User avatar
witch_t *navi @navi@social.vlhl.dev
1y
also my laptop key is on authorized keys but my desktop always asks for a password

??
2
0
0
0
User avatar
mia (developer mode) @mia@shrimptest.0x0.st
1y
@navi does the .ssh directory and the authorized_keys file have correct user permissions? owned by you, 0700/0600?
1
0
0
0
User avatar
mia (developer mode) @mia@shrimptest.0x0.st
1y
@navi (openssh won’t use it if it’s accessible by anyone else)
1
0
0
0
User avatar
witch_t *navi @navi@social.vlhl.dev
1y
@mia .ssh is o700 (drwx------) navi:navi, all files inside are o600 (-rw-------)
1
0
0
0
User avatar
mia (developer mode) @mia@shrimptest.0x0.st
1y
@navi also check that your home directory and any path further up in hierarchy does not allow write access for group/other
1
0
0
0
User avatar
witch_t *navi @navi@social.vlhl.dev
1y
@mia that was it, it was 774 (i changed it a whiile ago while playing around with acls)

a warning would've been nice, ssh
1
0
0
0
User avatar
pathetic piss kitten @kitten@elizabeth.cat
1y
@navi @mia doesn't it warn in the host's logs?
1
0
0
0
User avatar
mia (developer mode) @mia@shrimptest.0x0.st
1y
@kitten @navi it usually won’t, iirc. MAYBE if you enable debug logging in the sshd config.

but iirc there are cases where even that won’t help because the auth failure happens in the process it spawns as the connecting user, which might not be able to log
1
0
0
0
User avatar
witch_t *navi @navi@social.vlhl.dev
1y
@mia @kitten indeed no logs to syslog except for "i'm starting now" from when i restarted it
1
0
2
0
User avatar
mia (developer mode) @mia@shrimptest.0x0.st
1y
@navi @kitten i once experimented with kerberos and debugging that is… an interesting challenge sometimes
0
0
0
0