzt:
http://wiki.hetzner.de/index.php/Sshd

Gruß

 

[Kugelfisch]

Re: Kugelfisch :'( Komme mit meinem Mac nicht auf vServer Linux Debian per Public Key

Die Fehlermeldung ist leider wenig aussagekräftig, sie besagt nur, dass kein Key verwendbar war, weil der Server ihn entweder zurückgewiesen hat, oder der Client ihn nicht findet oder lesen kann. Bitte starte auf deinem Client einmal `ssh -vvv ...`, trage auf dem Server temporär `LogLevel DEBUG3` in deine /etc/ssh/sshd_config ein und versuche erneut, dich per Public-Key zu authentifizieren. Auf dem Client werden nun detaillierte Informationen direkt im Terminal ausgegeben, auf dem Server standardmässig in /var/log/auth.log geloggt. Diese Informationen wären sehr hilfreich, um das Problem eingrenzen zu können.

 

[watchnerd]

Re: Kugelfisch :'( Komme mit meinem Mac nicht auf vServer Linux Debian per Public Key

[src=bash]OpenSSH_6.2p2, OSSLShim 0.9.8r 8 Dec 2011
debug1: Reading configuration data /etc/ssh_config
debug1: /etc/ssh_config line 20: Applying options for *
debug1: /etc/ssh_config line 102: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to xx.xx.xx.xx port 22.
debug1: Connection established.
debug3: Incorrect RSA1 identifier
debug3: Could not load "/Users/Apollo/.ssh/id_rsa" as a RSA1 public key
debug1: identity file /Users/Apollo/.ssh/id_rsa type 1
debug1: identity file /Users/Apollo/.ssh/id_rsa-cert type -1
debug1: identity file /Users/Apollo/.ssh/id_dsa type -1
debug1: identity file /Users/Apollo/.ssh/id_dsa-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.2
debug1: Remote protocol version 2.0, remote software version OpenSSH_6.0p1 Debian-4
debug1: match: OpenSSH_6.0p1 Debian-4 pat OpenSSH*
debug2: fd 3 setting O_NONBLOCK
debug3: load_hostkeys: loading entries for host "xx.xx.xx.xx" from file "/Users/Apollo/.ssh/known_hosts"
debug3: load_hostkeys: found key type RSA in file /Users/Apollo/.ssh/known_hosts:1
debug3: load_hostkeys: loaded 1 keys
debug3: order_hostkeyalgs: prefer hostkeyalgs: ssh-rsa-cert-v01@openssh.com,ssh-rsa-cert-v00@openssh.com,ssh-rsa
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa-cert-v01@openssh.com,ssh-rsa-cert-v00@openssh.com,ssh-rsa,ssh-dss-cert-v01@openssh.com,ssh-dss-cert-v00@openssh.com,ssh-dss
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
debug2: kex_parse_kexinit: hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib
debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: kex_parse_kexinit: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-sha2-256,hmac-sha2-256-96,hmac-sha2-512,hmac-sha2-512-96,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-sha2-256,hmac-sha2-256-96,hmac-sha2-512,hmac-sha2-512-96,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96
debug2: kex_parse_kexinit: none,zlib@openssh.com
debug2: kex_parse_kexinit: none,zlib@openssh.com
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit:
debug2: kex_parse_kexinit: first_kex_follows 0
debug2: kex_parse_kexinit: reserved 0
debug2: mac_setup: found hmac-md5
debug1: kex: server->client aes128-ctr hmac-md5 none
debug2: mac_setup: found hmac-md5
debug1: kex: client->server aes128-ctr hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug2: dh_gen_key: priv key bits set: 127/256
debug2: bits set: 518/1024
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Server host key: RSA **:**:**:**:**:**:**:**:**:**:**:**:**:**:**:**
debug3: load_hostkeys: loading entries for host "xx.xx.xx.xx" from file "/Users/Apollo/.ssh/known_hosts"
debug3: load_hostkeys: found key type RSA in file /Users/Apollo/.ssh/known_hosts:1
debug3: load_hostkeys: loaded 1 keys
debug1: Host 'xx.xx.xx.xx' is known and matches the RSA host key.
debug1: Found key in /Users/Apollo/.ssh/known_hosts:1
debug2: bits set: 537/1024
debug1: ssh_rsa_verify: signature correct
debug2: kex_derive_keys
debug2: set_newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug2: key: /Users/Apollo/.ssh/id_rsa (0x7ff2f240b520),
debug2: key: /Users/Apollo/.ssh/id_dsa (0x0),
debug1: Authentications that can continue: publickey
debug3: start over, passed a different list publickey
debug3: preferred publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Offering RSA public key: /Users/Apollo/.ssh/id_rsa
debug3: send_pubkey_test
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey
debug1: Trying private key: /Users/Apollo/.ssh/id_dsa
debug3: no such identity: /Users/Apollo/.ssh/id_dsa: No such file or directory
debug2: we did not send a packet, disable method
debug1: No more authentication methods to try.
Permission denied (publickey).[/src]



