[SOLVED] perssion denied when creating private/pub key paird with ssh

Jany · 02-20-2013, 12:45 AM

Dear all,

I try to create a pair private/public keys on linux with ssh.
the command is: ssh-keygen
the system inform the following notices:
open admin_rsa: permission denied
saving the key failed:admin_rsa

but I use the root user to create the keys.

pls help me, thanks!

shivaa · 02-20-2013, 01:08 AM

Try:

Code:

~# ssh-keygen -t rsa
Generating public/private rsa key pair.
.......
.......

RaviTezu · 02-20-2013, 02:18 AM

Quote:

Originally Posted by Jany

but I use the root user to create the keys.

You shouldn't run the ssh-keygen command as root.

If you run it as root, it probably replace the root user current keys.

Jany · 02-20-2013, 02:25 AM

just generate the keys as the defualt filename and path, then modify the path and the filename, then it is OK.

RaviTezu · 02-20-2013, 02:38 AM

Quote:

Originally Posted by Jany

just generate the keys as the defualt filename and path, then modify the path and the filename, then it is OK.

I Didn't get you. What do you mean by default filename & path here?

joe_2000 · 02-20-2013, 03:57 PM

Quote:

Originally Posted by RaviTezu

I Didn't get you. What do you mean by default filename & path here?

When you are asked to enter the filename for the key the default filename is given in brackets. If you do not enter anything but just press enter the default filename will be chosen.

I don't have experience with Redhat, but I have seen this, maybe it applies to you?
http://eosrei.net/articles/2012/01/f...n-denied-rhel6

Habitual · 02-20-2013, 04:28 PM

Quote:

Originally Posted by Jany

just generate the keys as the defualt filename and path, then modify the path and the filename, then it is OK.

or...

Code:

ssh-keygen -f /home/$(whoami)/.ssh/admin_rsa -t rsa -N '' -q

as a user!

lleb · 02-20-2013, 05:20 PM

Code:

###### DIRECTIONS FOR CREATING RSA KEY################

	Directions for creating the rsa key and making the two
 servers talk to each other without password.

	1st change directory into .ssh and check what files are there.

 		[rx30@rx30 ~]$ cd .ssh
		[rx30@rx30 .ssh]$ ls -l
		total 4
		-rw-r--r-- 1 rx30 group 2980 Jun 13 12:02 known_hosts

	2nd create the rsa key.

		[rx30@rx30 .ssh]$ ssh-keygen -t rsa -b 4096
		Generating public/private rsa key pair.
		Enter file in which to save the key (/usr/rx30/.ssh/id_rsa):
		Enter passphrase (empty for no passphrase):
		Enter same passphrase again:
		Your identification has been saved in /usr/rx30/.ssh/id_rsa.
		Your public key has been saved in /usr/rx30/.ssh/id_rsa.pub.
		The key fingerprint is:
		cb:b0:40:c6:e9:f4:9e:f5:71:fc:c3:00:c0:f7:c6:75 rx30@rx30.localdomain

	3rd check that there are two new files with the following permissions

		[rx30@rx30 .ssh]$ ls -l
		total 12
		-rw------- 1 rx30 group 3243 Jun 22 15:50 id_rsa
		-rw-r--r-- 1 rx30 group  743 Jun 22 15:50 id_rsa.pub
		-rw-r--r-- 1 rx30 group 2980 Jun 13 12:02 known_hosts
	
	4th change directory back to the users $HOME

		[rx30@rx30 .ssh]$ cd

	5th copy the key to the remote server

		[rx30@rx30 ~]$ ssh-copy-id -i ~/.ssh/id_rsa.pub rx30@XXX.XXX.XXX.XXX
		25
		rx30@XXX.XXX.XXX.XXX's password:
		Now try logging into the machine, with "ssh 'rx30@XXX.XXX.XXX.XXX'", and check in:

		.ssh/authorized_keys

		to make sure we haven't added extra keys that you weren't expecting.

	6th, follow directions on the screen.

		[rx30@rx30 ~]$ ssh rx30@XXX.XXX.XXX.XXX
		Last login: Fri Jun 22 14:12:08 2012 from 10.10.4.77
		[rx30@rx30 ~]$ exit
		logout
		Connection to XXX.XXX.XXX.XXX closed.

enjoy.