Permission denied (publickey).

[martinos]

From one of my client host, when I launch the ssh I the following message:

Permission denied (publickey).

When I

ssh -v blabla@ny.tmate.io 2>&1 | tail

I get

debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /home/martinos/.ssh/id_rsa
debug1: Trying private key: /home/martinos/.ssh/id_dsa
debug1: Trying private key: /home/martinos/.ssh/id_ecdsa
debug1: No more authentication methods to try.

I don't understand because I am able to access my tmate server from other hosts on the net.

Do you have an idea of what might be the issue?

[nviennot]

Hum... I don't really understand why this would happen :(

[martinos]

Yesterday, I have found what was causing the issue. My client did not have a ssh key.

Oups

[nviennot]

Okay great :)

[rmmh]

Having to run ssh-keygen is annoying. It would be better if tmate accepted both pubkey and password auth, accepting any key and any password.

[nviennot]

I could make the authentication optional by patching libssh, this might be better

[nviennot]

nevermind the patching. libssh works just fine.

ssh clients work like that:

• the client tries the "none" auth method
• if auth is required, server must reply with the possible other auth methods "pubkey, password, etc"
• the client tries the next possible available auth method. (but not "none").

the problem if I allow no authentication is that I will never have the chance to grab a public key (which will be very useful in the future when html5 comes in the mix), and also I might increase noise due to ssh bruteforcing bots.

[apennebaker-ni]

Same problem for me and my friend.

[stdint]

Same problem as well... It is a little annoying that the other party needs to run ssh-keygen...
But doesn't matter...I guess...

[kauser-cse-buet]

Hi, @martinos ,

How you solved the problem. Can you share please?

[dcorking]

@kauser-cse-buet He wrote that he solved it: 'My client did not have a ssh key.' so we can imagine he used ssh-keygen :)

[annacruz]

I'm having this issue with a key with passphrase could someone help me?

[webknjaz]

@annacruz use ssh -i ~/.ssh/your_key ... and it will ask for a key password. Also if you're using ssh-agent, you can ssh-add ~/.ssh/your_key upfront, enter password and ssh-agent daemon will remember your key decrypted in memory and then ssh will be able to use it w/o prompting for a password