Cannot SSH-COPY-ID to unifi device.

[lslamp]

I have tried to follow your instructions It might be that I am misunderstanding the where and what to copy.
Please clarify if I am doing something incorrectly.
On my zabbix server, in my users home directory, I ran all the necessary commands.

sudo mkdir ~/.ssh/zabbix && sudo chown zabbix ~/.ssh/zabbix && cd ~/.ssh/zabbix
sudo -u zabbix ssh-keygen -P "" -t rsa -m pem -f zb_id_rsa

This is the results. As you can see the files are owned by zabbix.
username@zabbix:$ ls -ltr .ssh/zabbix/
total 8
-rw-r--r-- 1 zabbix zabbix 567 Apr 26 12:16 zb_id_rsa.pub
-rw------- 1 zabbix zabbix 2455 Apr 26 12:16 zb_id_rsa
username@zabbix:$ sudo -u zabbix ssh-copy-id -i /home/username/.ssh/zabbix/zb_id_rsa 192.168.1.1

/usr/bin/ssh-copy-id: ERROR: failed to open ID file '/home/username/.ssh/zabbix/zb_id_rsa.pub': Permission denied

I have also added the public key into the unifi controller. This was no issue.

Is it possible that I should do the ssh-copy-id to the unifi server and not to my gateway?

I also tried your script that you created.

username@zabbix:~$ ./updatePublicKey.sh -i /home/username/.ssh/zabbix/zb_id_rsa -u zabbix -R -4 -n user@192.168.1.1

Host 192.168.1.1 found: line 12

/home/username/.ssh/known_hosts updated.
Original contents retained as /home/username/.ssh/known_hosts.old
Warning: Identity file /home/username/.ssh/zabbix/zb_id_rsa not accessible: Permission denied.
Need to update public key for user@192.168.1.1
Password:
Password:
username@zabbix:~$

Thanks for your input with what I am doing wrong.
Lawrence

[patricegautier]

Clearly a permission issue..

How about the permissions on the directory /home/username/.ssh/zabbix/ ?

Also what user are you when you run those commands?

[lslamp]

Dear @patricegautier

I am pretty sure that the username is not important because I am using sudo to run the commands. (as advised on the notes.)

I do not want to publish my username on an open forum.
below is the answer to your question.

username@zabbix:$ ls -ltra
total 136
drwxr-xr-x 4 root root 4096 Jun 26 2022 ..
-rwxr-xr-x 1 username username 2898 Apr 25 19:23 updatePublicKey.sh
drwxr-xr-x 15 username username 4096 Apr 25 19:30 .
drwx------ 3 username username 4096 Apr 30 14:46 .ssh
username@zabbix:$ ls -ltr .ssh/
-rw------- 1 username username 1147 Apr 22 12:18 authorized_keys
-rw-r--r-- 1 username username 3404 Apr 25 21:21 known_hosts.old
drwxr-xr-x 2 zabbix zabbix 4096 Apr 26 12:16 zabbix
-rw-r--r-- 1 username username 3182 Apr 30 14:45 known_hosts
username@zabbix:$ ls -ltr .ssh/zabbix/
total 8
-rw-r--r-- 1 zabbix zabbix 567 Apr 26 12:16 zb_id_rsa.pub
-rw------- 1 zabbix zabbix 2455 Apr 26 12:16 zb_id_rsa
username@zabbix:$

Is it possible that the .ssh/zabbix directory should be placed in a different location.
My zabbix user is a system user and as such does not have a home directory and cannot login.

Thanks
Lawrence

[patricegautier]

I don’t see anything obviously wrong.. Try: sudo -u zabbix ssh-copy-id -x -i /home/username/.ssh/zabbix/zb_id_rsa 192.168.1.1 That might yield a clue.. -P

…

On May 1, 2024, at 11:19 PM, lslamp ***@***.***> wrote: I am pretty sure that the username is not important because I am using sudo to run the commands. (as advised on the notes.) I do not want to publish my username on an open forum. below is the answer to your question. ***@***.***:$ ls -ltra total 136 drwxr-xr-x 4 root root 4096 Jun 26 2022 .. -rwxr-xr-x 1 username username 2898 Apr 25 19:23 updatePublicKey.sh drwxr-xr-x 15 username username 4096 Apr 25 19:30 . drwx------ 3 username username 4096 Apr 30 14:46 .ssh ***@***.***:$ ls -ltr .ssh/ -rw------- 1 username username 1147 Apr 22 12:18 authorized_keys -rw-r--r-- 1 username username 3404 Apr 25 21:21 known_hosts.old drwxr-xr-x 2 zabbix zabbix 4096 Apr 26 12:16 zabbix -rw-r--r-- 1 username username 3182 Apr 30 14:45 known_hosts ***@***.***:$ ls -ltr .ssh/zabbix/ total 8 -rw-r--r-- 1 zabbix zabbix 567 Apr 26 12:16 zb_id_rsa.pub -rw------- 1 zabbix zabbix 2455 Apr 26 12:16 zb_id_rsa ***@***.***:$ — Reply to this email directly, view it on GitHub <#115 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AJFHTJ3G354P2XOE2PFJ5NTZAHLGHAVCNFSM6AAAAABHAGF7XGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDAOBZGY3TGMRRHA>. You are receiving this because you commented.