Ubuntu 服务器上的 SSH 故障排除

Ubuntu 服务器上的 SSH 故障排除

我正在尝试在 Digital Ocean Cloud 服务器上设置 SSH 密钥身份验证。我首先将 rsa_id.pub 添加到我的帐户中,并在创建它时将其自动加载到 ubuntu Droplet 中。访问 rsa 公钥时似乎出现错误,但我将 /etc/ssh 中的所有文件权限更改为 777(我知道这是一个坏主意)。有任何想法吗?

-ssh 尝试验证时的详细日志

Apr  2 13:42:38 CarreFamilyHomestay-Webserver sshd[976]: Server listening on 0.0.0.0 port 22.
Apr  2 13:42:38 CarreFamilyHomestay-Webserver sshd[976]: Server listening on :: port 22.
Apr  2 13:43:49 CarreFamilyHomestay-Webserver sshd[1193]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr  2 13:44:54 CarreFamilyHomestay-Webserver sshd[1193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.80.65.235  user=root
Apr  2 13:44:56 CarreFamilyHomestay-Webserver sshd[1193]: Failed password for root from 192.80.65.235 port 33463 ssh2
Apr  2 13:44:56 CarreFamilyHomestay-Webserver sshd[1193]: Connection closed by 192.80.65.235 [preauth]
Apr  2 13:46:17 CarreFamilyHomestay-Webserver sshd[1196]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr  2 13:58:54 CarreFamilyHomestay-Webserver sshd[951]: Server listening on 0.0.0.0 port 22.
Apr  2 13:58:54 CarreFamilyHomestay-Webserver sshd[951]: Server listening on :: port 22.
Apr  2 14:00:35 CarreFamilyHomestay-Webserver sshd[1118]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr  2 14:00:38 CarreFamilyHomestay-Webserver sshd[1118]: pam_unix(sshd:account): expired password for user root (root enforced)
Apr  2 14:00:38 CarreFamilyHomestay-Webserver sshd[1118]: Accepted password for root from 192.80.65.235 port 33274 ssh2
Apr  2 14:00:38 CarreFamilyHomestay-Webserver sshd[1118]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr  2 14:03:34 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): check pass; user unknown
Apr  2 14:03:34 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= 
Apr  2 14:03:37 CarreFamilyHomestay-Webserver login[1042]: FAILED LOGIN (1) on '/dev/tty1' FOR 'UNKNOWN', Authentication failure
Apr  2 14:04:00 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=  user=root
Apr  2 14:04:03 CarreFamilyHomestay-Webserver login[1042]: FAILED LOGIN (2) on '/dev/tty1' FOR 'root', Authentication failure
Apr  2 14:04:22 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): check pass; user unknown
Apr  2 14:04:22 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= 
Apr  2 14:04:37 CarreFamilyHomestay-Webserver login[1168]: pam_unix(login:account): expired password for user root (root enforced)
Apr  2 14:04:44 CarreFamilyHomestay-Webserver login[1168]: pam_unix(login:chauthtok): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=  user=root
Apr  2 14:04:46 CarreFamilyHomestay-Webserver login[1168]: Authentication token manipulation error
Apr  2 14:04:53 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=  user=root
Apr  2 14:04:57 CarreFamilyHomestay-Webserver login[1173]: FAILED LOGIN (1) on '/dev/tty1' FOR 'root', Authentication failure
Apr  2 14:05:04 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:auth): check pass; user unknown
Apr  2 14:05:04 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= 
Apr  2 14:05:07 CarreFamilyHomestay-Webserver login[1173]: FAILED LOGIN (2) on '/dev/tty1' FOR 'UNKNOWN', Authentication failure
Apr  2 14:05:17 CarreFamilyHomestay-Webserver login[1173]: FAILED LOGIN (3) on '/dev/tty1' FOR 'root', Authentication failure
Apr  2 14:05:33 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:account): expired password for user root (root enforced)
Apr  2 14:05:59 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:chauthtok): password changed for root
Apr  2 14:05:59 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
Apr  2 14:05:59 CarreFamilyHomestay-Webserver login[1225]: ROOT LOGIN  on '/dev/tty1'
Apr  2 14:07:10 CarreFamilyHomestay-Webserver sshd[1240]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr  2 14:07:17 CarreFamilyHomestay-Webserver sshd[1240]: Accepted password for root from 192.80.65.235 port 35403 ssh2
Apr  2 14:07:17 CarreFamilyHomestay-Webserver sshd[1240]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr  2 14:07:36 CarreFamilyHomestay-Webserver sudo:     root : TTY=pts/1 ; PWD=/root/.ssh ; USER=root ; COMMAND=/usr/bin/vim authorized_keys
Apr  2 14:07:36 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session opened for user root by root(uid=0)
Apr  2 14:07:57 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session closed for user root
Apr  2 14:08:36 CarreFamilyHomestay-Webserver sudo:     root : TTY=pts/1 ; PWD=/etc/ssh ; USER=root ; COMMAND=/usr/bin/apt-get install gedit
Apr  2 14:08:36 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session opened for user root by root(uid=0)
Apr  2 14:09:08 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session closed for user root
Apr  2 14:13:34 CarreFamilyHomestay-Webserver sshd[1316]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key

