☰

UbuntuサーバーでのSSHのトラブルシューティング

tag-icon • tag-icon bash ubuntu ssh
UbuntuサーバーでのSSHのトラブルシューティング

Digital Ocean CloudサーバーでSSHキー認証を設定しようとしています。まず、rsa_id.pubを自分のアカウントに追加し、作成時にUbuntuドロップレットに自動的にロードしました。 rsa公開鍵へのアクセス中にエラーが発生したようですが、/ etc / sshのすべてのファイル権限を777に変更しました（悪い考えであることを知っています）。どんなアイデアがありますか？

-ssh認証試行時の詳細ログ

Apr  2 13:42:38 CarreFamilyHomestay-Webserver sshd[976]: Server listening on 0.0.0.0 port 22.
Apr  2 13:42:38 CarreFamilyHomestay-Webserver sshd[976]: Server listening on :: port 22.
Apr  2 13:43:49 CarreFamilyHomestay-Webserver sshd[1193]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr  2 13:44:54 CarreFamilyHomestay-Webserver sshd[1193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.80.65.235  user=root
Apr  2 13:44:56 CarreFamilyHomestay-Webserver sshd[1193]: Failed password for root from 192.80.65.235 port 33463 ssh2
Apr  2 13:44:56 CarreFamilyHomestay-Webserver sshd[1193]: Connection closed by 192.80.65.235 [preauth]
Apr  2 13:46:17 CarreFamilyHomestay-Webserver sshd[1196]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr  2 13:58:54 CarreFamilyHomestay-Webserver sshd[951]: Server listening on 0.0.0.0 port 22.
Apr  2 13:58:54 CarreFamilyHomestay-Webserver sshd[951]: Server listening on :: port 22.
Apr  2 14:00:35 CarreFamilyHomestay-Webserver sshd[1118]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr  2 14:00:38 CarreFamilyHomestay-Webserver sshd[1118]: pam_unix(sshd:account): expired password for user root (root enforced)
Apr  2 14:00:38 CarreFamilyHomestay-Webserver sshd[1118]: Accepted password for root from 192.80.65.235 port 33274 ssh2
Apr  2 14:00:38 CarreFamilyHomestay-Webserver sshd[1118]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr  2 14:03:34 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): check pass; user unknown
Apr  2 14:03:34 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= 
Apr  2 14:03:37 CarreFamilyHomestay-Webserver login[1042]: FAILED LOGIN (1) on '/dev/tty1' FOR 'UNKNOWN', Authentication failure
Apr  2 14:04:00 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=  user=root
Apr  2 14:04:03 CarreFamilyHomestay-Webserver login[1042]: FAILED LOGIN (2) on '/dev/tty1' FOR 'root', Authentication failure
Apr  2 14:04:22 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): check pass; user unknown
Apr  2 14:04:22 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= 
Apr  2 14:04:37 CarreFamilyHomestay-Webserver login[1168]: pam_unix(login:account): expired password for user root (root enforced)
Apr  2 14:04:44 CarreFamilyHomestay-Webserver login[1168]: pam_unix(login:chauthtok): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=  user=root
Apr  2 14:04:46 CarreFamilyHomestay-Webserver login[1168]: Authentication token manipulation error
Apr  2 14:04:53 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=  user=root
Apr  2 14:04:57 CarreFamilyHomestay-Webserver login[1173]: FAILED LOGIN (1) on '/dev/tty1' FOR 'root', Authentication failure
Apr  2 14:05:04 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:auth): check pass; user unknown
Apr  2 14:05:04 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= 
Apr  2 14:05:07 CarreFamilyHomestay-Webserver login[1173]: FAILED LOGIN (2) on '/dev/tty1' FOR 'UNKNOWN', Authentication failure
Apr  2 14:05:17 CarreFamilyHomestay-Webserver login[1173]: FAILED LOGIN (3) on '/dev/tty1' FOR 'root', Authentication failure
Apr  2 14:05:33 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:account): expired password for user root (root enforced)
Apr  2 14:05:59 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:chauthtok): password changed for root
Apr  2 14:05:59 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
Apr  2 14:05:59 CarreFamilyHomestay-Webserver login[1225]: ROOT LOGIN  on '/dev/tty1'
Apr  2 14:07:10 CarreFamilyHomestay-Webserver sshd[1240]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr  2 14:07:17 CarreFamilyHomestay-Webserver sshd[1240]: Accepted password for root from 192.80.65.235 port 35403 ssh2
Apr  2 14:07:17 CarreFamilyHomestay-Webserver sshd[1240]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr  2 14:07:36 CarreFamilyHomestay-Webserver sudo:     root : TTY=pts/1 ; PWD=/root/.ssh ; USER=root ; COMMAND=/usr/bin/vim authorized_keys
Apr  2 14:07:36 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session opened for user root by root(uid=0)
Apr  2 14:07:57 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session closed for user root
Apr  2 14:08:36 CarreFamilyHomestay-Webserver sudo:     root : TTY=pts/1 ; PWD=/etc/ssh ; USER=root ; COMMAND=/usr/bin/apt-get install gedit
Apr  2 14:08:36 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session opened for user root by root(uid=0)
Apr  2 14:09:08 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session closed for user root
Apr  2 14:13:34 CarreFamilyHomestay-Webserver sshd[1316]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key

