无法通过ubuntu中的配置文件将ssh连接到ec2。 权限被拒绝（公钥，gssapi-keyex，gssapi-with-mic）

Question

无法通过Ubuntu连接到SSH。 但它在MAC上工作正常。

我的配置文件

Host testserver
User ubuntu
IdentityFile '/home/kavin/.ssh/AnotherKey.pem' 
HostName ec2-54-201-xxx-xxx.us-west-2.compute.amazonaws.com

通过SSH连接

$ ssh testserver

这与我为Mac和Ubuntu所做的一样。 它可以在Mac上完美运行，但是在Ubuntu中会引发错误， Permission denied (publickey,gssapi-keyex,gssapi-with-mic).

现在我尝试了另一种方式ssh -i '/home/kavin/.ssh/AnotherKey.pem' ec2-user@54.201.xxx.xxx

在Mac和Ubuntu上都可以正常工作。

你能告诉我我哪里出问题了吗

这些是$ ssh testserver -v的日志

OpenSSH_6.1p1 Debian-4, OpenSSL 1.0.1c 10 May 2012
debug1: Reading configuration data /home/kavin/.ssh/config
debug1: /home/kavin/.ssh/config line 1: Applying options for testserver
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
debug1: Connecting to ec2-54-200-26-1.us-west-2.compute.amazonaws.com [54.200.26.1] port 22.
debug1: Connection established.
debug1: identity file '/home/kavin/.ssh/AnotherKey.pem' type -1
debug1: identity file '/home/kavin/.ssh/AnotherKey.pem'-cert type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_5.9p1 Debian-5ubuntu1.1
debug1: match: OpenSSH_5.9p1 Debian-5ubuntu1.1 pat OpenSSH_5*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_6.1p1 Debian-4
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-ctr hmac-md5 none
debug1: kex: client->server aes128-ctr hmac-md5 none
debug1: sending SSH2_MSG_KEX_ECDH_INIT
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: Server host key: ECDSA 90:e1:d7:01:ab:cf:eb:2c:4b:8f:b2:5e:ad:05:a5:b8
debug1: Host 'ec2-54-200-26-1.us-west-2.compute.amazonaws.com' is known and matches the ECDSA host key.
debug1: Found key in /home/kavin/.ssh/known_hosts:10
debug1: ssh_ecdsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Trying private key: '/home/kavin/.ssh/AnotherKey.pem'
debug1: No more authentication methods to try.

Answer 1

正如你所说，

ssh -i '/home/kavin/.ssh/AnotherKey.pem' ec2-user@54.201.xxx.xxx

来自ubuntu m / c的工作原理和ssh testserver失败。 我建议从配置文件中注释其他行，然后继续

IdentityFile /home/kavin/.ssh/AnotherKey.pem 

确保删除引号，并且路径应直接可用于键。

Answer 2

转到终端：

1. gksu nautilus（输入您的root密码）
2. 浏览到/ etc / ssh /
3. 将您的“密钥”复制到/ etc / ssh /
4. 打开ssh_config

5. 复制粘贴：

   主机测试服务器

   主机名ec2-54-201-xxx-xxx.us-west-2.compute.amazonaws.com

   用户ubuntu

   IdentityFile /etc/ssh/AnotherKey.pem

6. 保存-退出

7. 打开新终端

8. 须藤-i

9. 输入密码

10. cd / etc / ssh

11. chmod 400'您的钥匙'

12. SSH测试服务器

-确保您的22端口是开放的

https://askubuntu.com/questions/410218/how-to-close-an-open-port-in-ubuntu-12-04