Can still access LAMP server, even after deleting local ssh keys -

-

server newbie here , on mac reference.

so i'm trying break ssh key authentication between me , lamp stack although can't. in other words, gives me access , don't know how! here's i've done...

  • created key via terminal: ssh-keygen -f foo_key
  • stuck pub key in correct place on server...
  • ssh'ed in via terminal: ssh -i /users/me/.ssh/foo_key root@x.x.x.x
  • it's asked password chose upon setup, fine inputed that.

so have access, next logout server. want rid access on computer. i've tried removing local private , public keys, i've tried removing checksum in known_hosts, i've tried locating key saved in keychain access, nothing there.

so has authentication information been saved, it's pretty annoying.

all guidance appreciated.

edit

here's verbose info, doesn't seem using foo_key @ now:

debug1: identity file /users/me/.ssh/id_rsa type 1 debug1: key_load_public: no such file or directory debug1: identity file /users/me/.ssh/id_rsa-cert type -1 debug1: key_load_public: no such file or directory debug1: identity file /users/me/.ssh/id_dsa type -1 debug1: key_load_public: no such file or directory debug1: identity file /users/me/.ssh/id_dsa-cert type -1 debug1: key_load_public: no such file or directory debug1: identity file /users/me/.ssh/id_ecdsa type -1 debug1: key_load_public: no such file or directory debug1: identity file /users/me/.ssh/id_ecdsa-cert type -1 debug1: key_load_public: no such file or directory debug1: identity file /users/me/.ssh/id_ed25519 type -1 debug1: key_load_public: no such file or directory debug1: identity file /users/me/.ssh/id_ed25519-cert type -1

no precise info on rsa key frickin' offers in first place:

debug1: authentications can continue: publickey,password debug1: next authentication method: publickey debug1: offering rsa public key:  debug1: authentications can continue: publickey,password debug1: offering rsa public key:  debug1: server accepts key: pkalg ssh-rsa blen 279 debug1: authentication succeeded (publickey).

another update

running -vvv doesn't give me more meaningful information have posted. don't know if has don't have authorized_keys file in ~/.ssh/. created 1 , generated new keys, nothing gets stored in there.

i need know why can continue accessing server after i've supposedly removed evidence of keys generated on machine. can't believe isn't common!?

it's worth noting, i'm not defaulting id_rsa keys, i'm creating custom ones , want continue using them.

did make changes in sshd_config disallow connections without public key authentication?

if no, you'll have change line saying

passwordauthentication yes

to

passwordauthentication no

then restart sshd whatever init system have.


Comments

Post a Comment

Popular posts from this blog

sequelize.js - Sequelize group by with association includes id -

-
so when requesting group sequelize follows: return models.workingcalendar .findall({ attributes: [ 'workingcalendar.periodid', 'workingcalendar.date', 'period.name' ], include: [ { model: models.period, attributes: [] } ], where: { getsudoid: currentgetsudo.id, unitplantid: unitplantid }, group: ['workingcalendar.periodid', 'workingcalendar.date', 'period.name'], }); sequelize run query: select [workingcalendar].[id], [workingcalendar].[periodid], [workingcalendar].[date], [period].[name] [workingcalendars] [workingcalendar] left outer join [periods] [period] on [wor...
Read more

java - Android raising EPERM (Operation not permitted) when attempting to send UDP packet after network connection -

-
when responding supplicant_state_changed_action broadcast , attempting send udp packet, exception: java.net.socketexception: sendto failed: eperm (operation not permitted) @ libcore.io.iobridge.maybethrowaftersendto(iobridge.java:542) @ libcore.io.iobridge.sendto(iobridge.java:511) @ java.net.plaindatagramsocketimpl.send(plaindatagramsocketimpl.java:184) @ java.net.datagramsocket.send(datagramsocket.java:305) @ com.mycompany.app.serviceclass.discover(serviceclass.java:355)at com.mycompany.app.serviceclass.access$600(serviceclass.java:39) @ com.mycompany.app.serviceclass$statemachine.run(serviceclass.java:242) @ java.lang.thread.run(thread.java:818) caused by: android.system.errnoexception: sendto failed: eperm (operation not permitted) @ libcore.io.posix.sendtobytes(native method) @ libcore.io.posix.sendto(posix.java:211) @ libcore.io.blockguardos.sendto(blockguardos.java:278) @ libcore.io.iobridge.sendto(iobridge.java:509) @ java.net.plaindat...
Read more

c++ - Migration from QScriptEngine to QJSEngine -

-
i'm migrating qscriptengine code on qjsengine. now, have: class pars { public: static qscriptvalue printmainlog(qscriptcontext* c, qscriptengine* e); }; qscriptvalue pars::printmainlog(qscriptcontext* c, qscriptengine* e) { //some actions return e->globalobject().property(""); } ... qscriptengine engine; ... engine.globalobject().setproperty("printlog",engine.newfunction(pars::printmainlog)); so, user can put printlog("what ever"); in application in , example, qlineedit , function pars::printmainlog evalute. is there way qjsengine? so, user put same printlog("what ever");? way find here , user should put logger.printlog("what ever"); logger class inherited qobject printlog slot.
Read more