Linux Tutorial for Beginners - 15 - SSH Key Authentication

[@VANTYCSolutions]

I wish that everyone explained things like you.

[@bmwd4000]

I remember this channel. I previous had a Java class that I used this channel for and it honestly saved my *. It was extremely in-depth and VERY helpful.

[@gnuPirate]

Hey mate. Thank you for this awesome little series. I am getting a lot out of it. My only feedback with terminal commands, is : As you go along explaining a command, if you know what the letters happen to stand for or signify, I personally find it really helpful to know what words the letters or abbreviations stand for. It helps me remember. Like , ssh-keygen is easy for me to remember, because I know it stands for secure soft shell, which is the common type of secure connection -- and keygen is obvious and common, but what is -t , and rsa? Yes, I know I can look it up (and I will), but as long as you're explaining things if you continue in future, I would find that helpful along the way. Again, I really appreciate the vids. Cheers !

[@motivees3934]

don't you know he don't make videos any more "thenewboston"😢 its been 4 years

[@swimmingshi]

-t means type I guess, rsa is an encryption algorithm. Always google things you do not understand before asking

[@wizhaa]

@@swimmingshi he literally said “yes I know I can look it up and I will” but explaining that is still useful rather than heading to pause the video and Google

[@draco5991rep]

I still have to type in my passphrase for the keyfile, because I set one. Just to let everyone know that if you set a passphrase you will have to enter it before you can connect to the server. You won't have to type your password for the user on the server, you will have to type the *passphrase* for the key you created. I recommend to set a passphrase for keys you use on a client that is a laptop, smarphone or anything that can easily be stolen or lost. If you have a stationary workstation at home however, it is up to you if you think the extra bit of security is worth it or not. I always do protect my key files with a passphrase because I am a paranoid fecker and live in a shady neighbourhood where people get robbed all the time. Everyone should think about the appropiate threat model for their purpose, if you never have analysed it before sit down for a couple hours and think about it, it is worth it.

[@jeremy_s]

1.5M subs! Dude you need to start making some more videos, they are so good. And the potential you have with an audience this big!

[@earnestredwood4694]

Thank you my friend this still works. This is why I love Linux.

[@yaswanthreddyb3224]

Thanks Bro. Now I understood clearly, you made my life simple. :)

[@crischl6814]

Men i really love your videos! Very short and concise. Greetings from Chile!

[@lands1459]

i don't understand. so run ssh-keygen on the server, copy the public key into authorized keys and copy the private to my laptop? because i can't connect to my server like this, it says permission denied publickey.

[@wallaguest1]

not clear, what the ssh-copy-id is for? i dont get it, and where the private key is stored in your computer? i dont see it anywhere, i am confused,

[@life_in_gen]

Question! So you upload the key to the server?? What if anybody just did the same thing you did, because when you send it, it didnt even ask for a password first. Thats kind weird

[@annalisetrite7281]

It did ask him for a password and he says something about it at 2:44 "after you type in your password"

[@draco5991rep]

After you type the command ssh-copy-id the server will ask you to enter the correct password to access the server. After the public key is installed whenever you connect with the client that have the corresponding private key you will be loged in without being asked about the password. If you however set a passphrase for your key, the server will ask for the passphrase, because the key file will be encrypted. I do recommend to use a passphrase if you want to connect from a laptop to your server. Because if someone steals your Laptop and it isn't encrypted he can simply read or copy the private key file from it, but if you set a passphrase for the key, the private key file itself will be encrypted and only if you have the correct passphrase you will be able to read the real private key and access the server. The advantage is if you have a PC at home from which you want to connect to your server, then you not necessairly have to set a passphrase for your key because it is quite unlikely that someone happens to steal your PC. I always use a passphrase on my key files, because I am a paranoid fecker. It is unlikely that someone steals your PC because he first have to gain access into your home (a laptop can be quickly swiped from a table in a coffee shop or so) but it is not impossible. So if you have any compromising and important data on the server, you are perhaps the type of person who should still set a passphrase for your key to be on the safe side.

[@sajadtorkamani9399]

Awesome tutorial. You make learning so easy and fun!

[@coolraspyhobbit4723]

I realize this is an old video, but i cant find where the public key on my server went, and i want to delete it and put a new one on there. Is that possible? Im sorry if this is such a stupid question but im just barely learning about ssh keys literally today so its all new to me

[@lavredisgoume]

When creating the keys, what is the meaning of "The key fingerprint is: 16:3f:..... bucky@Ubuntu"?

[@shaarifhamdulay2930]

What if I wanna add the private key to a USB stick, so i could give it to a friend to access my server? Also how to copy public key without ssh-copy-id if i have chosen non default location?

[@lexolim5571]

If I used this, I could theoretically use a script that downs servers not using DNS or HTTP loadbalancing in the SSH session, correct?

