ssh access to remote machine

Question

I have set up a local Ubuntu desktop and port forwarded 22 so I can ssh access it from internet. Works fine.
From other ip addresses ssh user@ip returns user@ip’s password: and I can log in
From Ubuntu droplet terminal ssh user@ip returns Permission denied (publickey,password)

How do I configure droplet Ubuntu to allow desktop log in?

FYI I access droplet Ubuntu using ssh key pairs

Answer 1

bobbyiliev September 2, 2020

Hi there @jeffki,

You can enable password authentication by following the steps here:

https://www.digitalocean.com/docs/droplets/resources/lost-ssh-key/#enable-password-authentication

If you are still unable to login, I would recommend adding the -v flag to your SSH command to get some debug information:

ssh -vvv user@ip_address

Regards,
Bobby

Reply Report

jeffki September 2, 2020

Bobby
Thanks for your reply. My problem is not logging into the droplet, it is once in the droplet trying to ssh to a remote ssh server.
I note the following from -vvv debug:
i get connection established to user@ip port 22
then:
debug1: keyloadpublic: No such file or directory
debug1: identity file /home/jeff/.ssh/idrsa type -1
debug1: keyloadpublic: No such file or directory
debug1: identity file /home/jeff/.ssh/idrsa-cert type -1
debug1: keyloadpublic: No such file or directory
debug1: identity file /home/jeff/.ssh/iddsa type -1
debug1: keyloadpublic: No such file or directory
debug1: identity file /home/jeff/.ssh/iddsa-cert type -1
debug1: keyloadpublic: No such file or directory
debug1: identity file /home/jeff/.ssh/idecdsa type -1
debug1: keyloadpublic: No such file or directory
debug1: identity file /home/jeff/.ssh/idecdsa-cert type -1
debug1: keyloadpublic: No such file or directory
debug1: identity file /home/jeff/.ssh/ided25519 type -1
debug1: keyload_public: No such file or directory

it does get the key for ip
Host ‘x.x.x.x’ is known and matches the ECDSA host key.

it exits with:
debug3: authmethodisenabled publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /home/jeff/.ssh/idrsa
debug3: no such identity: /home/jeff/.ssh/idrsa: No such file or directory
debug1: Trying private key: /home/jeff/.ssh/iddsa
debug3: no such identity: /home/jeff/.ssh/iddsa: No such file or directory
debug1: Trying private key: /home/jeff/.ssh/idecdsa
debug3: no such identity: /home/jeff/.ssh/idecdsa: No such file or directory
debug1: Trying private key: /home/jeff/.ssh/ided25519
debug3: no such identity: /home/jeff/.ssh/ided25519: No such file or directory
debug2: we did not send a packet, disable method
debug1: No more authentication methods to try.
user@x.x.x.x: Permission denied (publickey,password).

Looks like the Ubuntu droplet openSSH is not getting a public key to use to connect to my ssh server? Not sure how to configure this?

Best regards
Jeff
Reply Report
- bobbyiliev September 2, 2020
  
  Hi there @jeffki,
  
  What you could do is generate a new SSH key on your Droplet and then upload the private key to your SSH server.
  
  So once you are on your Droplet follow the steps here:
  
  https://www.digitalocean.com/community/tutorials/how-to-set-up-ssh-keys–2
  
  Then copy the content of the ~/.ssh/id_rsa.pub file and add it to your other SSH server in the ~/.ssh/authorized_keys file.
  
  That way you will be able to login from your Droplet to the remote SSH server that you are referring to.
  
  Let me know how it goes.
  Regards,
  Bobby
  
  Reply Report
  
  jeffki September 3, 2020
  
  Yes Bobby,
  That worked, login success!! Thank you very much.
  
  FYI, the authorized_keys file did not exist on the server host so I created it with nano authorized_keys and pasted in the text content from the Droplet .ssh/id_rsa.pub file.
  
  Hope others find your good advice helpful if they have the same problem.
  
  Best regards
  Jeff
  
  edited by bobbyiliev
  
  Reply Report
  
  jeffki September 3, 2020
  
  …that’s authorized<underscore>keys - browser presentation removed the underscore symbol
  
  Reply Report
  
  bobbyiliev September 3, 2020
  
  Hey @jeffki,
  
  On that note, you can use backticks ` to wrap commands around, that way the formatting of the commands will not break.
  
  If you are interested you can take a look at the formatting guidelines here:
  
  https://www.digitalocean.com/community/tutorials/digitalocean-s-technical-writing-guidelines#formatting
  
  Regards,
  Bobby
  
  DigitalOcean's Technical Writing Guidelines
  by Hazel Virdó
  by Brian Hogan
  DigitalOcean is excited to continue building out its collection of technical articles related to server administration and software engineering. To keep the DigitalOcean community unified and to ensure that articles fit our writing style, we have developed the following guidelines.
  
