这是一个创建于 2988 天前的主题，其中的信息可能已经有所发展或是发生改变。
test:~ test$ ssh -i /Users/test/key [email protected]
Enter passphrase for key '/Users/test/key':
Permission denied (publickey).
test:~ test$
好奇怪，之前都好好的，这几天升级了 os ，然后所有的服务器免 key 登陆都这样了，看起来是我的 key 出了问题，之前用 key 登陆也不需要密码可以直接上，查了 key 的文件时间也是 1 月份当时的。
而且我试过了所有密码都无法使用这个 key ，想哭
Enter passphrase for key '/Users/test/key':
Permission denied (publickey).
test:~ test$
好奇怪，之前都好好的，这几天升级了 os ，然后所有的服务器免 key 登陆都这样了，看起来是我的 key 出了问题，之前用 key 登陆也不需要密码可以直接上，查了 key 的文件时间也是 1 月份当时的。
而且我试过了所有密码都无法使用这个 key ，想哭
第 1 条附言 · 2016-10-17 19:15:11 +08:00
把私钥丢到 windows 系统上， putty 上去了。
有点惊险。
有点惊险。
 |
1
anguslg 2016-10-15 23:36:33 +08:00
公钥权限改成 500
|
 |
2
shimanooo 2016-10-16 01:19:06 +08:00 via iPad
dsa 还是 rsa 的？ sierra 好像去掉了前者的支持。
ssh -vvv 看详情。 |
 |
3
fx 2016-10-16 01:27:27 +08:00
我也是这样
|
 |
5
loser OP @anguslg
test:~ test$ ssh -i /Users/test/key [email protected] Enter passphrase for key '/Users/test/key': Permission denied (publickey). test:~ test$ 依然如此。 |
|
6
shimanooo 2016-10-16 01:41:07 +08:00
打开公钥文件，看开头 ssh-dss 还是 ssh-rsa
|
|
8
loser OP @shimanooo
加密是： RSA PRIVATE KEY AES-128-CBC 还有 ssh -vvv 是啥？没这个参数，有 -V ssh -V OpenSSH_7.2p2, LibreSSL 2.4.1 |
 |
9
noli 2016-10-16 01:44:50 +08:00
先 ssh -v 看看是什么问题。
|
|
10
shimanooo 2016-10-16 01:46:21 +08:00  1
@loser
-v Verbose mode. Causes ssh to print debugging messages about its progress. This is helpful in debugging connection, authentica- tion, and configuration problems. Multiple -v options increase the verbosity. The maximum is 3. |
|
11
loser OP test:~ test$ ssh -i /Users/test/test -p 2222 -v [email protected]
OpenSSH_7.2p2, LibreSSL 2.4.1 debug1: Reading configuration data /etc/ssh/ssh_config debug1: /etc/ssh/ssh_config line 20: Applying options for * debug1: Connecting to 10.0.0.1 [10.0.0.1] port 2222. debug1: Connection established. debug1: identity file /Users/test/test type 1 debug1: key_load_public: No such file or directory debug1: identity file /Users/test/test-cert type -1 debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_7.2 debug1: Remote protocol version 2.0, remote software version OpenSSH_5.3 debug1: match: OpenSSH_5.3 pat OpenSSH_5* compat 0x0c000000 debug1: Authenticating to 10.0.0.1:2222 as 'root' debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug1: kex: algorithm: diffie-hellman-group-exchange-sha256 debug1: kex: host key algorithm: ssh-rsa debug1: kex: server->client cipher: aes128-ctr MAC: [email protected] compression: none debug1: kex: client->server cipher: aes128-ctr MAC: [email protected] compression: none debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(2048<3072<8192) sent debug1: got SSH2_MSG_KEX_DH_GEX_GROUP debug1: SSH2_MSG_KEX_DH_GEX_INIT sent debug1: got SSH2_MSG_KEX_DH_GEX_REPLY debug1: Server host key: ssh-rsa SHA256:bNuPwQRTJ6nM7QqHiU9DqrdaduA/MmgULzkjjW4UVeo debug1: checking without port identifier debug1: Host '10.0.0.1' is known and matches the RSA host key. debug1: Found key in /Users/test/.ssh/known_hosts:47 debug1: found matching key w/out port debug1: rekey after 4294967296 blocks debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug1: rekey after 4294967296 blocks debug1: SSH2_MSG_NEWKEYS received debug1: SSH2_MSG_SERVICE_ACCEPT received debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic debug1: Next authentication method: publickey debug1: Offering RSA public key: /Users/test/test debug1: Server accepts key: pkalg ssh-rsa blen 279 Enter passphrase for key '/Users/test/test': debug1: No more authentication methods to try. Permission denied (publickey,gssapi-keyex,gssapi-with-mic). 来了，各位大神 |
|
12
loser OP 如果真是 sierra 的问题，明天去公司用 windows 电脑拿这个 key 试试，不然就真的哭死了，一对服务器都是这个 key
|
|
13
noli 2016-10-16 02:33:23 +08:00
|
|
14
loser OP |
 |
15
RqPS6rhmP3Nyn3Tm 2016-10-16 06:12:05 +08:00
我也出问题了，最后手动修改了 /etc/ssh/ssh_config 解决
|
 |
16
tedd 2016-10-16 09:11:06 +08:00 via iPhone
顺便问问我如果要降级的话是不是把 ssh 文件夹拷贝出来，清盘降级后靠背回去就行呢？
|
 |
17
laoyur 2016-10-16 09:44:18 +08:00
看上去并不是这个 key 本身出问题，而是你原先保存在 keychain 中的这个 key 的 passphrase 无法获取了，提示你输入 passphrase 时你又不记得，往这个方向搜索一下答案
|
|
18
laoyur 2016-10-16 09:58:14 +08:00
忘记 passphrase 没关系，你可以到 keychain.app 中手动查出来，至于为何 10.12 有这样的问题，搜索一下发现类似问题很多： https://www.google.com/search?newwindow=1&c2coff=1&biw=1600&bih=694&q=macos+sierra+keychain+key+passphrase&oq=macos+sierra+keychain+key+passphr&gs_l=serp.1.0.30i10k1.45129093.45162196.0.45167642.39.38.0.0.0.0.739.6703.2-7j3j3j3j1.17.0....0...1c.1j4.64.serp..23.10.3902.0..0j0i12k1j0i10k1j0i10i19k1.jtJ22lHafMA
|
 |
19
shutongxinq 2016-10-16 23:38:00 +08:00
"That ’ s expected. We re-aligned our behavior with the mainstream OpenSSH in this area.
You can fix this pretty easily by running ssh-add -A in your rc script if you want your keys to always be loaded." Source: https://openradar.appspot.com/27348363 |
|
20
loser OP |
 |
22
zhang330700 2019-03-10 15:33:42 +08:00
我的情况是
修改 /etc/ssh/ssh_config 和 /etc/ssh/sshd_config 的配置 ，支持 dss 格式的秘钥， PubkeyAcceptedKeyTypes=+ssh-dss ForwardAgent yes |
Select Language