[@pratibhakumari4870]

Sir my command is not runing after ...ssh-copy-id root@.ip add....n when entered Mein terminal screen is blank What should I do.. help me....??

[@aishaali4550]

Super Simple demonstration that really works!

[@jheffmat3263]

thanks for this short explanation, very clear; :)

[@cahelmsjr20008]

Clear and right to the point. Well done.

[@MultiChinmay]

Hi.. Great work on the series. Loved it. should i have separate ssh key for every other service like (aws, github, other services) or should i use the same exact key id_rsa for all services? what is recommended ?

[@lavredisgoume]

I have the same question, but I think one does the job since it's like a public lock you share to everyone, and you are the owner of the key that unlocks it. So by generating new ssh keys it would be like having a new (lock, key) pair for every connection.

[@21metalGears]

Bro, I love you so much! ❤️❤️❤️❤️❤️❤️❤️❤️❤️❤️❤️❤️❤️❤️❤️❤️❤️❤️❤️❤️❤️ You saved my day!

[@alexanderdelarosa8028]

so has the public key been added to server or the computer?

[@ivanbarbot4]

but when you enter a password, which password is that? you shuold mention that in the video

[@devBuddy]

Nice tutorial man! thanks a lot it helped me so much. I would like to add something: sometimes when you want to connect to your server to add the RSA key, server will prompt an error SSH :connect to host 123.456.7.8 port 22: Connection refused sometimes this is due you must connect with a different port to your server, this article was very helpful for me to solve that: superuser.com/questions/977104/ssh-connect-to-host-localhost-port-22-connection-refused basically I had to add a parameter called -p which tells to the shell which port must be used to connect to the server for example: ssh -p 123456 root@123.456.7.8 -p 123456 -> port for ssh connection 123.456.7.8 -> ip of the server root -> user which is trying to connect so to add the key using a different port ssh-copy-id -p 123456 -i root@123.456.7.8 hope this helps Best regards

[@wolfganggermain7175]

OOW, it's been awhile, thanks all the tuts men keep it up

[@medagam5527]

sir, i am using ubuntu 16.04 on linux ,would you please help me i really stuck at this problem. And after i used "reboot" in terminal ,it began to shutdown. But it does not works fine. it says "your system is running in low graphics mode", and also it says "you need to reconfigure yourself". Please help me after this i am facing problem "please give me steps to fix this error"... Thankinking you sir.

[@parasch699]

what if some other people generate different rsa keys and copy to our server? Can rsa key be replaced with a new one without deleting it?

[@kingjack8436]

love it! simple easy to understand

[@rj11wacat]

Can you do this on multiple computers or only one (i.e. after you make a key with one computer no other computer will be able to connect to the server)?

[@kornflakes107]

George Foley In most cases, ssh-keygen should be run once per computer. Servers can store multiple public keys.

[@amandaszampias5006]

Awesome! I didn't know about ssh-copy-id

[@R0N1N-TV]

"Boom roasted."

[@pacsam6369]

Hi man, when I try to connect to the server it gaves me the error "Host verification failed.". What can I do? P.s i don't have the known_host file...idk why

[@MrHaashimAlvi]

I think you entered the wrong password to login to your server

[@MrHaashimAlvi]

make sure the sure the, username, ip and password are correct.

[@ScreenPrintR]

As always you're the best. Thanks Bucky!!!

[@ardikasulistija6574]

After running 'ssh-copy-idea user@x.x.x.x', when I try to ssh into 'user@x.x.x.x' I get error: sign_and_send_pubkey: signing failed: agent refused operation... Anyone know how to fix this?

[@ashwajitthukral9101]

its ssh-copy-id not idea

[@vromp5able]

Skip to 1:24 for the actual tutorial.

[@bryansillman3240]

Hello New Boston... Reaching out... Hope all is well... Did you ever do a vid on RAID 1? I think you did once... Just wanted to check... Regards, Bryan

[@davidmejia9601]

hi, can anybody help me... I followed all the steps but the terminal requer me for a password i don't know why?

[@tenancingogarcia]

Hey how can I solve this I have a ssh server I want to tunnel all my internet data from the server I have a ssh client I want the client to connect to the internet using the tunnel from the server I'm able to connect to the server using ssh server_username@server_ip_addres But client doesn't receive any internet from the server tunnel Can you help me figure out Is this possible

[@LivinginSouthChina]

Frigging terrific! Hat's off and thank you!

[@sumertheory]

awesome video. thank you.

[@ranyoyb7738]

hey thenewboston thank you for video ! i have traineeship in small company and they asked me to deny the root and allow five specific users! the situation is like this: there is 5 users: admin , B , C , D , E and all these five are enables to log in SSH , and each one have password, but the problem no one of them i can log in from the terminal ! only the root and the password for the root is soho'admin password' ! how can i change that to deny the root from log in and enable the rest 5 users ? * i tired all the ways that i find in google and forums ... with allowusers ... no-password .. change port to 7722 / 9922 / 2222/ 1234 ... Thanks again, rzoyb

[@tenminutetokyo2643]

What about adding ssh access for existing users.

