[ale] Getting root ssh key to work (was Re: [ot] Xmpp, ejabberd question)

[Tim Watts]

yep. that was it. thanks.

On Fri, 2012-01-13 at 15:28 -0500, David Tomaschik wrote:
> You should have the public key in a file called authorized_keys on the
> server side.
> 
> David
> 
> 
> On Fri, Jan 13, 2012 at 3:06 PM, Tim Watts <tim at cliftonfarm.org> wrote:
> > OK, I did an ssh-keygen for root and managed to copy its id_rsa.pub to
> > $host:/root/.ssh.  (I have "PasswordAuthentication no" in my sshd_config
> > so can't use ssh-copy-id.)  On the target host it shows this:
> >
> > $ sudo ls -l /root/.ssh/
> > total 8
> > -rw-r--r-- 1 root root 396 2012-01-13 14:36 id_rsa.pub
> > -rw-r--r-- 1 root root 884 2010-11-28 13:36 known_hosts
> >
> > On my local machine I have this:
> >
> > # ls -l /root/.ssh
> > total 12
> > -rw------- 1 root root 1743 2012-01-13 14:25 id_rsa
> > -rw-r--r-- 1 root root  396 2012-01-13 14:25 id_rsa.pub
> > -rw-r--r-- 1 root root  884 2009-11-11 06:17 known_hosts
> >
> > The timestamp difference is due to copying it to my home before scp-ing
> > it to the target host.
> >
> > And yet:
> >
> > # ssh timtw at blueberry
> > Permission denied (publickey).
> > # ssh blueberry
> > Permission denied (publickey).
> >
> > My sshd_config has "PermitRootLogin yes".  What else could I be missing?
> >
> >
> > On Fri, 2012-01-13 at 13:56 -0500, Jim Kinney wrote:
> >> root user needs to do a keygen and put the pub on wilma.
> >>
> >> On Fri, Jan 13, 2012 at 1:40 PM, Tim Watts <tim at cliftonfarm.org>
> >> wrote:
> >>         On Fri, 2012-01-13 at 11:51 -0500, Jim Kinney wrote:
> >>         > root on fred goes to fredbak on wilma
> >>
> >>
> >>         Just to be clear: does this mean that the backup job runs as
> >>         root but
> >>         rsyncs as fredbak (via ssh key) to wilma?  As in:
> >>
> >>                # rsync $OPTS $SRC fredbak@$TGTHOST:$DST
> >>
> >>         I get an error when I try to do something similar:
> >>
> >>         OPTS="-az --delete-during --delete-delay -h --progress
> >>         --stats"
> >>
> >>         # rsync $OPTS /etc /home/timtw
> >>         timtw at blueberry:/home/timtw/backups/dellberry
> >>         Permission denied (publickey).
> >>         rsync: connection unexpectedly closed (0 bytes received so
> >>         far) [sender]
> >>         rsync error: unexplained error (code 255) at io.c(601)
> >>         [sender=3.0.7]
> >>         #
> >>
> >>         I am able to ssh to blueberry via my ssh key when I'm timtw
> >>         but not as
> >>         root.  Is my key in the wrong place?
> >>
> >>
> >>         _______________________________________________
> >>         Ale mailing list
> >>         Ale at ale.org
> >>         http://mail.ale.org/mailman/listinfo/ale
> >>         See JOBS, ANNOUNCE and SCHOOLS lists at
> >>         http://mail.ale.org/mailman/listinfo
> >>
> >>
> >>
> >>
> >> --
> >> --
> >> James P. Kinney III
> >>
> >> As long as the general population is passive, apathetic, diverted to
> >> consumerism or hatred of the vulnerable, then the powerful can do as
> >> they please, and those who survive will be left to contemplate the
> >> outcome.
> >> - 2011 Noam Chomsky
> >>
> >> http://heretothereideas.blogspot.com/
> >>
> >> _______________________________________________
> >> Ale mailing list
> >> Ale at ale.org
> >> http://mail.ale.org/mailman/listinfo/ale
> >> See JOBS, ANNOUNCE and SCHOOLS lists at
> >> http://mail.ale.org/mailman/listinfo
> >
> >
> > _______________________________________________
> > Ale mailing list
> > Ale at ale.org
> > http://mail.ale.org/mailman/listinfo/ale
> > See JOBS, ANNOUNCE and SCHOOLS lists at
> > http://mail.ale.org/mailman/listinfo
> >
> 
> 
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 490 bytes
Desc: This is a digitally signed message part
Url : http://mail.ale.org/pipermail/ale/attachments/20120113/c73f4101/attachment.bin