/var/log/auth.log

Apr  2 13:42:38 CarreFamilyHomestay-Webserver sshd[976]: Server listening on 0.0.0.0 port 22.
Apr  2 13:42:38 CarreFamilyHomestay-Webserver sshd[976]: Server listening on :: port 22.
Apr  2 13:43:49 CarreFamilyHomestay-Webserver sshd[1193]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr  2 13:44:54 CarreFamilyHomestay-Webserver sshd[1193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.80.65.235  user=root
Apr  2 13:44:56 CarreFamilyHomestay-Webserver sshd[1193]: Failed password for root from 192.80.65.235 port 33463 ssh2
Apr  2 13:44:56 CarreFamilyHomestay-Webserver sshd[1193]: Connection closed by 192.80.65.235 [preauth]
Apr  2 13:46:17 CarreFamilyHomestay-Webserver sshd[1196]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr  2 13:58:54 CarreFamilyHomestay-Webserver sshd[951]: Server listening on 0.0.0.0 port 22.
Apr  2 13:58:54 CarreFamilyHomestay-Webserver sshd[951]: Server listening on :: port 22.
Apr  2 14:00:35 CarreFamilyHomestay-Webserver sshd[1118]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr  2 14:00:38 CarreFamilyHomestay-Webserver sshd[1118]: pam_unix(sshd:account): expired password for user root (root enforced)
Apr  2 14:00:38 CarreFamilyHomestay-Webserver sshd[1118]: Accepted password for root from 192.80.65.235 port 33274 ssh2
Apr  2 14:00:38 CarreFamilyHomestay-Webserver sshd[1118]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr  2 14:03:34 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): check pass; user unknown
Apr  2 14:03:34 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= 
Apr  2 14:03:37 CarreFamilyHomestay-Webserver login[1042]: FAILED LOGIN (1) on '/dev/tty1' FOR 'UNKNOWN', Authentication failure
Apr  2 14:04:00 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=  user=root
Apr  2 14:04:03 CarreFamilyHomestay-Webserver login[1042]: FAILED LOGIN (2) on '/dev/tty1' FOR 'root', Authentication failure
Apr  2 14:04:22 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): check pass; user unknown
Apr  2 14:04:22 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= 
Apr  2 14:04:37 CarreFamilyHomestay-Webserver login[1168]: pam_unix(login:account): expired password for user root (root enforced)
Apr  2 14:04:44 CarreFamilyHomestay-Webserver login[1168]: pam_unix(login:chauthtok): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=  user=root
Apr  2 14:04:46 CarreFamilyHomestay-Webserver login[1168]: Authentication token manipulation error
Apr  2 14:04:53 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=  user=root
Apr  2 14:04:57 CarreFamilyHomestay-Webserver login[1173]: FAILED LOGIN (1) on '/dev/tty1' FOR 'root', Authentication failure
Apr  2 14:05:04 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:auth): check pass; user unknown
Apr  2 14:05:04 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= 
Apr  2 14:05:07 CarreFamilyHomestay-Webserver login[1173]: FAILED LOGIN (2) on '/dev/tty1' FOR 'UNKNOWN', Authentication failure
Apr  2 14:05:17 CarreFamilyHomestay-Webserver login[1173]: FAILED LOGIN (3) on '/dev/tty1' FOR 'root', Authentication failure
Apr  2 14:05:33 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:account): expired password for user root (root enforced)
Apr  2 14:05:59 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:chauthtok): password changed for root
Apr  2 14:05:59 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
Apr  2 14:05:59 CarreFamilyHomestay-Webserver login[1225]: ROOT LOGIN  on '/dev/tty1'
Apr  2 14:07:10 CarreFamilyHomestay-Webserver sshd[1240]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr  2 14:07:17 CarreFamilyHomestay-Webserver sshd[1240]: Accepted password for root from 192.80.65.235 port 35403 ssh2
Apr  2 14:07:17 CarreFamilyHomestay-Webserver sshd[1240]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr  2 14:07:36 CarreFamilyHomestay-Webserver sudo:     root : TTY=pts/1 ; PWD=/root/.ssh ; USER=root ; COMMAND=/usr/bin/vim authorized_keys
Apr  2 14:07:36 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session opened for user root by root(uid=0)
Apr  2 14:07:57 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session closed for user root
Apr  2 14:08:36 CarreFamilyHomestay-Webserver sudo:     root : TTY=pts/1 ; PWD=/etc/ssh ; USER=root ; COMMAND=/usr/bin/apt-get install gedit
Apr  2 14:08:36 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session opened for user root by root(uid=0)
Apr  2 14:09:08 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session closed for user root
Apr  2 14:13:34 CarreFamilyHomestay-Webserver sshd[1316]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key

答案1

重来。删除您的authorized_keys 文件。

  1. ssh-keygen(接受所有默认值,不使用任何密码)
  2. vi .ssh/authorized_keys
  3. 从要连接的服务器粘贴 id_rsa.pub 的内容。

另外,更改云服务器上的权限时要非常小心。我的答案对于 Linux 来说是通用的,如果有其他进程,请查看有关 SSH 密钥的数字海洋详细信息。例如,AWS 有自己的密钥管理系统。

相关内容