linux – 无法SSH到Amazon EC2

这是我的第一个亚马逊EC2实例,但我很难,谷歌无法帮助我.这些是我采取的步骤：

>生成一个名为aws的密钥对
>下载aws.pem并输入我的/ Users / Jim / Documents / sshkeys文件夹
> CHmod文件和文件夹都是700
>从官方Amazon Debian 6 AMI创建实例
>验证安全设置包括端口22上的SSH(TCIP 22(SSH)0.0.0.0/0)
>运行此命令：

ssh -v -i /Users/James/Documents/sshkeys/aws.pem root@myec2ip

这是我收到的消息：

• OpenSSH_5.9p1,OpenSSL 0.9.8r 8 Feb 2011
• debug1: Reading configuration data /etc/ssh_config
• debug1: /etc/ssh_config line 20: Applying options for *
• debug1: Connecting to myec2ip port 22.
• debug1: Connection established.
• debug1:identity file /Users/James/Documents/sshkeys/aws.pem type -1
• debug1: identity file /Users/James/Documents/sshkeys/aws.pem-cert type -1
• debug1:Remote protocol version 2.0,remote software version OpenSSH_5.5p1 Debian-6+squeeze3
• debug1: match: OpenSSH_5.5p1 Debian-6+squeeze3 pat OpenSSH* debug1: Enabling compatibility mode for protocol 2.0
• debug1:Local version string SSH-2.0-OpenSSH_5.9
• debug1: SSH2_MSG_KEXINIT sent
• debug1: SSH2_MSG_KEXINIT received
• debug1: kex: server->client aes128-ctr hmac-md5 none
• debug1: kex: client->server aes128-ctr hmac-md5 none
• debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
• debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
• debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
• debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
• debug1: Server host key: RSA ef:06:a0:a3:26:9f:c5:e7:c0:a6:0d:9a:1a:24:27:ef
• debug1: Host ‘myec2ip’ is known and matches the RSA host key.
• debug1: Found key in /Users/James/.ssh/known_hosts:6
• debug1:ssh_rsa_verify: signature correct
• debug1: SSH2_MSG_NEWKEYS sent
• debug1: expecting SSH2_MSG_NEWKEYS
• debug1: SSH2_MSG_NEWKEYS received
• debug1: Roaming not allowed by server
• debug1: SSH2_MSG_SERVICE_REQUEST sent
• debug1: SSH2_MSG_SERVICE_ACCEPT received
• debug1: Authentications that can continue: publickey
• debug1: Next authentication method:publickey
• debug1: Trying private key: /Users/James/Documents/sshkeys/aws.pem
• debug1: read PEM private key done: type RSA
• debug1: Authentications that can continue: publickey debug1: No more authentication methods to try. Permission denied (publickey).

我尝试了一些不同的东西,任何人都可以帮我解决我出错的地方吗？

解决方法

很可能你在/ etc / ssh / sshd_config中有这个：

PermitRootLogin no

然而,这是一件好事.如果要执行特权操作,则应该使用sudo或至少使用sudo -s启动root shell.

在服务器上的/var/log/auth.log中登录失败可能是有原因的.看起来你没有将公钥放在服务器上的/root/.ssh/authorized_keys中,这是root用户需要登录的地方.

在fine print here中埋藏的是默认用户是admin的titbit,而不是Debian AMI中的root.这就是亚马逊将公钥与您下载的私钥相匹配的地方.用这个：

ssh -i /Users/James/Documents/sshkeys/aws.pem admin@myec2ip

默认用户是Amazon AMI中的ec2-user和Ubuntu AMI中的ubuntu.我不知道其他任何人.