Ask Your Question
1

"UNPROTECTED PRIVATE KEY FILE" prevents to SSH into cloud images

asked 2014-06-04 04:36:25 -0600

Deeptanshu gravatar image

updated 2014-06-06 10:49:19 -0600

smaffulli gravatar image

I have downloaded many images from the Image Guide in openstack's documentation. We are able to create instances properly and it is working fine too, as it is showing login prompt from VNC console. When i am trying to login through SSH with generated key pair from horizon ,it end up with the error listed below. In this i have used fedora image with fedora username.

 SSh Method =  ssh -i test.pem  fedora@x.x.x.x

Is there any issue with the Security Group? SSH port is open and already tested.

Please suggest any solution.

$ ssh -i test.pem  fedora@x.x.x.x
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

Permissions 0777 for 'test.pem' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
bad permissions: ignore key: test.pem
Permission denied (publickey,gssapi-keyex,gssapi-with-mic).
edit retag flag offensive close merge delete

2 answers

Sort by ยป oldest newest most voted
5

answered 2014-06-04 04:46:10 -0600

SGPJ gravatar image

Make sure ssh rule in security group is available You must give permission 400 to private key not 777.

edit flag offensive delete link more

Comments

Hi,

SSH rule is already enabled. Permission is changed still getting the same error.


Ingress IPv4 TCP 22 (SSH) 0.0.0.0/0 (CIDR)


ssh -i test.pem fedora@X.X.X.X

Permission denied (publickey,gssapi-keyex,gssapi-with-mic).

Deeptanshu gravatar imageDeeptanshu ( 2014-06-04 04:54:28 -0600 )edit

Try:- $ssh -l fedora -i test.pem X.X.X.X

dbaxps gravatar imagedbaxps ( 2014-06-04 06:34:50 -0600 )edit

Resolved !!

Issue with the permission.It should be 0400.

Deeptanshu gravatar imageDeeptanshu ( 2014-07-03 05:37:33 -0600 )edit
1

answered 2014-07-03 05:45:09 -0600

SGPJ gravatar image

good, you are correct.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

Stats

Asked: 2014-06-04 04:36:25 -0600

Seen: 1,306 times

Last updated: Jun 06 '14