[英]ssh agent forwarding not working on ec2
I'm trying to use ssh agent forwarding on my local machine so that I dont have to use my private key on remote server for git clone git@bitbucket.org:username/bucketname.git
我正在尝试在我的本地机器上使用 ssh 代理转发,这样我就不必在远程服务器上使用我的私钥进行
git clone git@bitbucket.org:username/bucketname.git
I have following setup on my machine:我的机器上有以下设置:
$cat ~/.ssh/config
Host bitbucket.org
IdentityFile ~/.ssh/id_rsa
Host 172.28.128.3
ForwardAgent yes
and have added my public key to bitbucket site并将我的公钥添加到 bitbucket 站点
when i run ssh -T git@bitbucket.org
it shows当我运行
ssh -T git@bitbucket.org
它显示
logged in as <username>.
You can use git or hg to connect to Bitbucket. Shell access is disabled.
means ssh protocol working right and I can clone any repo.意味着 ssh 协议正常工作,我可以克隆任何存储库。
But when I run on my remote machine/host ( mentioned in .ssh/config file with ip 172.28.128.3)但是当我在我的远程机器/主机上运行时(在 .ssh/config 文件中提到的 ip 为 172.28.128.3)
buntu@remoteMachine$ ssh -vT git@bitbucket.org
OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
debug1: Connecting to bitbucket.org [131.103.20.168] port 22.
debug1: Connection established.
debug1: identity file /home/ubuntu/.ssh/id_rsa type 1
debug1: identity file /home/ubuntu/.ssh/id_rsa-cert type -1
debug1: identity file /home/ubuntu/.ssh/id_dsa type -1
debug1: identity file /home/ubuntu/.ssh/id_dsa-cert type -1
debug1: identity file /home/ubuntu/.ssh/id_ecdsa type -1
debug1: identity file /home/ubuntu/.ssh/id_ecdsa-cert type -1
debug1: identity file /home/ubuntu/.ssh/id_ed25519 type -1
debug1: identity file /home/ubuntu/.ssh/id_ed25519-cert type -1
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2
debug1: Remote protocol version 2.0, remote software version OpenSSH_5.3
debug1: match: OpenSSH_5.3 pat OpenSSH_5* compat 0x0c000000
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-ctr hmac-md5 none
debug1: kex: client->server aes128-ctr hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<3072<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Server host key: RSA 97:8c:1b:f2:6f:14:6b:5c:3b:ec:aa:46:46:74:7c:40
debug1: Host 'bitbucket.org' is known and matches the RSA host key.
debug1: Found key in /home/ubuntu/.ssh/known_hosts:1
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Offering RSA public key: /home/ubuntu/.ssh/id_rsa
debug1: Authentications that can continue: publickey
debug1: Trying private key: /home/ubuntu/.ssh/id_dsa
debug1: Trying private key: /home/ubuntu/.ssh/id_ecdsa
debug1: Trying private key: /home/ubuntu/.ssh/id_ed25519
debug1: No more authentication methods to try.
Permission denied (publickey).
I am using ec2 instance as remote machine.我使用 ec2 实例作为远程机器。
please help me in resolving this issue.请帮我解决这个问题。
I would highly recommend this link to set up ssh forwarding agent Guide for SSH Agent Forwarding我强烈推荐这个链接来设置 ssh forwarding agent Guide for SSH Agent Forwarding
Try troubleshooting it like this:尝试像这样对其进行故障排除:
Check you have written correct Host IP in your local machine .ssh/config
检查您是否在本地机器
.ssh/config
写入了正确的主机 IP
On your local machine, run this command --> echo "$SSH_AUTH_SOCK"
在您的本地机器上,运行此命令 -->
echo "$SSH_AUTH_SOCK"
2.1. 2.1. If this gives empty response, then do this:
eval `ssh-agent -s` && ssh-add -k
如果这给出了空响应,则执行以下操作:
eval `ssh-agent -s` && ssh-add -k
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.