linux


Trying to connect to host using SSH CA


I'm trying to setup SSH certificate authorization, by configurin my certificate authority to authenticate users to my server.
I generate a new set of keys, which will I use to sign user
ssh-keygen -f users_ca
Then, I modify SSH daemon configuration to look for this, I open
/etc/ssh/sshd_config
and at the bottom I add the line:
TrustedUserCAKeys /etc/ssh/users_ca.pub
So these changes would take place, I restart SSH daemon
sudo service ssh restart
Then I transfer user's id_rsa.pub on server and sign with
ssh-keygen -s users_ca -I user_username -n username -V +52w id_rsa.pub
That gives me id_rsa-cert.pub file which I transfer to user and by that being done, user should connect to server without any problem.
But, when the user tries to connect using
ssh user#server.com
it gets the following message
no such identity: /home/user/.ssh/id_ed25519: No such file or directory
user#server.com's password:
When I type in the server's password it connects without any problem, but it shouldn't ask for it. Funny thing is, when I do the same steps on the user in virtual machine which is on my server, it connects without asking for the key.

Related Links

Egrep and contains in BASH
Ipython Notebook (+ inline matplotlibplots) + shell + tmux
SVN Post-Commit Hook to Publish Website?
What is the lowest level open/public API through which Linux graphics system talks to the GPU?
Quick way to modify to multiple filenames in Linux
disable automatic line wrapping in Ubuntu terminal
How to use tee with sshpass in shell script
about Process control block in OS
Understanding /proc/iomem
copy a whole folder to SFTP server
How to get data from file with tail and awk
How to release hugepages from the crashed application
Linux startup init.d file always fails with following bash, whats wrong?
Identify library calls in assembly
confusion setting up i2p base32 with 52 characters
Find all instances of word occurring in a file

Categories

HOME
scala
powershell
cognos
methods
nfc
io
bi-publisher
transition
dropdown
drjava
aes
primavera
android-manifest
backgrid
spreadsheet
directed-acyclic-graphs
tfs2017
profiler
prepared-statement
filebeat
cefsharp
point-clouds
coordinate-systems
legend
genie
refresh
nsattributedstring
transactional-replication
systemtap
android-asynctask
mspec
global
pebble-sdk
finite-state-machine
sdwebimage
diskspace
baseline
gpuimage
gnulib
manager
matter.js
xpath-2.0
contravariance
computation
libwebsockets
cpputest
asp.net-identity-3
web-ide
windows-azure-networking
sikuli-ide
ng-flow
tsql-sequence
appkit
single-table-inheritance
unity3d-2dtools
warehouse
acs
yeogurt
hyperdex
documentum-dfc
twitter-bootstrap-tooltip
kuali
pcm
google-voice-search
objectaid
string-split
react-router-component
bitrise
openoffice-base
entry
edges
postgresql-8.2
grunt-init
nsmanagedobjectcontext
django-fixtures
projectile
authorize-attribute
pointer-to-array
xenu
xinha
verify
rman
server-side-includes
pls-00103
scroller
getscript
twofish
request.querystring
virtualfilesystem
tlv
tablelayoutpanel

Resources

Mobile Apps Dev
Database Users
javascript
java
csharp
php
android
MS Developer
developer works
python
ios
c
html
jquery
RDBMS discuss
Cloud Virtualization
Database Dev&Adm
javascript
java
csharp
php
python
android
jquery
ruby
ios
html
Mobile App
Mobile App
Mobile App