我已经configuration了Ubuntu 10.04LTS桌面安装,只允许公钥authentication。
结果:公钥authentication工作完美!
问题:问题是,尽pipe被configuration为只接受公钥authentication,客户端仍然接受密码authentication – 为什么?
当然可以使用一些build议,因为我已经看到并遵循这里的build议: ssh:设置密钥后仍然可以使用密码
遵循这些build议后没有成功:
客户端的/ etc / ssh / ssh_config显示如下:
# This is the ssh client system-wide configuration file. See # ssh_config(5) for more information. This file provides defaults for # users, and the values can be changed in per-user configuration files # or on the command line. # Configuration data is parsed as follows: # 1. command line options # 2. user-specific file # 3. system-wide file # Any configuration value is only changed the first time it is set. # Thus, host-specific definitions should be at the beginning of the # configuration file, and defaults at the end. # Site-wide defaults for some commonly used options. For a comprehensive # list of available options, their meanings and defaults, please see the # ssh_config(5) man page. Host * # ForwardAgent no # ForwardX11 no # ForwardX11Trusted yes # RhostsRSAAuthentication no RSAAuthentication yes PasswordAuthentication no PermitRootLogin no PubKeyAuthentication yes ChallengeResponseAuthentication no # HostbasedAuthentication no # GSSAPIAuthentication no # GSSAPIDelegateCredentials no # GSSAPIKeyExchange no # GSSAPITrustDNS no # BatchMode no # CheckHostIP yes # AddressFamily any # ConnectTimeout 0 # StrictHostKeyChecking ask # IdentityFile ~/.ssh/identity # IdentityFile ~/.ssh/id_rsa # IdentityFile ~/.ssh/id_dsa # Port 22 # Protocol 2,1 # Cipher 3des # Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-c bc,3des-cbc # MACs hmac-md5,hmac-sha1,[email protected],hmac-ripemd160 # EscapeChar ~ # Tunnel no # TunnelDevice any:any # PermitLocalCommand no # VisualHostKey no SendEnv LANG LC_* HashKnownHosts yes GSSAPIAuthentication yes GSSAPIDelegateCredentials no
我错过了另一个select? 也许匹配(虽然这似乎不太可能对我有帮助)?
谢谢。
/etc/ssh/ssh_config是针对客户端的 。 您希望在服务器configuration文件(即/etc/ssh/sshd_config上设置这些选项。
我知道这个问题真的很老,而且已经回答了,但是自从我遇到这个问题以来,这是谷歌的头号search结果,我想我会把这些信息放在这里。
出于某种原因,我改变了
PasswordAuthentication yes
至
PasswordAuthentication no
在我的sshd_config文件中,它仍然要求input密码。
我在这里查了一切,而且我也跑了
sudo /etc/init.d/ssh restart #or sshd
configuration文件的变化只是没有什么区别,所以我终于试着重新启动机器,并且工作。 我想/etc/init.d/ssh重新启动不工作的原因? 无论如何,我希望这有助于某人。
尝试将PreferredAuthentications设置为publickey。