On 13Aug2023 23:23, François Patte <francois.patte@xxxxxxxxxxxxxxxxxxxx> wrote:
Since I upgraded to f38 it is impossible to connect to a machine using
ssh rsa-key....
the file .ssh/authorized_keys has not change, but any remote
connection to this machine asks for a password....
Is there something to change with selinux?
Almost certainly not. If it were selinux you wouldn't get a connection.
More likely you're not offering the RSA key any more or the remote isn't
accepting it. Run "ssh -v" to see what's happening. Here's some example
output from a run here:
[...]
debug1: Will attempt key: /home/cameron/.ssh/id_ecdsa ECDSA SHA256:********************* agent
debug1: Will attempt key: /home/cameron/.ssh/id_ed25519 ED25519 SHA256:********************* agent
debug1: Will attempt key: /home/cameron/.ssh/id_dsa DSA SHA256:********************* agent
debug1: Will attempt key: /home/cameron/.ssh/id_rsa
debug1: Will attempt key: /home/cameron/.ssh/id_ecdsa_sk
debug1: Will attempt key: /home/cameron/.ssh/id_ed25519_sk
debug1: Will attempt key: /home/cameron/.ssh/id_xmss
[...]
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Offering public key: /home/cameron/.ssh/id_ecdsa ECDSA SHA256:9UgXjVSJOlQUHfv25eXgy2fU/RiUJBsK10q4xCvefBs agent
debug1: Server accepts key: /home/cameron/.ssh/id_ecdsa ECDSA SHA256:9UgXjVSJOlQUHfv25eXgy2fU/RiUJBsK10q4xCvefBs agent
[...]
I suspect some ssh configuration has changed with the upgrade, possibly
in /etc/ssh/ssh_config. Certainly some key types (or smaller sizes) fall
out of favour as they become inadequately secure.
Cheers,
Cameron Simpson <cs@xxxxxxxxxx>
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
