ssh Permission denied (publickey).

[capthookb]

Λοιπόν, το auth.log του server είχε τα εξής μυνήματα σχετικά με το sshd.

>
 Aug 16 01:33:11 xebian sshd[18665]: Public key 56:48:4c:7e:ac:56:41:89:....:32:a8:ca:36:b0:da from 192.168.1.2 blacklisted (see ssh-vulnkey(1))
 Aug 16 01:33:15 xebian sshd[18665]: Public key 4a:ac:57:d9:aa:bc:e8:93:....:34:7d:3f:a8:97:21 from 192.168.1.2 blacklisted (see ssh-vulnkey(1))
 Aug 16 01:33:17 xebian sshd[18667]: Public key 56:48:4c:7e:ac:56:41:89:....:32:a8:ca:36:b0:da from 192.168.1.2 blacklisted (see ssh-vulnkey(1))
 Aug 16 01:33:19 xebian sshd[18667]: Public key 4a:ac:57:d9:aa:bc:e8:93:....:34:7d:3f:a8:97:21 from 192.168.1.2 blacklisted (see ssh-vulnkey(1))
 Aug 16 01:33:25 xebian sshd[18669]: Public key 56:48:4c:7e:ac:56:41:89:....:32:a8:ca:36:b0:da from 192.168.1.2 blacklisted (see ssh-vulnkey(1))
 Aug 16 01:33:26 xebian sshd[18669]: Public key 4a:ac:57:d9:aa:bc:e8:93:....:34:7d:3f:a8:97:21 from 192.168.1.2 blacklisted (see ssh-vulnkey(1))
 Aug 16 01:33:44 xebian sshd[18671]: Public key 4a:ac:57:d9:aa:bc:e8:93:....:34:7d:3f:a8:97:21 from 192.168.1.2 blacklisted (see ssh-vulnkey(1))
 Aug 16 01:33:44 xebian sshd[18671]: Public key 56:48:4c:7e:ac:56:41:89:....:32:a8:ca:36:b0:da from 192.168.1.2 blacklisted (see ssh-vulnkey(1))
 Aug 16 01:34:00 xebian sshd[18673]: Public key 56:48:4c:7e:ac:56:41:89:....:32:a8:ca:36:b0:da from 192.168.1.2 blacklisted (see ssh-vulnkey(1))
 

και το sshd_config ήταν αυτό:

>
 # Package generated configuration file
 # See the sshd(8) manpage for details

 # What ports, IPs and protocols we listen for
 Port 22
 # Use these options to restrict which interfaces/protocols sshd will bind to
 #ListenAddress ::
 #ListenAddress 0.0.0.0
 Protocol 2
 # HostKeys for protocol version 2
 HostKey /etc/ssh/ssh_host_rsa_key
 HostKey /etc/ssh/ssh_host_dsa_key
 #Privilege Separation is turned on for security
 UsePrivilegeSeparation yes

 # Lifetime and size of ephemeral version 1 server key
 KeyRegenerationInterval 3600
 ServerKeyBits 768

 # Logging
 SyslogFacility AUTH
 LogLevel INFO

 # Authentication:
 LoginGraceTime 600
 PermitRootLogin yes
 StrictModes yes

 RSAAuthentication yes
 PubkeyAuthentication yes
 AuthorizedKeysFile      %h/.ssh/authorized_keys

 # Don't read the user's ~/.rhosts and ~/.shosts files
 IgnoreRhosts yes
 # For this to work you will also need host keys in /etc/ssh_known_hosts
 RhostsRSAAuthentication no
 # similar for protocol version 2
 HostbasedAuthentication no
 # Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
 #IgnoreUserKnownHosts yes

 # To enable empty passwords, change to yes (NOT RECOMMENDED)
 PermitEmptyPasswords no

 # Change to no to disable s/key passwords
 ChallengeResponseAuthentication no

 # Change to yes to enable tunnelled clear text passwords
 PasswordAuthentication no


 # To change Kerberos options
 #KerberosAuthentication no
 #KerberosOrLocalPasswd yes
 #AFSTokenPassing no
 #KerberosTicketCleanup no

 # Kerberos TGT Passing does only work with the AFS kaserver
 #KerberosTgtPassing yes

 X11Forwarding no
 X11DisplayOffset 10
 PrintMotd no
 PrintLastLog yes
 TCPKeepAlive yes
 #UseLogin no

 #MaxStartups 10:30:60
 Banner /etc/issue.net

 Subsystem sftp /usr/lib/openssh/sftp-server

 UsePAM yes
 

Τώρα απενεργοποίησα το authentication με κλειδιά και το κάνω συνδέομαι με κωδικό χρήστη.

 

 

Από το man ssh-vulnkey :

 

DESCRIPTION

ssh-vulnkey checks a key against a blacklist of compromised keys.

 

A substantial number of keys are known to have been generated using a broken version of OpenSSL distributed by Debian which failed to seed its ran-

dom number generator correctly. Keys generated using these OpenSSL versions should be assumed to be compromised. This tool may be useful in check-

ing for such keys.

 

 

Μάλλον, αν κατάλαβα καλά, έχει να κάνει με το bug του debian σε σχέση με το ssh που και τη γεννήτρια τυχαίων αριθμών, που είχε εμφανιστεί παλιότερα. Μάλλον ο server μπλόκαρε τη σύνδεση του client μέχρι να τσεκαριστούν τα κλειδιά;

Θα φτιάξω καινούργια κλειδιά με το ssh-keygen και θα είμαι εντάξει πιστεύω.