SSH 密钥不起作用

Question 1

这是罪魁祸首：

drwxrwxr-x 2 emerg wheel 4096 Apr 10 11:51 .ssh/

您允许组中的任何人wheel对您的目录进行写访问.ssh。这意味着该组的任何成员都可以替换您的authorized_keys文件 - 因此 SSH 拒绝信任该文件。

修复您的权限，问题就会消失。

Answer

这是罪魁祸首：

drwxrwxr-x 2 emerg wheel 4096 Apr 10 11:51 .ssh/

您允许组中的任何人wheel对您的目录进行写访问.ssh。这意味着该组的任何成员都可以替换您的authorized_keys文件 - 因此 SSH 拒绝信任该文件。

修复您的权限，问题就会消失。

Question 2

@Jenny D 的回答的补充，来自man ssh：

~/.ssh/
             This directory is the default location for all user-specific con‐
             figuration and authentication information.  There is no general
             requirement to keep the entire contents of this directory secret,
             but the recommended permissions are read/write/execute for the
             user, and not accessible by others.

~/.ssh/id_rsa
             Contains the private key for authentication.  These files contain
             sensitive data and should be readable by the user but not acces‐
             sible by others (read/write/execute).  ssh will simply ignore a
             private key file if it is accessible by others.  It is possible
             to specify a passphrase when generating the key which will be
             used to encrypt the sensitive part of this file using 3DES.

我认为的权限.ssh是原来的“免费”，但它受到私钥文件权限的限制，所以你不能给.ssh组或其他人写权限。

Answer

@Jenny D 的回答的补充，来自man ssh：

~/.ssh/
             This directory is the default location for all user-specific con‐
             figuration and authentication information.  There is no general
             requirement to keep the entire contents of this directory secret,
             but the recommended permissions are read/write/execute for the
             user, and not accessible by others.

~/.ssh/id_rsa
             Contains the private key for authentication.  These files contain
             sensitive data and should be readable by the user but not acces‐
             sible by others (read/write/execute).  ssh will simply ignore a
             private key file if it is accessible by others.  It is possible
             to specify a passphrase when generating the key which will be
             used to encrypt the sensitive part of this file using 3DES.

我认为的权限.ssh是原来的“免费”，但它受到私钥文件权限的限制，所以你不能给.ssh组或其他人写权限。

SSH 密钥不起作用

答案1

答案2

相关内容