Re: OpenSSH key based authorisation problem

[Rob Owens <rowens@ptd.net>]

On Wed, Jan 19, 2011 at 06:06:56AM +1000, Adrian Levi wrote:
> On 19 January 2011 02:37, Rob Owens <rowens@ptd.net> wrote:
> > Any time I've ever had trouble with key based authentication, it was
> > because of improper permissions on my .ssh folder.  It should be set:
> >
> > chmod 700 ~/.ssh
> >
> > I'd double-check that before going any further.
> 
> I checked that but didn't spot anything wrong with it compared to my
> .ssh folder.
> carolyn@jupiter:~$ ls -la .ssh/
> total 24
> drwx------ 2 carolyn carolyn 4096 Jan 19 06:06 .
> drwxr-xr-x 4 carolyn carolyn 4096 Jan 18 21:57 ..
> -rw------- 1 carolyn carolyn  397 Jan 19 06:07 authorized_keys
> -rw------- 1 carolyn carolyn 1679 Jan 18 21:26 id_rsa
> -rw-r--r-- 1 carolyn carolyn  397 Jan 18 21:26 id_rsa.pub
> -rw-r--r-- 1 carolyn carolyn  442 Jan 18 21:54 known_hosts
> carolyn@jupiter:~$
> 
> adrian@jupiter:~$ ls -la .ssh/
> total 24
> drwx------  2 adrian adrian 4096 Aug  6 09:29 .
> drwxr-xr-x 15 adrian adrian 4096 Jan 18 20:48 ..
> -rw-------  1 adrian adrian 1140 Aug 11 11:00 authorized_keys
> -rw-------  1 adrian adrian 3243 Aug 11 10:46 id_rsa
> -rw-r--r--  1 adrian adrian  739 Aug 11 10:46 id_rsa.pub
> -rw-r--r--  1 adrian adrian 2830 Jan 18 19:20 known_hosts
> adrian@jupiter:~$
> 
I was going to tell you that .ssh should not be world readable, but I
just tested it and it works fine like that.  (I guess that changed
sometime since I first set up ssh on my machine).

Can you post the authorized_keys file?  Remember that those are all
public keys in there, so it's not sensitive (unless it contains an email
address that you want to keep private).  I'm wondering if there is a 
problem with that file.

-Rob