/var/log/auth.log

Apr  2 13:42:38 CarreFamilyHomestay-Webserver sshd[976]: Server listening on 0.0.0.0 port 22.
Apr  2 13:42:38 CarreFamilyHomestay-Webserver sshd[976]: Server listening on :: port 22.
Apr  2 13:43:49 CarreFamilyHomestay-Webserver sshd[1193]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr  2 13:44:54 CarreFamilyHomestay-Webserver sshd[1193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.80.65.235  user=root
Apr  2 13:44:56 CarreFamilyHomestay-Webserver sshd[1193]: Failed password for root from 192.80.65.235 port 33463 ssh2
Apr  2 13:44:56 CarreFamilyHomestay-Webserver sshd[1193]: Connection closed by 192.80.65.235 [preauth]
Apr  2 13:46:17 CarreFamilyHomestay-Webserver sshd[1196]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr  2 13:58:54 CarreFamilyHomestay-Webserver sshd[951]: Server listening on 0.0.0.0 port 22.
Apr  2 13:58:54 CarreFamilyHomestay-Webserver sshd[951]: Server listening on :: port 22.
Apr  2 14:00:35 CarreFamilyHomestay-Webserver sshd[1118]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr  2 14:00:38 CarreFamilyHomestay-Webserver sshd[1118]: pam_unix(sshd:account): expired password for user root (root enforced)
Apr  2 14:00:38 CarreFamilyHomestay-Webserver sshd[1118]: Accepted password for root from 192.80.65.235 port 33274 ssh2
Apr  2 14:00:38 CarreFamilyHomestay-Webserver sshd[1118]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr  2 14:03:34 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): check pass; user unknown
Apr  2 14:03:34 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= 
Apr  2 14:03:37 CarreFamilyHomestay-Webserver login[1042]: FAILED LOGIN (1) on '/dev/tty1' FOR 'UNKNOWN', Authentication failure
Apr  2 14:04:00 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=  user=root
Apr  2 14:04:03 CarreFamilyHomestay-Webserver login[1042]: FAILED LOGIN (2) on '/dev/tty1' FOR 'root', Authentication failure
Apr  2 14:04:22 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): check pass; user unknown
Apr  2 14:04:22 CarreFamilyHomestay-Webserver login[1042]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= 
Apr  2 14:04:37 CarreFamilyHomestay-Webserver login[1168]: pam_unix(login:account): expired password for user root (root enforced)
Apr  2 14:04:44 CarreFamilyHomestay-Webserver login[1168]: pam_unix(login:chauthtok): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=  user=root
Apr  2 14:04:46 CarreFamilyHomestay-Webserver login[1168]: Authentication token manipulation error
Apr  2 14:04:53 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=  user=root
Apr  2 14:04:57 CarreFamilyHomestay-Webserver login[1173]: FAILED LOGIN (1) on '/dev/tty1' FOR 'root', Authentication failure
Apr  2 14:05:04 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:auth): check pass; user unknown
Apr  2 14:05:04 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost= 
Apr  2 14:05:07 CarreFamilyHomestay-Webserver login[1173]: FAILED LOGIN (2) on '/dev/tty1' FOR 'UNKNOWN', Authentication failure
Apr  2 14:05:17 CarreFamilyHomestay-Webserver login[1173]: FAILED LOGIN (3) on '/dev/tty1' FOR 'root', Authentication failure
Apr  2 14:05:33 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:account): expired password for user root (root enforced)
Apr  2 14:05:59 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:chauthtok): password changed for root
Apr  2 14:05:59 CarreFamilyHomestay-Webserver login[1173]: pam_unix(login:session): session opened for user root by LOGIN(uid=0)
Apr  2 14:05:59 CarreFamilyHomestay-Webserver login[1225]: ROOT LOGIN  on '/dev/tty1'
Apr  2 14:07:10 CarreFamilyHomestay-Webserver sshd[1240]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key
Apr  2 14:07:17 CarreFamilyHomestay-Webserver sshd[1240]: Accepted password for root from 192.80.65.235 port 35403 ssh2
Apr  2 14:07:17 CarreFamilyHomestay-Webserver sshd[1240]: pam_unix(sshd:session): session opened for user root by (uid=0)
Apr  2 14:07:36 CarreFamilyHomestay-Webserver sudo:     root : TTY=pts/1 ; PWD=/root/.ssh ; USER=root ; COMMAND=/usr/bin/vim authorized_keys
Apr  2 14:07:36 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session opened for user root by root(uid=0)
Apr  2 14:07:57 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session closed for user root
Apr  2 14:08:36 CarreFamilyHomestay-Webserver sudo:     root : TTY=pts/1 ; PWD=/etc/ssh ; USER=root ; COMMAND=/usr/bin/apt-get install gedit
Apr  2 14:08:36 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session opened for user root by root(uid=0)
Apr  2 14:09:08 CarreFamilyHomestay-Webserver sudo: pam_unix(sudo:session): session closed for user root
Apr  2 14:13:34 CarreFamilyHomestay-Webserver sshd[1316]: error: Could not load host key: /etc/ssh/ssh_host_ed25519_key

答え1

再び。 Authorized_keysファイルを削除してください。

  1. ssh-keygen（すべてのデフォルト値を受け入れ、パスワードを使用しない）
  2. vi .ssh/authorized_keys
  3. 接続するサーバーにid_rsa.pubの内容を貼り付けます。

また、クラウドサーバーで権限を変更するときは非常に注意してください。私の答えはLinuxの一般的なものです。他のプロセスがある場合は、SSHキーのDigital Oceanの詳細を確認してください。たとえば、AWS には独自のキー管理システムがあります。

関連情報