再次遇到 SSH Server And “Permission denied (publickey)

用這個關鍵詞搜尋才找到howtogeek上答案： sshd : Authentication refused: bad ownership or modes for directory /

直接用我文章題目中的搜尋，這次不管用。

看log

    $ grep sshd /var/log/audit/audit.log  

這個命令很有用。它會告訴你原因。

May 17 16:21:25 localhost sshd[30255]: Authentication refused: bad ownership or modes for directory /home/username

原因很清楚了。是目錄許可權不對。

方法是：

Fixing Authentication refused: bad ownership or modes for directoryFrom HowToGeekIf you get this error in your logs when trying to setup public key authenticated automatic logins, the problem is a permissions one.You’ll need to perform the following commands on the user account you are trying to setup:

    chmod go-w ~/
    chmod 700 ~/.ssh
    chmod 600 ~/.ssh/authorized_keys

http://www.howtogeek.com/wiki/Fixing_Authentication_refused:_bad_ownership_or_modes_for_directory

    chmod go-w ~/  這個很重要。如果你的使用者目錄被設定為其它使用者和組使用者可以寫，那麼即時你更改了 .ssh 目錄和其檔案也不管用！！！！！ 我浪費了多少時間啊。 ：（ 我做了下面兩步，但還是不行。 Permission denied (publickey).
 

Make sure you do the following:

Make sure the permissions of the .ssh folder are 0700Make sure the permissions of the authorized_keys file are 0600Make sure the user owns the .ssh folder and contents (normally that’s the case but just to make sure)http://blog.artooro.com/2010/02/19/ssh-server-and-permission-denied-publickey/

$ grep sshd /var/log/audit/audit.log

May 17 16:21:25 localhost sshd[30255]: Authentication refused: bad ownership or modes for directory /home/fltrpMay 17 16:21:35 localhost sshd[30257]: Authentication refused: bad ownership or modes for directory /home/fltrphttp://serverfault.com/questions/230771/ssh-configuration-publickeys-permission-denied-publickey-password-error

原文地址：

public-key生成命令(客戶端)

# ssh-keygen -t dsa -f ~/.ssh/id_dsa

# cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys

[註釋：~/.ssh/id_dsa.pub檔案為公鑰，拷貝到Server的~/.ssh/目錄中，執行cat ~/.ssh/id_dsa.pub >> ~/.ssh/authorized_keys,許可權只給使用者本人，否則無法連線]

允許root直接登入

編輯/etc/ssh/sshd_config, 重新啟動sshd

PermitRootLogin yes