0

I'm trying to use my authentication subkey as an SSH identity. I have gotten ssh-add to display my smartcard containing this subkey, but when I try to ssh, it does not seem to use this subkey as an identity.

When ssh-ing with ssh -vvv

debug3: send packet: type 50
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey
debug3: start over, passed a different list publickey
debug3: preferred publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Offering RSA public key: /home/wilhelm/.ssh/id_rsa
debug3: send_pubkey_test
debug3: send packet: type 50
debug2: we sent a publickey packet, wait for reply
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey
debug1: Offering ED25519 public key: /home/wilhelm/.ssh/id_ed25519

ssh-add -l

4096 SHA256:*** cardno:*** (RSA)
4096 SHA256:*** (none) (RSA)
4096 SHA256:*** /home/wilhelm/.ssh/id_rsa (RSA)
  • This only seems to be a log excerpt, are there any further log lines following? – Jens Erat Aug 17 '17 at 19:40
  • @JensErat Yes there are, but none are out of the ordinary. It doesn't seem to take notice of my GPG authentication subkey – Wilhelm Erasmus Aug 17 '17 at 23:18
  • Some more lines seem pretty relevant: is SSH accepting any keys, completely denying authentication, switching to password authentication, ... -- at least all authentication-related lines (including the final result) are definitely relevant and required for any proper answer to your question. – Jens Erat Aug 18 '17 at 5:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.