使用 RSA 密钥的 SSH - 权限被拒绝

Question

作为 USER1，我需要从 MACHINE_2 通过 SSH 访问 MACHINE_1，而无需提供密码。

我使用命令 C:\cygwin64\bin\ssh-keygen -t rsa 创建了一对 RSA 密钥（private_key、public_key）。

我已将两个文件 private_key 和 public_key 放在文件夹 C:\cygwin64\home\USER1\.ssh\machines_1_2\ 中。

在 MACHINE_1 上，我将 public_key 文件的内容复制到文件 D:\cygwin\home\USER1\.ssh\authorized_keys 中。

在 MACHINE_2 上，我创建了文件 C:\cygwin64\home\USER1\.ssh\config，其中添加了以下几行：

Host 192.168.77.45
  Port 22
  IdentityFile ~/.ssh/machines_1_2/private_key

当我尝试通过 SSH 进入 MACHINE_1，我收到“权限被拒绝”消息（请参阅下面的输出）。

USER1@MACHINE_2$ ssh -v 192.168.77.45
OpenSSH_8.9p1, OpenSSL 1.1.1m  14 Dec 2021
debug1: Reading configuration data /etc/ssh_config
debug1: Connecting to 192.168.77.45 [192.168.77.45] port 22.
debug1: Connection established.
debug1: identity file /cygdrive/c/Users/USER1/.ssh/id_rsa type -1
debug1: identity file /cygdrive/c/Users/USER1/.ssh/id_rsa-cert type -1
debug1: identity file /cygdrive/c/Users/USER1/.ssh/id_ecdsa type -1
debug1: identity file /cygdrive/c/Users/USER1/.ssh/id_ecdsa-cert type -1
debug1: identity file /cygdrive/c/Users/USER1/.ssh/id_ecdsa_sk type -1
debug1: identity file /cygdrive/c/Users/USER1/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /cygdrive/c/Users/USER1/.ssh/id_ed25519 type -1
debug1: identity file /cygdrive/c/Users/USER1/.ssh/id_ed25519-cert type -1
debug1: identity file /cygdrive/c/Users/USER1/.ssh/id_ed25519_sk type -1
debug1: identity file /cygdrive/c/Users/USER1/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /cygdrive/c/Users/USER1/.ssh/id_xmss type -1
debug1: identity file /cygdrive/c/Users/USER1/.ssh/id_xmss-cert type -1
debug1: identity file /cygdrive/c/Users/USER1/.ssh/id_dsa type -1
debug1: identity file /cygdrive/c/Users/USER1/.ssh/id_dsa-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_8.9
debug1: Remote protocol version 2.0, remote software version OpenSSH_6.7
debug1: compat_banner: match: OpenSSH_6.7 pat OpenSSH* compat 0x04000000
debug1: Authenticating to 192.168.77.45:22 as 'MACHINE_1+USER1'
debug1: load_hostkeys: fopen /cygdrive/c/Users/USER1/.ssh/known_hosts2: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh_known_hosts: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh_known_hosts2: No such file or directory
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: algorithm: [email protected]
debug1: kex: host key algorithm: ecdsa-sha2-nistp256
debug1: kex: server->client cipher: [email protected] MAC: <implicit> compression: none
debug1: kex: client->server cipher: [email protected] MAC: <implicit> compression: none
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: SSH2_MSG_KEX_ECDH_REPLY received
debug1: Server host key: ecdsa-sha2-nistp256 SHA256:qSH/p+CitL49lw4RPcwmVd8P+e02Ot1yjTSagmyiZhA
debug1: load_hostkeys: fopen /cygdrive/c/Users/USER1/.ssh/known_hosts2: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh_known_hosts: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh_known_hosts2: No such file or directory
debug1: Host '192.168.77.45' is known and matches the ECDSA host key.
debug1: Found key in /cygdrive/c/Users/USER1/.ssh/known_hosts:1
debug1: rekey out after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: rekey in after 134217728 blocks
debug1: Will attempt key: /cygdrive/c/Users/USER1/.ssh/id_rsa
debug1: Will attempt key: /cygdrive/c/Users/USER1/.ssh/id_ecdsa
debug1: Will attempt key: /cygdrive/c/Users/USER1/.ssh/id_ecdsa_sk
debug1: Will attempt key: /cygdrive/c/Users/USER1/.ssh/id_ed25519
debug1: Will attempt key: /cygdrive/c/Users/USER1/.ssh/id_ed25519_sk
debug1: Will attempt key: /cygdrive/c/Users/USER1/.ssh/id_xmss
debug1: Will attempt key: /cygdrive/c/Users/USER1/.ssh/id_dsa
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: /cygdrive/c/Users/USER1/.ssh/id_rsa
debug1: Trying private key: /cygdrive/c/Users/USER1/.ssh/id_ecdsa
debug1: Trying private key: /cygdrive/c/Users/USER1/.ssh/id_ecdsa_sk
debug1: Trying private key: /cygdrive/c/Users/USER1/.ssh/id_ed25519
debug1: Trying private key: /cygdrive/c/Users/USER1/.ssh/id_ed25519_sk
debug1: Trying private key: /cygdrive/c/Users/USER1/.ssh/id_xmss
debug1: Trying private key: /cygdrive/c/Users/USER1/.ssh/id_dsa
debug1: Next authentication method: keyboard-interactive
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: No more authentication methods to try.
[email protected]: Permission denied (publickey,keyboard-interactive).

我想知道这两个“.ssh”目录之间是否没有混淆： C:\cygwin64\home\USER1\.ssh\ 和 C:\Users\USER1\.ssh\ 就我个人而言，我通常总是处理 C:\cygwin64\home\USER1\.ssh\ 目录...而不是另一个。

此外，MACHINE_1 和 MACHINE_2 是两台安装了“Cygwin”的“Windows”计算机。 在 MACHINE_1 上，cygwin 版本为 3.3.4。 在 MACHINE_2 上，cygwin 版本为 1.7.33。

你能帮我调查一下出了什么问题吗？

============ 编辑 1 ================

我安装了新的 Cygwin（v. 3.3.4）在 MACHINE_2 上。

我仍然有同样的问题。

=============编辑2================

它看起来像config文件未被读取。

============编辑3================

我把config文件以及 C:\Users\USER1\.ssh\ 目录中的 machines_1_2 目录，而不是 C:\cygwin64\home\USER1\.ssh\< /代码> 目录。

它允许我通过 SSH 访问 MACHINE_1，而无需输入密码。

直到今天，我一直使用 C:\cygwin64\home\USER1\.ssh\ 目录...

据我所知：

$ set | grep HOME
HOME=/cygdrive/c/Users/USER1

/etc/passwd 和 /etc/group 自 1.7.34 版本起不再自动生成。 在我较旧的 Cygwin 配置（版本 1.7.33）中，用户的主目录设置为 /home/USER1 即 C:\cygwin64\home\USER1

我想开发人员有充分的理由做出这样的改变，但对于像我这样的人来说，解决问题需要宝贵的时间和精力，但这并不会让我的工作变得更有趣或有趣。这让我觉得自己很愚蠢。我的两分钱。

Answer 1

最新版本的 openssh 默认删除了 rsa 支持，因此您应该在 ssh 配置中启用它：

$ cat ~/.ssh/config
    Host *
         HostkeyAlgorithms +ssh-rsa
         PubkeyAcceptedKeyTypes +ssh-rsa