Monthly Shaarli

All links of one month in a single page.

April, 2019

Note:

Fixing connection issues for blog automatic deployment

Problems:

  • ssh will say publickey denied (even though it is the correct public key)
  • Server will close the ssh connection on port 22 apparently without any errors
  • User is potentially locked out of their account (if trying to use another account than main ssh connection)

Possible fixes:

  • Check the keys first of all, are they in the corrent places on the server (authorized_keys) for the correct login account, with the correct permissions (u+rw, go-rwx for private, u+rw, go+r for public key)

  • logging into the correct ip, with the correct user (-l username) and identityfile? (-i file)

  • check the client log (ssh -vv or -vvv) and server logs (often sudo cat /var/log/auth.log) for error messages (see checking sshd logs )

  • are the errors concerning kex algorithms? -> setting kex/cipher , enable legacy diffie-hellman

  • errors concerning a locked account? -> unlocking account for public ssh key access

problems seem to be mainly created by server hardening through e.g. dev-sec hardening role