X-Recipient: archive-cygwin AT delorie DOT com X-SWARE-Spam-Status: No, hits=-5.9 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,KHOP_RCVD_TRUST,KHOP_THREADED,RCVD_IN_DNSWL_LOW,RCVD_IN_HOSTKARMA_YE X-Spam-Check-By: sourceware.org Message-ID: <4F7D2BBA.1080004@gmail.com> Date: Thu, 05 Apr 2012 15:20:58 +1000 From: Rurik Christiansen User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:10.0.1) Gecko/20120208 Thunderbird/10.0.1 MIME-Version: 1.0 To: cygwin AT cygwin DOT com Subject: Re: sshd not doing key based authentication References: <4F7C0884 DOT 2080006 AT gmail DOT com> <74924010 DOT 20120404152639 AT mtu-net DOT ru> <20120404133001 DOT GA8876 AT pris DOT crapsteak DOT org> In-Reply-To: <20120404133001.GA8876@pris.crapsteak.org> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-IsSubscribed: yes Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com David and Andrew thanks for your replies. Yes I didn't provide enough details, David you are right. But ... I was hoping more for some pointers to what the permissions must be and then do the troubleshooting myself. The "unix" side of permissions look ok. I don't know what the windows side must be or if it matters. The "ssh -vvv' (client side) has not been particularly helpful to me when it comes to permissions. and my understanding is that I can't run the sshd frontend without screwing the permissions. (the client sends the publickey packet and then jumps to next auth method) Cheers. On 4/04/2012 23:30, David Sastre Medina wrote: > On Wed, Apr 04, 2012 at 03:26:39PM +0400, Andrey Repin wrote: >> Greetings, Rurik Christiansen! >>> I'm trying to make sshd to do key based authentication. >>> I am guessing that is probably a problem of permissions but can't figure >>> it out. >>> All I found was this email: >>> http://cygwin.com/ml/cygwin/2008-11/msg00212.html >>> which basically says RTFM >>> Well, I did RTFM, I followed the instructions. all looks OK as far as I >>> can see but still no go. >> Read logs on both sides, of course. >> The most common issue is access rights on key files. > Check for PubkeyAuthentication, StrictModes, AllowUsers, AllowGroups, > AuthorizedKeysFile in the server side (whether they exist and how they are > defined), read the manpage for detailed info on this options > (sshd_config(5)). > Try setting LogLevel to DEBUG. > Provide a 'ssh -vvv user AT host' test connection. > You don't give enough info to figure out what the problem might be. > -- Nihil verus. Omnia possibilis. -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple