On Sun, 18 Jun 2023 17:26:13 -0400
rich pieri wrote:

> On Sun, 18 Jun 2023 16:57:30 -0400
> dan moylan <[email protected]> wrote:

>> moylan ~[1140] ll -d .ssh
>> drwx------. 1 moylan moylan 104 230618:1645 .ssh/
>> moylan ~[1141] ll .ssh
>> total 16K
>> -rw-------. 1 moylan moylan  553 230612:1636 authorized_keys
>> -rw-------. 1 moylan moylan 1.3K 230615:1316 known_hosts
>> -rw-------. 1 moylan moylan 1.7K 230612:1636 rsync.key
>> -rw-------. 1 moylan moylan  534 230612:1636 rsync.key.pub

> Are these on aldeberan? Because it's the target machine that matters.
> Directories from .ssh all the way up to / need to be no more permissive
> than 755 with .ssh being 700.

yes -- as well.

moylan ~[550] ll -d /home
drwxr-xr-x. 1 root root 12 230517:1215 /home/
moylan ~[551] ll /home
total 0
drwxr-xr-x. 1 moylan moylan 554 230618:1745 moylan/

same on aldeberan

> If that isn't it then you will need to trace through the security logs
> on aldeberan to find out why sshd doesn't like your keys.

on aldeberan:
moylan log[1044] journalctl -u sshd > ~/0log
moylan log[1045] vi ~/0log

444 Jun 18 16:46:38 aldeberan sshd[2157972]: Connection closed by 
authenticating user     moylan 192.168.50.194 port 36282 [preauth]
445 Jun 18 16:55:39 aldeberan sshd[2159119]: Accepted publickey for moylan from 
192.1    68.50.194 port 53566 ssh2: RSA 
SHA256:ErFipGrA+8T7q2Ud6hGzitnMd8icxlL3Aibu6LniAQ0
446 Jun 18 16:55:39 aldeberan sshd[2159119]: pam_unix(sshd:session): session 
opened f    or user moylan(uid=1000) by (uid=0)
447 Jun 18 17:49:04 aldeberan sshd[2165817]: Accepted publickey for moylan from 
192.1    68.50.194 port 57704 ssh2: RSA 
SHA256:ErFipGrA+8T7q2Ud6hGzitnMd8icxlL3Aibu6LniAQ0
448 Jun 18 17:49:04 aldeberan sshd[2165817]: pam_unix(sshd:session): session 
opened f    or user moylan(uid=1000) by (uid=0)

something's going on but i don't understand.

ole dan

j. daniel moylan
84 harvard ave
brookline, ma 02446-6202
617-777-0207 (cel)
[email protected]
www.moylan.us
[BLM]
_______________________________________________
Discuss mailing list
[email protected]
http://lists.blu.org/mailman/listinfo/discuss

Reply via email to