2016-11-10 286 views
0

This answer是专门为这类问题设计的,但它对我的数百个upvoters还没有很清楚。AWS EC2权限被拒绝(公钥)

我把我的钥匙放在下载。它被发现了,但是当我使用用户ubunto时,它似乎不被视为公钥。输出在这篇文章的底部。我使用sudo chmod 600 ~/downloads/mykey.pem更改了权限,但结果相同。我使用sudo chmod 700 ~/downloads/mykey.pem更改了权限,结果也一样。从this answer开始,我尝试了sudo chown -R me ~/downloads/mykey.pem,然后sudo chgrp -R 501 ~/downloads/mykey.pem其中uid = 501(me)​​。

我试过ec-2和root用户没有成功。

与根为EC-2

debug1: Authentications that can continue: publickey debug1: No more authentication methods to try. Permission denied (publickey).

与根作为用户

跳过输出线

debug1: Trying private key: /Users/me/downloads/mykey.pem debug1: Authentication succeeded (publickey).

身份验证成功,但连接关闭。

跳过输出线

debug1: channel 0: free: port listener, nchannels 2 debug1: channel 1: free: port listener, nchannels 1 Connection to ec2-[myPublicIP].compute-1.amazonaws.com closed. Transferred: sent 3264, received 2456 bytes, in 10.3 seconds Bytes per second: sent 316.6, received 238.2 debug1: Exit status 0

下面是一个使用用户ubunto,这个问题的标题是指输出:

ssh -v -i ~/downloads/mykey.pem -L 60051:localhost:60051 [email protected][mypublicIP].compute-1.amazonaws.com OpenSSH_6.9p1, LibreSSL 2.1.8 debug1: Reading configuration data /etc/ssh/ssh_config debug1: /etc/ssh/ssh_config line 21: Applying options for * debug1: Connecting to ec2[mypublicIP].compute-1.amazonaws.com [[mypublicIP]] port 22. debug1: Connection established. debug1: key_load_public: No such file or directory debug1: identity file /Users/me/downloads/mykey.pem type -1 debug1: key_load_public: No such file or directory debug1: identity file /Users/me/downloads/mykey.pem-cert type -1 debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_6.9 debug1: Remote protocol version 2.0, remote software version OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.4 debug1: match: OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.4 pat OpenSSH_6.6.1* compat 0x04000000 debug1: Authenticating to ec2-[mypublicIP].compute-1.amazonaws.com:22 as 'ubunto' debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug1: kex: server->client [email protected] <implicit> none debug1: kex: client->server [email protected] <implicit> none debug1: expecting SSH2_MSG_KEX_ECDH_REPLY debug1: Server host key: ecdsa-sha2-nistp256 SHA256:85gcFh6LySYszjod4WIx5wu7BUvKwL4M6EAcZkv0zGw debug1: Host 'ec2[mypublicIP].compute-1.amazonaws.com' is known and matches the ECDSA host key. debug1: Found key in /Users/me/.ssh/known_hosts:11 debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug1: SSH2_MSG_NEWKEYS received debug1: SSH2_MSG_SERVICE_REQUEST sent debug1: SSH2_MSG_SERVICE_ACCEPT received debug1: Authentications that can continue: publickey debug1: Next authentication method: publickey debug1: Trying private key: /Users/me/downloads/mykey.pem debug1: Authentications that can continue: publickey debug1: No more authentication methods to try. Permission denied (publickey).

回答

1

AMI是什么你在用吗?

Ubuntu AMI的股票默认用户是ubuntu,而不是ubunto

除非您创建了一个特殊的AMI来设置用户,否则该用户将不在AMI上,因此无法进行身份验证。