[@Xxracerx]

i got this error "Agent Admitted Failure to sign using the key". Any help?

[@JiSeongPlus]

+vishawdeep pathania ssh-add help.github.com/articles/error-agent-admitted-failure-to-sign/

[@TWOxGINGEZz]

how do I do this with putty? pls help

[@StreetSmartification]

I think its even riskier not having to authenticate and with just ssh and knowing the ip, you are in the server vs password. This scenario applies to, for example, leaving your computer unattended.

[@GerardoBelot]

Nice to see Bucky on Linux force XD

[@amitmandaviya]

Good tutorial.

[@AdemolaAlabi]

This is Awesome and Simple.... Thank you

[@MR-vj8dn]

But what if the keys mismatch?

[@Rumbus528]

I don't know what the 57 degenerates that down-voted this are smoking, but this was perfectly explained. Thank you!

[@ThePositiev3x]

At 1:56. What password it is asking?

[@andrearitavasko8626]

Kubilay Yazoğlu the password of the root user

[@brookroger2180]

thank you, you really help me at work :)

[@srgk26]

Very helpful! Thank you

[@Justinsatiable]

ssh-copy-id command not found.....

[@irajnorouzi3974]

greate man very very good toturial tanks

[@inkball7558]

Hello thanks for making this, very helpful :-)

[@AleksandarAleksiev_]

We now know your password. It has leaked over the Internet ;) Aside from the joke - nice explanation. Thank you!

[@poornisridhar270]

Hi thanks for the video. Getting permission denied public key password. While doing scp from jenkins to remote server

[@glorytogod4372]

How do I find the correct ip address?

[@cedchanseaulme1648]

ifconfig

[@zhag]

but if you use centos minimal you should install net-tools

[@fernandoluis53]

how do u change username root?

[@PeterMIcedVoltage]

+yashfernandojain you don't - just make another account with super user privileges.

[@samerjameel95]

thank you

[@ragineetitar310]

Awesome vdo..thnx:)

[@otoelpilot0]

Thanks Bro!

[@medagam5527]

i watched ur video but would please provide me grep usage also ..thanking you.

[@Ghostinyoutube99]

very helpful

[@juhimughal9469]

unable to copy ssh id

[@bobfl42]

Great that was so easy..

[@NoName-pz7mk]

Didn't explain what -t and rsa mean

[@igorordecha]

Nooooow i finally understand it!

[@deedeemegadoodoo8642]

Sir your tutorials are really helpful but i hope you know the proper usage of "Boom! Roasted"

[@isakneuman9995]

1:35 start

[@isrj01]

so cool

[@leonardo5277]

love u

[@samanand3824]

Boom Thanks

[@pappasmurff324]

anyone getting an error message should try cd /home//.ssh when in your home ssh folder do everything he said and it should work ssh-keygen -t rsa

[@samuelwinkler545]

should had shown the sshd_config settings..

[@cenubit]

From Windows10 BASH this not work

[@kennethbass4755]

Try use the Secured Shell App for windows based o/s. It lets you use all Linux shell commands

[@CassiusGiorgio]

Wowww, now use id_rsa make sense...thanks!!!

[@epowouid6715]

Thnx dude

[@DarkWhisperer13]

that cool bro

[@vvkgdm]

kawai @ 2:52

[@FreshMahogany]

Dash… it’s a dash.

[@SaltVinegar2010]

TheMilkRoad? Is that a play off on the SilkRoad? LOL

[@adkl]

+Highway Phantom cant believe how stupid u are

[@SaltVinegar2010]

ADKL Me not stupid. Me understand everything. You idiot.

[@adkl]

just kidding

[@matttintoshplus5369]

1:21 AM gg

[@bloodmasto123]

hey really nice vids! really helpfull but can you also make a video how tochange your IP from DHCP into a STATIC IP (because if i follow other tutorials they say you have to go to /etc/network/interfaces for static ip but for some reason i only have loopback network interface instead of the loopback + primary network interface. and if i type the primary network interface and restart my network then my vm has no internet acces anymore and its a mess :/ :) but still keep making the ubuntu vids !! realy helpfull

[@bloodmasto123]

***** thx going to try this in a few minutes :)

[@theeverythingyoucanimagine8123]

ssh be verwe verwe quiet!

[@goow4822]

如果是中文字幕就更好了

[@user-gx8pr4rb2m]

Fist!

[@RetardedGuyxD]

ROASTE D

[@monkeykid66]

NIGGA YOU JUST GOT ROASTED YOWWW YOWWWW