[CentOS] ssh prompting for password

Tue Nov 16 21:09:44 UTC 2010
John Kennedy <skebi69 at gmail.com>

A few things to look for:

Make sure .ssh and authorized_keys files are permissioned to 700 and 600
respectively. If they are wide open then ssh will skip them.
Check /var/log/secure on both machines. That may give you a clue
ssh with -vvv (or just -v) and see if you get errors.

I just had the same thing and my problem was .ssh permissions.

Hope this helps.
John


On Tue, Nov 16, 2010 at 16:05, bluethundr <bluethundr at gmail.com> wrote:

> hello list
>
> I have a network mounted home directory shared between all hosts on my
> network:
>
> [bluethundr at LCENT03:~]#df -h
> Filesystem            Size  Used Avail Use% Mounted on
> /dev/mapper/VolGroup00-LogVol00
>                      140G  4.4G  128G   4% /
> /dev/sda1              99M   35M   60M  37% /boot
> tmpfs                 1.6G     0  1.6G   0% /dev/shm
> nas.summitnjhome.com:/mnt/nas
>                      903G  265G  566G  32% /mnt/nas
> nas2.summitnjhome.com:/mnt/store
>                      1.4T  187G  1.1T  15% /mnt/store
> nas2.summitnjhome.com:/mnt/home
>                      903G   47G  784G   6% /home
> none                  1.6G  136K  1.6G   1% /var/lib/xenstored
>
> So therefore my RSA key should already be in my authorized_keys on any
> host. However logging into the virtual network, I always get prompted
> for a password. just for the heck of it, I scp'd the key over again to
> one of the virtual hosts:
>
>
> [bluethundr at LCENT03:~]#scp .ssh/id_rsa.pub virt1:~
> bluethundr at virt1's password:
> id_rsa.pub
>               100%  381     0.4KB/s   00:00
>
> ssh'd in:
>
> [bluethundr at LCENT03:~]#ssh virt1
> bluethundr at virt1's password:
> Last login: Tue Nov 16 15:57:24 2010 from 192.168.1.46
>
> Searched for the key on the host I just ssh'd into:
>
>
> [bluethundr at VIRTCENT01:~]#grep -f id_rsa.pub .ssh/authorized_keys
> ssh-rsa AAAAB3NzaC1yc2EAAAABI-FAKE-DATA-dgjIWxnyplIYKE5IQw9FY2+IVsYw==
>
> As you can see, it's already there.. I then checked the modes on
> authorized_keys:
>
> [bluethundr at VIRTCENT01:~]#ls -l .ssh/authorized_keys
> -rw------- 1 1001 1002 1597 Nov 15 12:02 .ssh/authorized_keys
>
> And checked that I was using the same shared network mounted home
> directory from the machine I just ssh'd in from:
>
>
> [bluethundr at VIRTCENT01:~]#df -h
> Filesystem            Size  Used Avail Use% Mounted on
> /dev/mapper/VolGroup00-LogVol00
>                      9.1G  1.8G  6.9G  21% /
> /dev/xvda1             99M   20M   75M  21% /boot
> tmpfs                 129M     0  129M   0% /dev/shm
> nas.summitnjhome.com:/mnt/nas
>                      903G  265G  566G  32% /mnt/nas
> nas2.summitnjhome.com:/mnt/store
>                      1.4T  187G  1.1T  15% /mnt/store
> nas2.summitnjhome.com:/mnt/home
>                      903G   47G  784G   6% /home
> [bluethundr at VIRTCENT01:~]#
>
>
> Considering that this key is internal network only and doesn't have a
> passphrase set (it does not traverse internet boundaries) why on earth
> am I being prompted for a password whenever I ssh into this machine?
>
> thanks!
> --
> Here's my RSA Public key:
> gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9
>
> Share and enjoy!!
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>



-- 
 John Kennedy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.centos.org/pipermail/centos/attachments/20101116/6e47f336/attachment-0004.html>