[src=bash]Dec 15 13:26:02 Debian-70-wheezy-64-minimal sshd[2391]: Received signal 15; terminating.
Dec 15 13:26:02 Debian-70-wheezy-64-minimal sshd[2440]: debug3: oom_adjust_setup
Dec 15 13:26:02 Debian-70-wheezy-64-minimal sshd[2440]: Set /proc/self/oom_score_adj from 0 to -1000
Dec 15 13:26:02 Debian-70-wheezy-64-minimal sshd[2440]: debug2: fd 3 setting O_NONBLOCK
Dec 15 13:26:02 Debian-70-wheezy-64-minimal sshd[2440]: debug1: Bind to port 22 on 0.0.0.0.
Dec 15 13:26:02 Debian-70-wheezy-64-minimal sshd[2440]: Server listening on 0.0.0.0 port 22.
Dec 15 13:26:02 Debian-70-wheezy-64-minimal sshd[2440]: debug2: fd 4 setting O_NONBLOCK
Dec 15 13:26:02 Debian-70-wheezy-64-minimal sshd[2440]: debug3: sock_set_v6only: set socket 4 IPV6_V6ONLY
Dec 15 13:26:02 Debian-70-wheezy-64-minimal sshd[2440]: debug1: Bind to port 22 on ::.
Dec 15 13:26:02 Debian-70-wheezy-64-minimal sshd[2440]: Server listening on :: port 22.
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2440]: debug3: fd 5 is not O_NONBLOCK
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2440]: debug1: Forked child 2458.
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2440]: debug3: send_rexec_state: entering fd = 8 config len 783
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2440]: debug3: ssh_msg_send: type 0
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2440]: debug3: send_rexec_state: done
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: oom_adjust_restore
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: Set /proc/self/oom_score_adj to 0
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: rexec start in 5 out 5 newsock 5 pipe 7 sock 8
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: inetd sockets after dupping: 3, 3
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: Connection from xx.xx.xx.xx.xx port 57240
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: Client protocol version 2.0; client software version OpenSSH_6.2
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: match: OpenSSH_6.2 pat OpenSSH*
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: Enabling compatibility mode for protocol 2.0
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: Local version string SSH-2.0-OpenSSH_6.0p1 Debian-4
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: fd 3 setting O_NONBLOCK
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: Network child is on pid 2459
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: preauth child monitor started
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: privsep user:group 103:65534 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: permanently_set_uid: 103/65534 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: list_hostkey_types: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: SSH2_MSG_KEXINIT sent [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: SSH2_MSG_KEXINIT received [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-sha2-256,hmac-sha2-256-96,hmac-sha2-512,hmac-sha2-512-96,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-sha2-256,hmac-sha2-256-96,hmac-sha2-512,hmac-sha2-512-96,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: none,zlib@openssh.com [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: none,zlib@openssh.com [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: reserved 0 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: ssh-rsa-cert-v01@openssh.com,ssh-rsa-cert-v00@openssh.com,ssh-rsa,ssh-dss-cert-v01@openssh.com,ssh-dss-cert-v00@openssh.com,ssh-dss [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: none,zlib@openssh.com,zlib [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_parse_kexinit: reserved 0 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: mac_setup: found hmac-md5 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: kex: client->server aes128-ctr hmac-md5 none [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: mac_setup: found hmac-md5 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: kex: server->client aes128-ctr hmac-md5 none [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: SSH2_MSG_KEX_DH_GEX_REQUEST received [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_send entering: type 0 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_receive entering
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: monitor_read: checking request 0
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_answer_moduli: got parameters: 1024 1024 8192
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_send entering: type 1
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: monitor_read: 0 used once, disabling now
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_choose_dh: waiting for MONITOR_ANS_MODULI [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_receive_expect entering: type 1 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_receive entering [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_choose_dh: remaining 0 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: SSH2_MSG_KEX_DH_GEX_GROUP sent [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: dh_gen_key: priv key bits set: 124/256 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: bits set: 537/1024 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: expecting SSH2_MSG_KEX_DH_GEX_INIT [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: bits set: 518/1024 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_key_sign entering [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_send entering: type 5 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_receive entering
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: monitor_read: checking request 5
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_answer_sign
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_answer_sign: signature 0x7f0ac839ac90(271)
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_send entering: type 6
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: monitor_read: 5 used once, disabling now
