My pfsense failed an audit by securitymetrics.com

[kapara]

Here is a new example:

ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAIBb5HVQf5Nbdu6+bC2dE2bM1ZNC/7USV/jJRcRNtBSu9plZCEAz4BRwCkMiuHlFNHT+FO6fjcdg9Jzb/csZ8SyVP9wY0iSDYeDd9eY5N04LceCGb2AxqrL24a09BftVSlQnXvbsPaume+fKgVVMo6NCDoUhPI917PUyIlNZ8YBD9w== rsa-key-20100303

I pasted this into System:Advanced:Secure Shell:Authorized Keys.  Saved.

Then open Putty and loaded session with internal pfsense IP.  Clicked on Auth in Putty and browsed to the Private.pkk file which I downloaded from puttygen.

Fail.  ???

[jlepthien]

Yep. That sounds about right. Are you running 1.2.3 also?

[kapara]

1.2.3-RELEASE
built on Mon Dec 7 20:21:30 EST 2009

[kapara]

Should I remove:  rsa-key-20100303 from the end of the key?

[jlepthien]

Nope. I have that, too….

Please check when logged in that the key is really there....

cat .ssh/authorized_keys

[kapara]

you mean check via winscp?

[jlepthien]

No. Login via putty and ssh. And then do that command in /root

[kapara]

Seems to be going from Bad to worse.

I deleted the key and unchecked the box disabling password for SSH.  No when I connect I get:

Disconnected:  No Supported authentication methods available.

[jlepthien]

Use your console to connect to the box…

[kapara]

ok.  Disables SSH and enabled and now I am back in.

cat: .ssh/authorized_keys: No such file or directory

[kapara]

Ok.  So I repasted info and connected with private ket and got the following:

login as: root
Server refused our key
Using keyboard-interactive authentication.
Password:

Though I was able to get through….

[jlepthien]

Also when you login as 'admin'?

[kapara]

I am able to get in no matter what…

[jlepthien]

Log in again and then do:

• cd /root
• cd .ssh
• ls -la (post output, there should be a authorized_keys files after you pasted your key via GUI)

Are you running on embedded?

[kapara]

Yes Embedded….

[1.2.3-RELEASE]                                                                [root@wall.test.local]/root(1): cd /root
[1.2.3-RELEASE]                                                                [root@wall.test.local]/root(2): cd .ssh
[1.2.3-RELEASE]                                                                [root@wall.test.local]/root/.ssh(3): ls -la
total 1
drwx–----  2 root  wheel  512 Mar  4 07:49 .
drwxr-xr-x  4 root  wheel  512 Mar  4 05:08 ..
[1.2.3-RELEASE]                                                                [root@wall.test.local]/root/.ssh(4):

[jlepthien]

So there is something wrong with your install. The authorized_keys file does not get created.

Try this:

• /etc/rc.conf_mount_rw
• then create the file manually with e.g. vi /root/.ssh/authorized_keys and paste in your key
• /etc/rc.conf_mount_ro

Then check again…

[kapara]

vi/root/.ssh/authorized_keys: Command not found.

[kapara]

here is a screen shot via winscp….

[jlepthien]

vi and a [space] after that…

[jlepthien]

@kapara:

here is a screen shot via winscp….

So? That is /etc/ssh and on your box…
You generated the key on your windows system, didn't you?
The keys need to be in /root/.ssh/