我正在尝试在 Digital Ocean Cloud 服务器上设置 SSH 密钥身份验证。我首先将 rsa_id.pub 添加到我的帐户中,并在创建它时将其自动加载到 ubuntu Droplet 中。访问 rsa 公钥时似乎出现错误,但我将 /etc/ssh 中的所有文件权限更改为 777(我知道这是一个坏主意)。有任何想法吗?
-ssh 尝试验证时的详细日志
Apr 2 13:42:38 CarreFamilyHomestay-Webserver sshd[976]: Server listening on 0.0.0.0 port 22.
Apr 2 13:42:38 CarreFamilyHomestay-Webserver sshd[976]: Server listening on :: port 22.
Apr 2 13:43:49 CarreFamilyHomestay-Webserver sshd[1193]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr 2 13:44:54 CarreFamilyHomestay-Webserver sshd[1193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.80.65.235 user=root
Apr 2 13:44:56 CarreFamilyHomestay-Webserver sshd[1193]: Failed password for root from 192.80.65.235 port 33463 ssh2
Apr 2 13:44:56 CarreFamilyHomestay-Webserver sshd[1193]: Connection closed by 192.80.65.235 [preauth]
Apr 2 13:46:17 CarreFamilyHomestay-Webserver sshd[1196]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr 2 13:58:54 CarreFamilyHomestay-Webserver sshd[951]: Server listening on 0.0.0.0 port 22.
Apr 2 13:58:54 CarreFamilyHomestay-Webserver sshd[951]: Server listening on :: port 22.
Apr 2 14:00:35 CarreFamilyHomestay-Webserver sshd[1118]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr 2 14:00:38 CarreFamilyHomestay-Webserver sshd[1118]: pam_unix(sshd:account): expired password for user root (root enforced)
Apr 2 14:00:38 CarreFamilyHomestay-Webserver sshd[1118]: Accepted password for root from 192.80.65.235 port 33274 ssh2
Apr 2 14:00:38 CarreFamilyHomestay-Webserver sshd[1118]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 2 14:03:34 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): check pass; user unknown
Apr 2 14:03:34 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=
Apr 2 14:03:37 CarreFamilyHomestay-Webserver login[1042]: FAILED LOGIN (1) on '/dev/tty1' FOR 'UNKNOWN', Authentication failure
Apr 2 14:04:00 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= user=root
Apr 2 14:04:03 CarreFamilyHomestay-Webserver login[1042]: FAILED LOGIN (2) on '/dev/tty1' FOR 'root', Authentication failure
Apr 2 14:04:22 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): check pass; user unknown
Apr 2 14:04:22 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=
Apr 2 14:04:37 CarreFamilyHomestay-Webserver login[1168]: pam_unix(login:account): expired password for user root (root enforced)
Apr 2 14:04:44 CarreFamilyHomestay-Webserver login[1168]: pam_unix(login:chauthtok): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= user=root
Apr 2 14:04:46 CarreFamilyHomestay-Webserver login[1168]: Authentication token manipulation error
Apr 2 14:04:53 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= user=root
Apr 2 14:04:57 CarreFamilyHomestay-Webserver login[1173]: FAILED LOGIN (1) on '/dev/tty1' FOR 'root', Authentication failure
Apr 2 14:05:04 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:auth): check pass; user unknown
Apr 2 14:05:04 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=
Apr 2 14:05:07 CarreFamilyHomestay-Webserver login[1173]: FAILED LOGIN (2) on '/dev/tty1' FOR 'UNKNOWN', Authentication failure
Apr 2 14:05:17 CarreFamilyHomestay-Webserver login[1173]: FAILED LOGIN (3) on '/dev/tty1' FOR 'root', Authentication failure
Apr 2 14:05:33 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:account): expired password for user root (root enforced)
Apr 2 14:05:59 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:chauthtok): password changed for root
Apr 2 14:05:59 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
Apr 2 14:05:59 CarreFamilyHomestay-Webserver login[1225]: ROOT LOGIN on '/dev/tty1'
Apr 2 14:07:10 CarreFamilyHomestay-Webserver sshd[1240]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr 2 14:07:17 CarreFamilyHomestay-Webserver sshd[1240]: Accepted password for root from 192.80.65.235 port 35403 ssh2
Apr 2 14:07:17 CarreFamilyHomestay-Webserver sshd[1240]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 2 14:07:36 CarreFamilyHomestay-Webserver sudo: root : TTY=pts/1 ; PWD=/root/.ssh ; USER=root ; COMMAND=/usr/bin/vim authorized_keys
Apr 2 14:07:36 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session opened for user root by root(uid=0)
Apr 2 14:07:57 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session closed for user root
Apr 2 14:08:36 CarreFamilyHomestay-Webserver sudo: root : TTY=pts/1 ; PWD=/etc/ssh ; USER=root ; COMMAND=/usr/bin/apt-get install gedit
Apr 2 14:08:36 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session opened for user root by root(uid=0)
Apr 2 14:09:08 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session closed for user root
Apr 2 14:13:34 CarreFamilyHomestay-Webserver sshd[1316]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
/var/log/auth.log
Apr 2 13:42:38 CarreFamilyHomestay-Webserver sshd[976]: Server listening on 0.0.0.0 port 22.
