Bonjour
Je souhaite accéder depuis un serveur Kimsuffi Ubuntu 24.04 à un autre serveur cible Debian, en ssh avec des clés publiques et privées, afin de copier des fichiers de l'un vers l'autre.
J'ai généré la paire de clés sur le client et copié la clé publique sur le serveur cible comme d'habitude.
Cela fonctionne bien, mais une seule fois. Au bout d'un moment, un mot de passe est demandé parce qu'apparemment l'authentification par clé ne marche plus. Pour l'instant j'ai autorisé cette identification par mot de passe, mais je souhaite évidemment l'interdire.
Voici une sortie avec
ssh -v monuser@nas
OpenSSH_9.6p1 Ubuntu-3ubuntu13.19, OpenSSL 3.0.13 30 Jan 2024
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: include /etc/ssh/ssh_config.d/.conf matched no files
debug1: /etc/ssh/ssh_config line 21: Applying options for *
debug1: Connecting to nas [192.168.27.70] port 22.
debug1: Connection established.
debug1: identity file /home/monuser/.ssh/id_rsa type -1
debug1: identity file /home/monuser/.ssh/id_rsa-cert type -1
debug1: identity file /home/monuser/.ssh/id_ecdsa type -1
debug1: identity file /home/monuser/.ssh/id_ecdsa-cert type -1
debug1: identity file /home/monuser/.ssh/id_ecdsa_sk type -1
debug1: identity file /home/monuser/.ssh/id_ecdsa_sk-cert type -1
debug1: identity file /home/monuser/.ssh/id_ed25519 type -1
debug1: identity file /home/monuser/.ssh/id_ed25519-cert type -1
debug1: identity file /home/monuser/.ssh/id_ed25519_sk type -1
debug1: identity file /home/monuser/.ssh/id_ed25519_sk-cert type -1
debug1: identity file /home/monuser/.ssh/id_xmss type -1
debug1: identity file /home/monuser/.ssh/id_xmss-cert type -1
debug1: identity file /home/monuser/.ssh/id_dsa type -1
debug1: identity file /home/monuser/.ssh/id_dsa-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.19
debug1: Remote protocol version 2.0, remote software version OpenSSH_9.2p1 Debian-2+deb12u6
debug1: compat_banner: match: OpenSSH_9.2p1 Debian-2+deb12u6 pat OpenSSH compat 0x04000000
debug1: Authenticating to nas:22 as 'monuser'
debug1: load_hostkeys: fopen /home/monuser/.ssh/known_hosts2: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: algorithm: curve25519-sha256
debug1: kex: host key algorithm: ssh-ed25519
debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: compression: none
debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: compression: none
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: SSH2_MSG_KEX_ECDH_REPLY received
debug1: Server host key: ssh-ed25519 SHA256:tF85nkKWqKg0GoHiZMOEM0DS/TO1m0kVQ92+KMiKp1M
debug1: load_hostkeys: fopen /home/monuser/.ssh/known_hosts2: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory
debug1: Host 'nas' is known and matches the ED25519 host key.
debug1: Found key in /home/monuser/.ssh/known_hosts:5
debug1: ssh_packet_send2_wrapped: resetting send seqnr 3
debug1: rekey out after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: ssh_packet_read_poll2: resetting read seqnr 3
debug1: SSH2_MSG_NEWKEYS received
debug1: rekey in after 134217728 blocks
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_ext_info_client_parse: server-sig-algs=<ssh-ed25519,sk-ssh-ed25519@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ecdsa-sha2-nistp256@openssh.com,webauthn-sk-ecdsa-sha2-nistp256@openssh.com,ssh-dss,ssh-rsa,rsa-sha2-256,rsa-sha2-512>
debug1: kex_ext_info_check_ver: publickey-hostbound@openssh.com=<0>
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password
debug1: Next authentication method: publickey
debug1: Will attempt key: /home/monuser/.ssh/id_rsa
debug1: Will attempt key: /home/monuser/.ssh/id_ecdsa
debug1: Will attempt key: /home/monuser/.ssh/id_ecdsa_sk
debug1: Will attempt key: /home/monuser/.ssh/id_ed25519
debug1: Will attempt key: /home/monuser/.ssh/id_ed25519_sk
debug1: Will attempt key: /home/monuser/.ssh/id_xmss
debug1: Will attempt key: /home/monuser/.ssh/id_dsa
debug1: Trying private key: /home/monuser/.ssh/id_rsa
debug1: Trying private key: /home/monuser/.ssh/id_ecdsa
debug1: Trying private key: /home/monuser/.ssh/id_ecdsa_sk
debug1: Trying private key: /home/monuser/.ssh/id_ed25519
debug1: Trying private key: /home/monuser/.ssh/id_ed25519_sk
debug1: Trying private key: /home/monuser/.ssh/id_xmss
debug1: Trying private key: /home/monuser/.ssh/id_dsa
debug1: Next authentication method: password
monuser@nas's password:
J'ai vérifié que la clé publique reste bien présente sur le serveur cible sur une ligne du fichier .ssh/authorized_keys et que la clé privée est toujours dans mon dossier .ssh
Je ne comprends pas pourquoi il essaie la clé privée /home/monuser/.ssh/id_rsa et les 6 suivantes, alors que ces fichiers n'existent pas. Ils existent dans /etc/ssh pour l'user root, mais pas dans /home/monuser/.ssh. La clé que j'ai généré a un autre nom, mais n'est pas essayée.
Auriez-vous une idée de ce qui peut se passer, ou de ce que je peux vérifier ?
Merci.