Hello.
How to “ssh-copy-id user@ssh.yourserver.org” when keyboard interactive is forbidden ?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
‘password’:
debug3: preferred publickey,keyboard-interactive,password
If you cannot get in with a password or keyboard-interactive then
perhaps kerberos will work (but I doubt it, since you’re asking this
question). Other options: Copy the file’s contents to the
~username/.ssh/authorized_keys file some other way. ssh-copy-id is a
really great command, but it isn’t magical at all… you just need to
get your public key onto the remote machine in a certain place securely.
Good luck.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/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=/22m
-----END PGP SIGNATURE-----
It is just a config question.
If your site config allow only key-pair authentication ( and so forbids keyboard interactive ) is there a way to copy the public key in authorized_key file (without using your usb stick).
From your local box you cannot yourself update the distant box as you cannot use keyboard interactive session.
Which come first the egg or the hen ?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
If this setting is enabled already and you lack access then you won’t
get access; that would defeat the purpose of the setting in the first
place. Either use an alternative method of access (as mentioned before)
or get somebody with access already to put your key public key in the
authorized_keys file for your desired user; they will likely need to
have ‘root’ access to do this in your user’s home directory unless they
are giving you rights to their user, which is also possible.
Good luck.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/
iQIcBAEBAgAGBQJQlp7oAAoJEF+XTK08PnB5b1gQALQ3YWD7vq+luYloQr27u6t8
W0vwWWptbzS2+hqxKQIU1yBimcXs+0f+pfoUX5gj1viV6BJgenr5lk0LlbEDq6ZE
kil8k9V/B6L3PJqUs8v/xB4urCxJmB5OdukVSGPv/Di5eI2MZFNU6y8YF+I03KqG
O2aZ9uekMV1bJ20RmFgjfy/IPFrcGGGLODtTsw5zk2PAc7UwzSVuCilScTAHgBYK
WGz2yW57k+aSTJfnnJ6DYs5pgSU9x8S2YZe5fyXM8GBPMRt3DKhosLhtf2jRzqwa
oZ9ExKQVs9h53lpp3FZNS4/DY6BQC1ZgIPM3hNtxN8fELr0BkyWzUC+RtW9GzdZf
s9LtHHmSxj8odzqbXj/IaVdg0lQ4emFtD/6p4SvdTRM9MUBBxnMWTnUgh0mblmFr
34AGDKWL3Nu//BahWHej8q1q+oCW/s1qeE0QuHOWgOhAuS/xnDF+xaRZBKmmFrD+
uSS3PQaXU3+G+qsFXVoypRabQMjME7v7fLJgOV0GcPdqNPS1LW1GPoVdkAONidal
6b163wArKWQlyQloOCqB+DzK3uM0zlXcuK+BwDhjBe2HK+ojQ/aX1OIs/t10+ebW
tiBhbtgFHi2ijCQtU8R54ukA6VvR34Hyp09ev1juAT2cQR93dIUFSoVGqrwst0qE
NAzQDFvgyfILj6httdMj
=QoeQ
-----END PGP SIGNATURE-----
The usual method for handling that, is to send an email to the system administrator for the site, with your public key (but not your private) included in the email. The mail should ask the system admin to setup public key authentication for you, using that key.
Thank you for helping.
Thread is closed