如何解决使用私钥进行ssh身份验证的问题
我有一个脚本，可以通过ssh运行远程脚本。我有远程主机的rsa私钥，并且在ssh命令中使用它，如下所示：
ssh -v -o IdentitiesOnly=yes remoteuser@10.18.66.24 -fN -i config/id_rsa_24 automation_fw/config/testscript.sh
其中id_rsa_24是远程用户在10.18.66.24上的私钥
以下是详细日志记录的输出：
OpenSSH_7.9p1,LibreSSL 2.7.3
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 48: Applying options for *
debug1: Connecting to 10.18.66.24 [10.18.66.24] port 22.
debug1: Connection established.
debug1: identity file config/id_gitlabuser_24 type -1
debug1: identity file config/id_gitlabuser_24-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_7.9
debug1: Remote protocol version 2.0,remote software version OpenSSH_8.1
debug1: match: OpenSSH_8.1 pat OpenSSH* compat 0x04000000
debug1: Authenticating to 10.18.66.24:22 as 'gitlabuser'
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: algorithm: curve25519-sha256
debug1: kex: host key algorithm: ecdsa-sha2-nistp256
debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: Server host key: ecdsa-sha2-nistp256 SHA256:/Q0kjK8pxCjKKHZBwnyUeTKYoZwXw7qZzzhIwZtsiYA
debug1: Host '10.18.66.24' is known and matches the ECDSA host key.
debug1: Found key in /Users/gitlabuser/.ssh/known_hosts:6
debug1: rekey after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: rekey after 134217728 blocks
debug1: Will attempt key: config/id_gitlabuser_24 explicit
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519,ssh-rsa,rsa-sha2-256,rsa-sha2-512,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521>
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: config/id_gitlabuser_24
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: Next authentication method: keyboard-interactive
debug1: read_passphrase: can't open /dev/tty: Device not configured
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: read_passphrase: can't open /dev/tty: Device not configured
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: Next authentication method: password
debug1: read_passphrase: can't open /dev/tty: Device not configured
debug1: Authentications that can continue: publickey,keyboard-interactive
Permission denied,please try again.
debug1: read_passphrase: can't open /dev/tty: Device not configured
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: No more authentication methods to try.
gitlabuser@10.18.66.24: Permission denied (publickey,keyboard-interactive).
All identities removed.
Identity added: config/id_gitlabuser_99 (gitlabuser@bbt-grid-01.local)
About to run ssh
OpenSSH_7.9p1,LibreSSL 2.7.3
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 48: Applying options for *
debug1: Connecting to 10.18.66.99 [10.18.66.99] port 22.
debug1: Connection established.
debug1: identity file config/id_gitlabuser_99 type -1
debug1: identity file config/id_gitlabuser_99-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_7.9
debug1: Remote protocol version 2.0,remote software version OpenSSH_7.9
debug1: match: OpenSSH_7.9 pat OpenSSH* compat 0x04000000
debug1: Authenticating to 10.18.66.99:22 as 'gitlabuser'
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: algorithm: curve25519-sha256
debug1: kex: host key algorithm: ecdsa-sha2-nistp256
debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: Server host key: ecdsa-sha2-nistp256 SHA256:q4KvznBQoEXaksU7QJMRhwexrp/Iz40RZjxP7A5gwuY
debug1: Host '10.18.66.99' is known and matches the ECDSA host key.
debug1: Found key in /Users/gitlabuser/.ssh/known_hosts:7
debug1: rekey after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: rekey after 134217728 blocks
debug1: Will attempt key: config/id_gitlabuser_99 explicit
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: config/id_gitlabuser_99
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: No more authentication methods to try.
gitlabuser@10.18.66.99: Permission denied (publickey,keyboard-interactive).
跟踪的这一部分是否不表示密钥验证成功？
debug1: Will attempt key: config/id_gitlabuser_24 explicit
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519,ecdsa-sha2-nistp521>
debug1: SSH2_MSG_SERVICE_ACCEPT received
为什么继续尝试其他身份验证方法？
版权声明：本文内容由互联网用户自发贡献，该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务，不拥有所有权，不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容， 请发送邮件至 dio@foxmail.com 举报，一经查实，本站将立刻删除。