  Reply Report
  
  bobbyiliev September 3, 2020
  
  Hi @jeffki,
  
  Ah that’s great! Happy to hear that you’ve got it all working!
  
  Regards,
  Bobby
  
  Reply Report

Answer 2

jeffki September 2, 2020

Bobby
Thanks for your reply. My problem is not logging into the droplet, it is once in the droplet trying to ssh to a remote ssh server.
I note the following from -vvv debug:
i get connection established to user@ip port 22
then:
debug1: keyloadpublic: No such file or directory
debug1: identity file /home/jeff/.ssh/idrsa type -1
debug1: keyloadpublic: No such file or directory
debug1: identity file /home/jeff/.ssh/idrsa-cert type -1
debug1: keyloadpublic: No such file or directory
debug1: identity file /home/jeff/.ssh/iddsa type -1
debug1: keyloadpublic: No such file or directory
debug1: identity file /home/jeff/.ssh/iddsa-cert type -1
debug1: keyloadpublic: No such file or directory
debug1: identity file /home/jeff/.ssh/idecdsa type -1
debug1: keyloadpublic: No such file or directory
debug1: identity file /home/jeff/.ssh/idecdsa-cert type -1
debug1: keyloadpublic: No such file or directory
debug1: identity file /home/jeff/.ssh/ided25519 type -1
debug1: keyload_public: No such file or directory

it does get the key for ip
Host ‘x.x.x.x’ is known and matches the ECDSA host key.

it exits with:
debug3: authmethodisenabled publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /home/jeff/.ssh/idrsa
debug3: no such identity: /home/jeff/.ssh/idrsa: No such file or directory
debug1: Trying private key: /home/jeff/.ssh/iddsa
debug3: no such identity: /home/jeff/.ssh/iddsa: No such file or directory
debug1: Trying private key: /home/jeff/.ssh/idecdsa
debug3: no such identity: /home/jeff/.ssh/idecdsa: No such file or directory
debug1: Trying private key: /home/jeff/.ssh/ided25519
debug3: no such identity: /home/jeff/.ssh/ided25519: No such file or directory
debug2: we did not send a packet, disable method
debug1: No more authentication methods to try.
user@x.x.x.x: Permission denied (publickey,password).

Looks like the Ubuntu droplet openSSH is not getting a public key to use to connect to my ssh server? Not sure how to configure this?

Best regards
Jeff
Reply Report
- bobbyiliev September 2, 2020
  
  Hi there @jeffki,
  
  What you could do is generate a new SSH key on your Droplet and then upload the private key to your SSH server.
  
  So once you are on your Droplet follow the steps here:
  
  https://www.digitalocean.com/community/tutorials/how-to-set-up-ssh-keys–2
  
  Then copy the content of the ~/.ssh/id_rsa.pub file and add it to your other SSH server in the ~/.ssh/authorized_keys file.
  
  That way you will be able to login from your Droplet to the remote SSH server that you are referring to.
  
  Let me know how it goes.
  Regards,
  Bobby
  
  Reply Report
  
  jeffki September 3, 2020
  
  Yes Bobby,
  That worked, login success!! Thank you very much.
  
  FYI, the authorized_keys file did not exist on the server host so I created it with nano authorized_keys and pasted in the text content from the Droplet .ssh/id_rsa.pub file.
  
  Hope others find your good advice helpful if they have the same problem.
  
  Best regards
  Jeff
  
  edited by bobbyiliev
  
  Reply Report
  
  jeffki September 3, 2020
  
  …that’s authorized<underscore>keys - browser presentation removed the underscore symbol
  
  Reply Report
  
  bobbyiliev September 3, 2020
  
  Hey @jeffki,
  
  On that note, you can use backticks ` to wrap commands around, that way the formatting of the commands will not break.
  
  If you are interested you can take a look at the formatting guidelines here:
  
  https://www.digitalocean.com/community/tutorials/digitalocean-s-technical-writing-guidelines#formatting
  
  Regards,
  Bobby
  
  DigitalOcean's Technical Writing Guidelines
  by Hazel Virdó
  by Brian Hogan
  DigitalOcean is excited to continue building out its collection of technical articles related to server administration and software engineering. To keep the DigitalOcean community unified and to ensure that articles fit our writing style, we have developed the following guidelines.
  
  Reply Report
  
  bobbyiliev September 3, 2020
  
  Hi @jeffki,
  
  Ah that’s great! Happy to hear that you’ve got it all working!
  
  Regards,
  Bobby
  
  Reply Report

Related

Question

ssh access to remote machine

Leave a comment

Looking for something else?

Sign up for our newsletter

Related

Question

ssh access to remote machine

Leave a comment

Related

question

Certbot unable to locate virtual host

question

Why my website down? SSH cannot be accessed

question

Can't connect to VPN server

question

How can i create a VM with ubuntu desktop in digital ocean?

Looking for something else?