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_key_sign: waiting for MONITOR_ANS_SIGN [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_receive_expect entering: type 6 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_receive entering [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: SSH2_MSG_KEX_DH_GEX_REPLY sent [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: kex_derive_keys [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: set_newkeys: mode 1 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: SSH2_MSG_NEWKEYS sent [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: expecting SSH2_MSG_NEWKEYS [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: set_newkeys: mode 0 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: SSH2_MSG_NEWKEYS received [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: KEX done [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: userauth-request for user userxyz service ssh-connection method none [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: attempt 0 failures 0 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_getpwnamallow entering [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_send entering: type 7 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_receive_expect entering: type 8 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_receive entering [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_receive entering
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: monitor_read: checking request 7
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_answer_pwnamallow
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: Trying to reverse map address xx.xx.xx.xx.xx.
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: parse_server_config: config reprocess config len 783
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_send entering: type 8
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: monitor_read: 7 used once, disabling now
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: input_userauth_request: setting up authctxt for userxyz [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_start_pam entering [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_send entering: type 50 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_inform_authserv entering [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_send entering: type 3 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: input_userauth_request: try method none [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_receive entering
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: monitor_read: checking request 50
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: PAM: initializing for "userxyz"
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: PAM: setting PAM_RHOST to "***********.pool.mediaways.net"
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: PAM: setting PAM_TTY to "ssh"
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: monitor_read: 50 used once, disabling now
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_receive entering
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: monitor_read: checking request 3
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_answer_authserv: service=ssh-connection, style=, role=
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: monitor_read: 3 used once, disabling now
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: userauth-request for user userxyz service ssh-connection method publickey [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: attempt 1 failures 0 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: input_userauth_request: try method publickey [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: test whether pkalg/pkblob are acceptable [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_key_allowed entering [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_send entering: type 21 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_key_allowed: waiting for MONITOR_ANS_KEYALLOWED [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_receive_expect entering: type 22 [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_receive entering [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_receive entering
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: monitor_read: checking request 21
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_answer_keyallowed entering
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_answer_keyallowed: key_from_blob: 0x7f0ac839b5c0
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: Checking blacklist file /usr/share/ssh/blacklist.RSA-2048
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: Checking blacklist file /etc/ssh/blacklist.RSA-2048
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: temporarily_use_uid: 1000/1000 (e=0/0)
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: trying public key file /home/userxyz/.ssh/authorized_keys
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: Could not open authorized keys '/home/userxyz/.ssh/authorized_keys': Permission denied
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: restore_uid: 0/0
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: Failed publickey for userxyz from xx.xx.xx.xx.xx port 57240 ssh2
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_answer_keyallowed: key 0x7f0ac839b5c0 is not allowed
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_send entering: type 22
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug2: userauth_pubkey: authenticated 0 pkalg ssh-rsa [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: Connection closed by xx.xx.xx.xx.xx [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: do_cleanup [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: PAM: sshpam_thread_cleanup entering [preauth]
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: monitor_read_log: child log fd closed
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: mm_request_receive entering
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: do_cleanup
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: PAM: cleanup
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug3: PAM: sshpam_thread_cleanup entering
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: Killing privsep child 2459
Dec 15 13:31:01 Debian-70-wheezy-64-minimal sshd[2440]: Received signal 15; terminating.
Dec 15 13:31:01 Debian-70-wheezy-64-minimal sshd[2473]: debug3: oom_adjust_setup
Dec 15 13:31:01 Debian-70-wheezy-64-minimal sshd[2473]: Set /proc/self/oom_score_adj from 0 to -1000
Dec 15 13:31:01 Debian-70-wheezy-64-minimal sshd[2473]: debug2: fd 3 setting O_NONBLOCK
Dec 15 13:31:01 Debian-70-wheezy-64-minimal sshd[2473]: debug1: Bind to port 22 on 0.0.0.0.
Dec 15 13:31:01 Debian-70-wheezy-64-minimal sshd[2473]: Server listening on 0.0.0.0 port 22.
Dec 15 13:31:01 Debian-70-wheezy-64-minimal sshd[2473]: debug2: fd 4 setting O_NONBLOCK
Dec 15 13:31:01 Debian-70-wheezy-64-minimal sshd[2473]: debug3: sock_set_v6only: set socket 4 IPV6_V6ONLY
Dec 15 13:31:01 Debian-70-wheezy-64-minimal sshd[2473]: debug1: Bind to port 22 on ::.
Dec 15 13:31:01 Debian-70-wheezy-64-minimal sshd[2473]: Server listening on :: port 22.[/src]

