From owner-freebsd-questions@FreeBSD.ORG Thu Feb 2 01:00:04 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 08F9416A420 for ; Thu, 2 Feb 2006 01:00:04 +0000 (GMT) (envelope-from micahjon@ywave.com) Received: from relay2.av-mx.com (relay2.av-mx.com [137.118.16.124]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6D23E43D45 for ; Thu, 2 Feb 2006 01:00:03 +0000 (GMT) (envelope-from micahjon@ywave.com) X-Virus-Scan-Time: 0 Received: from [137.118.16.60] (HELO mx2.av-mx.com) by relay2.av-mx.com (CommuniGate Pro SMTP 4.2.10) with SMTP id 158590553 for freebsd-questions@freebsd.org; Wed, 01 Feb 2006 20:00:02 -0500 Received: (qmail 10808 invoked from network); 2 Feb 2006 01:00:02 -0000 Received: from d-128-208-213-34.dhcp4.washington.edu (HELO ?128.208.213.34?) (micahjon@ywave.com@128.208.213.34) by 0 with SMTP; 2 Feb 2006 01:00:02 -0000 X-CLIENT-IP: 128.208.213.34 X-CLIENT-HOST: d-128-208-213-34.dhcp4.washington.edu Message-ID: <43E15989.5050706@ywave.com> Date: Wed, 01 Feb 2006 16:59:53 -0800 From: Micah User-Agent: Thunderbird 1.5 (Windows/20051201) MIME-Version: 1.0 To: david bryce References: <1138676399.30955.253148220@webmail.messagingengine.com> <20060131094135.GA2042@flame.pc> <1138836616.370.253326484@webmail.messagingengine.com> <5ceb5d550602011604p45bf08dfx21e972f44736f879@mail.gmail.com> <1138840380.6221.253333657@webmail.messagingengine.com> In-Reply-To: <1138840380.6221.253333657@webmail.messagingengine.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permissions)) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Feb 2006 01:00:04 -0000 david bryce wrote: > On Thu, 2 Feb 2006 01:04:19 +0100, "Daniel A." said: >>> Thanks again for taking the time to reply. I have tried using SSH in >>> the past, and got stuck setting up the public key login (that's >>> why we're using pserver). >>> >>> I spent a few hours yesterday trying to get SSH going again. I can >>> login with SSH from the windows machine using Putty, but only when >>> I use password authentication. In order to use cvs with ssh (using >>> the plink program in Putty), we must use public key authentication. >>> >>> We are getting a 'Key Refused' error when trying to use public key >>> authentication. I have tried doing several things including editing >>> the /etc/ssh/sshd_config file: >> Try one or more of the following things: >> - Use puttygen to import your private key, and then export as .ppk >> - Load your key.ppk into pageant, and let it manage your private key(s) >> - Log in using your private key from the server (ie. login to the >> server with your password, and then from the shell ssh >> username@localhost). >> >> Please inform me of your results. > > Daniel, > > Thank you for taking the time to reply. > > We are currently using pageant to manage the private key. However, > the keys we are using are generated with puttygen (not from the > server). The public key was then copied to the authorized_keys > file on the server. Would you recommend generating the keys on > the server? Do you have an idea where are some instructions > about how to generate the keys on the server? Thanks! > > Regards, > > DB > Out of curiosity did you use "save public key" or copy and paste out of the "public key for pasting in openssh authorized_keys file" box? If I remember correctly, the "save public key" does not produce an openssh compatible public key. Doing the copy and paste routine should work. HTH, Micah