Apr 2 13:42:38 CarreFamilyHomestay-Webserver sshd[976]: Server listening on :: port 22.
Apr 2 13:43:49 CarreFamilyHomestay-Webserver sshd[1193]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr 2 13:44:54 CarreFamilyHomestay-Webserver sshd[1193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.80.65.235 user=root
Apr 2 13:44:56 CarreFamilyHomestay-Webserver sshd[1193]: Failed password for root from 192.80.65.235 port 33463 ssh2
Apr 2 13:44:56 CarreFamilyHomestay-Webserver sshd[1193]: Connection closed by 192.80.65.235 [preauth]
Apr 2 13:46:17 CarreFamilyHomestay-Webserver sshd[1196]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr 2 13:58:54 CarreFamilyHomestay-Webserver sshd[951]: Server listening on 0.0.0.0 port 22.
Apr 2 13:58:54 CarreFamilyHomestay-Webserver sshd[951]: Server listening on :: port 22.
Apr 2 14:00:35 CarreFamilyHomestay-Webserver sshd[1118]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr 2 14:00:38 CarreFamilyHomestay-Webserver sshd[1118]: pam_unix(sshd:account): expired password for user root (root enforced)
Apr 2 14:00:38 CarreFamilyHomestay-Webserver sshd[1118]: Accepted password for root from 192.80.65.235 port 33274 ssh2
Apr 2 14:00:38 CarreFamilyHomestay-Webserver sshd[1118]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 2 14:03:34 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): check pass; user unknown
Apr 2 14:03:34 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=
Apr 2 14:03:37 CarreFamilyHomestay-Webserver login[1042]: FAILED LOGIN (1) on '/dev/tty1' FOR 'UNKNOWN', Authentication failure
Apr 2 14:04:00 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= user=root
Apr 2 14:04:03 CarreFamilyHomestay-Webserver login[1042]: FAILED LOGIN (2) on '/dev/tty1' FOR 'root', Authentication failure
Apr 2 14:04:22 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): check pass; user unknown
Apr 2 14:04:22 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=
Apr 2 14:04:37 CarreFamilyHomestay-Webserver login[1168]: pam_unix(login:account): expired password for user root (root enforced)
Apr 2 14:04:44 CarreFamilyHomestay-Webserver login[1168]: pam_unix(login:chauthtok): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= user=root
Apr 2 14:04:46 CarreFamilyHomestay-Webserver login[1168]: Authentication token manipulation error
Apr 2 14:04:53 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= user=root
Apr 2 14:04:57 CarreFamilyHomestay-Webserver login[1173]: FAILED LOGIN (1) on '/dev/tty1' FOR 'root', Authentication failure
Apr 2 14:05:04 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:auth): check pass; user unknown
Apr 2 14:05:04 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=
Apr 2 14:05:07 CarreFamilyHomestay-Webserver login[1173]: FAILED LOGIN (2) on '/dev/tty1' FOR 'UNKNOWN', Authentication failure
Apr 2 14:05:17 CarreFamilyHomestay-Webserver login[1173]: FAILED LOGIN (3) on '/dev/tty1' FOR 'root', Authentication failure
Apr 2 14:05:33 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:account): expired password for user root (root enforced)
Apr 2 14:05:59 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:chauthtok): password changed for root
Apr 2 14:05:59 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
Apr 2 14:05:59 CarreFamilyHomestay-Webserver login[1225]: ROOT LOGIN on '/dev/tty1'
Apr 2 14:07:10 CarreFamilyHomestay-Webserver sshd[1240]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr 2 14:07:17 CarreFamilyHomestay-Webserver sshd[1240]: Accepted password for root from 192.80.65.235 port 35403 ssh2
Apr 2 14:07:17 CarreFamilyHomestay-Webserver sshd[1240]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr 2 14:07:36 CarreFamilyHomestay-Webserver sudo: root : TTY=pts/1 ; PWD=/root/.ssh ; USER=root ; COMMAND=/usr/bin/vim authorized_keys
Apr 2 14:07:36 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session opened for user root by root(uid=0)
Apr 2 14:07:57 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session closed for user root
Apr 2 14:08:36 CarreFamilyHomestay-Webserver sudo: root : TTY=pts/1 ; PWD=/etc/ssh ; USER=root ; COMMAND=/usr/bin/apt-get install gedit
Apr 2 14:08:36 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session opened for user root by root(uid=0)
Apr 2 14:09:08 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session closed for user root
Apr 2 14:13:34 CarreFamilyHomestay-Webserver sshd[1316]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
答案1
重来。删除您的authorized_keys 文件。
- ssh-keygen(接受所有默认值,不使用任何密码)
- vi .ssh/authorized_keys
- 从要连接的服务器粘贴 id_rsa.pub 的内容。
另外,更改云服务器上的权限时要非常小心。我的答案对于 Linux 来说是通用的,如果有其他进程,请查看有关 SSH 密钥的数字海洋详细信息。例如,AWS 有自己的密钥管理系统。