 

[Kugelfisch]

Re: Kugelfisch :'( Komme mit meinem Mac nicht auf vServer Linux Debian per Public Key

Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: temporarily_use_uid: 1000/1000 (e=0/0)
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: trying public key file /home/userxyz/.ssh/authorized_keys
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: Could not open authorized keys '/home/userxyz/.ssh/authorized_keys': Permission denied
Dec 15 13:26:15 Debian-70-wheezy-64-minimal sshd[2458]: debug1: restore_uid: 0/0

Ist die Datei /home/userxyz/.ssh/authorized_keys für den Benutzer `userxyz` (1000:1000) lesbar? Wenn du
[src=bash]chmod 700 .ssh
chmod 600 .ssh/authorized_keys[/src]
ausgeführt hast, stelle insbesondere sicher, dass sowohl ~/.ssh als auch ~/.ssh/authorized_keys userxyz (und nicht root) gehört (`ls -la .ssh`) und ändere ggf. den Eigentümer (`chown -R userxyz:userxyz .ssh`). Teste ggf. einmal, ob als normaler Benutzer ein `cat .ssh/authorized_keys` die Dateiinhalte liefert.

 

[watchnerd]

Re: Kugelfisch :'( Komme mit meinem Mac nicht auf vServer Linux Debian per Public Key

Danke Kugelfisch. <3

Es hat geklappt! Wie immer sehr professionell. Ich habe nun mit chown -R den Dateibesitzer auf userxyz geändert und die Rechte des Ordners auf 700 für .ssh und auf 600 für die Datei authorized_keys geändert, jetzt funktioniert es. Manchmal kann es echt einfach sein. Danke für die Hilfe.

 

[Kugelfisch]

Re: Kugelfisch :'( Komme mit meinem Mac nicht auf vServer Linux Debian per Public Key

Kein Problem.

Du solltest jedoch nicht vergessen, das serverseitig erhöhte LogLevel wieder auf INFO oder niedriger zurückzusetzen und das auth.log zu leeren, wenn nicht bereits geschehen - die Manpage erwähnt explizit, dass ein DEBUG-Level u.U. dazu führen kann, dass sensible Daten ins (standardmässig für alle Benutzer lesbare) Log geschrieben werden.

 

[watchnerd]

Re: Kugelfisch :'( Komme mit meinem Mac nicht auf vServer Linux Debian per Public Key

Das LogLevel habe ich danach wieder auf INFO gestellt. Log-Dateien habe ich nun gelöscht (mit dem userxyz hätte ich darauf aber gar keinen Zugriff gehabt, aber sicher ist sicher).

Nun denn, dann mache ich mal weiter mit der Grundabsicherung vom Server. iptables ahoi.


Grüße
watchnerd