Re: [CentOS] Q: respecting .ssh/id_rsa

2015-05-11 Thread Conley, Matthew M CTR GXM
list Subject: Re: [CentOS] Q: respecting .ssh/id_rsa On 8 May 2015 20:41, "Conley, Matthew M CTR GXM" < matthew.m.conley1@navy.mil> wrote: > > chmod 0700 .ssh > chmod 0600 .ssh/* > > Keys can fail if you don't have that setup correctly. > Also do: > gre

Re: [CentOS] Q: respecting .ssh/id_rsa

2015-05-09 Thread James B. Byrne
On Fri, May 8, 2015 13:23, m.r...@5-cent.us wrote: > Devin Reade wrote: >> --On Friday, May 08, 2015 09:58:32 AM -0400 "James B. Byrne" >> wrote: >> >>> While attempting to debug something else I ran across this: >>> >>> ssh -vvv somehost >>> . . . >>> debug1: Connection established. >>> debug1:

Re: [CentOS] Q: respecting .ssh/id_rsa

2015-05-08 Thread James Hogarth
On 8 May 2015 20:41, "Conley, Matthew M CTR GXM" < matthew.m.conley1@navy.mil> wrote: > > chmod 0700 .ssh > chmod 0600 .ssh/* > > Keys can fail if you don't have that setup correctly. > Also do: > grep sshd /var/log/audit/audit.log| audit2allow -m sshd > # Will let you see what modules it will

Re: [CentOS] Q: respecting .ssh/id_rsa

2015-05-08 Thread Conley, Matthew M CTR GXM
e----- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Devin Reade Sent: Friday, May 08, 2015 1:57 PM To: CentOS mailing list Subject: Re: [CentOS] Q: respecting .ssh/id_rsa --On Friday, May 08, 2015 01:23:57 PM -0400 m.r...@5-cent.us wrote: > I would *str

Re: [CentOS] Q: respecting .ssh/id_rsa

2015-05-08 Thread Conley, Matthew M CTR GXM
/ IA AECOM Linux+, Security+, Network+, LPIC1, EMT, FF1 -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Kirk Bocek Sent: Friday, May 08, 2015 11:28 AM To: CentOS mailing list Subject: Re: [CentOS] Q: respecting .ssh/id_rsa On 5/8/2015

Re: [CentOS] Q: respecting .ssh/id_rsa

2015-05-08 Thread Devin Reade
--On Friday, May 08, 2015 01:23:57 PM -0400 m.r...@5-cent.us wrote: I would *strongly* recommend editing your /etc/ssh/sshd_config, and comment or delete the fallback, and replace it, like: # Protocol 2,1 Protocol 2 That way, it won't even try. While forcing protocol 2 on the server is not a

Re: [CentOS] Q: respecting .ssh/id_rsa

2015-05-08 Thread m . roth
Devin Reade wrote: > --On Friday, May 08, 2015 09:58:32 AM -0400 "James B. Byrne" > wrote: > >> While attempting to debug something else I ran across this: >> >> ssh -vvv somehost >> . . . >> debug1: Connection established. >> debug1: permanently_set_uid: 0/0 >> debug1: identity file /root/.ssh/id

Re: [CentOS] Q: respecting .ssh/id_rsa

2015-05-08 Thread Devin Reade
--On Friday, May 08, 2015 09:58:32 AM -0400 "James B. Byrne" wrote: While attempting to debug something else I ran across this: ssh -vvv somehost . . . debug1: Connection established. debug1: permanently_set_uid: 0/0 debug1: identity file /root/.ssh/identity type -1 debug1: identity file /roo

Re: [CentOS] Q: respecting .ssh/id_rsa

2015-05-08 Thread Kirk Bocek
On 5/8/2015 7:22 AM, Valeri Galtsev wrote: On Fri, May 8, 2015 8:58 am, James B. Byrne wrote: While attempting to debug something else I ran across this: ssh -vvv somehost . . . debug1: Connection established. debug1: permanently_set_uid: 0/0 debug1: identity file /root/.ssh/identity type -1

Re: [CentOS] Q: respecting .ssh/id_rsa

2015-05-08 Thread Valeri Galtsev
On Fri, May 8, 2015 8:58 am, James B. Byrne wrote: > While attempting to debug something else I ran across this: > > ssh -vvv somehost > . . . > debug1: Connection established. > debug1: permanently_set_uid: 0/0 > debug1: identity file /root/.ssh/identity type -1 > debug1: identity file /root/.ssh