Re: accessing a fedora box (latest fedora 35) from Windows using PuTTY/WinSCP only possible with userid/password

["Walter H. via users" <users@xxxxxxxxxxxxxxxxxxxxxxx>]

On 20.11.2021 14:27, George N. White III wrote:

On Sat, 20 Nov 2021 at 08:16, Walter H. via users <users@xxxxxxxxxxxxxxxxxxxxxxx> wrote:

Hello,

can someone please give me a hint, where to look for the following
problem ...

I have several Linux VMs (all except this one are CentOS), and I took
/root/.ssh/authorized_keys from one of them
and copied it onto this Fedora box;

accessing from my Jump-VM also directly using SSH from Win10 works fine
using the private key,
but from when using PuTTY/WinSCP I get: "Server refused our key."
(all other Linux-VMs use the same authorized_keys and can be accessed
using PuTTY/WinSCP with this private key)

is there something I must change on the side of the Fedora box or
something I have to change in PuTTY/WinSCP?
(I'm using the latest releases of PuTTY/WinSCP)

Many enterprise policies prohibit ssh access for root, but if you aren't

worried about security risks, look in /etc/sshsshd_conf's Authentication

section for "PermitRootLogin":

PermitRootLogin is set to yes;

and the same Problem also exists with non root, too;

/var/log/secure shows this:

Nov 20 15:11:33 lxfedora sshd[2584]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]

so the question is:  what is the default value of this 'PubkeyAcceptedAlgorithms', in order to set it to the default PLUS 'ssh-rsa';

Thanks,
Walter

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure