centos7 免密登陆 问题跪求！

Question

问题:设置免密登陆还是需要输入密码环境：centos7.6尝试解决了以下问题还是无法实现免密登陆：/root/root/.ssh/root/.ssh/authorized_keys文件权限问题/etc/ssh/sshd_config文件配置问题日志:/var/log/secure的日志Jun1319:01:42edcsshd[23062]:Authenticationrefused:badownershipormodesfordirectory/root[[e-mail]]#ssh-vvvroot@edcOpenSSH_7.4p1,OpenSSL1.0.2k-fips26Jan2017debug1:Readingconfigurationdata/etc/ssh/ssh_configdebug1:/etc/ssh/ssh_configline49:Applyingoptionsfor*debug2:resolving"edc"port22debug2:ssh_connect_direct:needpriv0debug1:Connectingtoedc[10.0.2.25]port22.debug1:Connectionestablished.debug1:permanently_set_uid:0/0debug1:identityfile/root/.ssh/id_rsatype1debug1:key_load_public:Nosuchfileordirectorydebug1:identityfile/root/.ssh/id_rsa-certtype-1debug1:key_load_public:Nosuchfileordirectorydebug1:identityfile/root/.ssh/id_dsatype-1debug1:key_load_public:Nosuchfileordirectorydebug1:identityfile/root/.ssh/id_dsa-certtype-1debug1:key_load_public:Nosuchfileordirectorydebug1:identityfile/root/.ssh/id_ecdsatype-1debug1:key_load_public:Nosuchfileordirectorydebug1:identityfile/root/.ssh/id_ecdsa-certtype-1debug1:key_load_public:Nosuchfileordirectorydebug1:identityfile/root/.ssh/id_ed25519type-1debug1:key_load_public:Nosuchfileordirectorydebug1:identityfile/root/.ssh/id_ed25519-certtype-1debug1:Enablingcompatibilitymodeforprotocol2.0debug1:LocalversionstringSSH-2.0-OpenSSH_7.4debug1:Remoteprotocolversion2.0,remotesoftwareversionOpenSSH_7.4debug1:match:OpenSSH_7.4patOpenSSH*compat0x04000000debug2:fd3settingO_NONBLOCKdebug1:Authenticatingtoedc:22as'root'debug3:hostkeys_foreach:readingfile"/root/.ssh/known_hosts"debug3:record_hostkey:foundkeytypeECDSAinfile/root/.ssh/known_hosts:1debug3:load_hostkeys:loaded1keysfromedcdebug3:order_hostkeyalgs:preferhostkeyalgs:[e-mail],[e-mail],[e-mail],ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521debug3:sendpacket:type20debug1:SSH2_MSG_KEXINITsentdebug3:receivepacket:type20debug1:SSH2_MSG_KEXINITreceiveddebug2:localclientKEXINITproposaldebug2:KEXalgorithms:curve25519-sha256,[e-mail],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-cdebug2:hostkeyalgorithms:[e-mail],[e-mail],[e-mail],ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,[e-mail],[e-mail],[e-mail],ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dssdebug2:ciphersctos:[e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],[e-mail],aes128-cbc,aes192-cbc,aes256-cbcdebug2:ciphersstoc:[e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],[e-mail],aes128-cbc,aes192-cbc,aes256-cbcdebug2:MACsctos:[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-sha1debug2:MACsstoc:[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-sha1debug2:compressionctos:none,[e-mail],zlibdebug2:compressionstoc:none,[e-mail],zlibdebug2:languagesctos:debug2:languagesstoc:debug2:first_kex_follows0debug2:reserved0debug2:peerserverKEXINITproposaldebug2:KEXalgorithms:curve25519-sha256,[e-mail],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1debug2:hostkeyalgorithms:ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519debug2:ciphersctos:[e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],[e-mail],aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc,3des-cbcdebug2:ciphersstoc:[e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],[e-mail],aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc,3des-cbcdebug2:MACsctos:[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-sha1debug2:MACsstoc:[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-sha1debug2:compressionctos:none,[e-mail]2:compressionstoc:none,[e-mail]2:languagesctos:debug2:languagesstoc:debug2:first_kex_follows0debug2:reserved0debug1:kex:algorithm:curve25519-sha256debug1:kex:hostkeyalgorithm:ecdsa-sha2-nistp256debug1:kex:server->clientcipher:[e-mail]:compression:nonedebug1:kex:client->servercipher:[e-mail]:compression:nonedebug1:kex:curve25519-sha256need=64dh_need=64debug1:kex:curve25519-sha256need=64dh_need=64debug3:sendpacket:type30debug1:expectingSSH2_MSG_KEX_ECDH_REPLYdebug3:receivepacket:type31debug1:Serverhostkey:ecdsa-sha2-nistp256SHA256:TSpKfnuXf9K8PhEx0GJFRIbrlFVzYimsQ44la5Cxq3sdebug3:hostkeys_foreach:readingfile"/root/.ssh/known_hosts"debug3:record_hostkey:foundkeytypeECDSAinfile/root/.ssh/known_hosts:1debug3:load_hostkeys:loaded1keysfromedcdebug3:hostkeys_foreach:readingfile"/root/.ssh/known_hosts"debug3:record_hostkey:foundkeytypeECDSAinfile/root/.ssh/known_hosts:1debug3:load_hostkeys:loaded1keysfrom10.0.2.25debug1:Host'edc'isknownandmatchestheECDSAhostkey.debug1:Foundkeyin/root/.ssh/known_hosts:1debug3:sendpacket:type21debug2:set_newkeys:mode1debug1:rekeyafter134217728blocksdebug1:SSH2_MSG_NEWKEYSsentdebug1:expectingSSH2_MSG_NEWKEYSdebug3:receivepacket:type21debug1:SSH2_MSG_NEWKEYSreceiveddebug2:set_newkeys:mode0debug1:rekeyafter134217728blocksdebug2:key:/root/.ssh/id_rsa(0x55c9dee5eab0)debug2:key:/root/.ssh/id_dsa((nil))debug2:key:/root/.ssh/id_ecdsa((nil))debug2:key:/root/.ssh/id_ed25519((nil))debug3:sendpacket:type5debug3:receivepacket:type7debug1:SSH2_MSG_EXT_INFOreceiveddebug1:kex_input_ext_info:server-sig-algs=debug3:receivepacket:type6debug2:service_accept:ssh-userauthdebug1:SSH2_MSG_SERVICE_ACCEPTreceiveddebug3:sendpacket:type50debug3:receivepacket:type51debug1:Authenticationsthatcancontinue:publickey,gssapi-keyex,gssapi-with-mic,passworddebug3:startover,passedadifferentlistpublickey,gssapi-keyex,gssapi-with-mic,passworddebug3:preferredgssapi-keyex,gssapi-with-mic,publickey,keyboard-interactive,passworddebug3:authmethod_lookupgssapi-keyexdebug3:remainingpreferred:gssapi-with-mic,publickey,keyboard-interactive,passworddebug3:authmethod_is_enabledgssapi-keyexdebug1:Nextauthenticationmethod:gssapi-keyexdebug1:NovalidKeyexchangecontextdebug2:wedidnotsendapacket,disablemethoddebug3:authmethod_lookupgssapi-with-micdebug3:remainingpreferred:publickey,keyboard-interactive,passworddebug3:authmethod_is_enabledgssapi-with-micdebug1:Nextauthenticationmethod:gssapi-with-micdebug1:UnspecifiedGSSfailure.MinorcodemayprovidemoreinformationNoKerberoscredentialsavailable(defaultcache:KEYRING:persistent:0)debug1:UnspecifiedGSSfailure.MinorcodemayprovidemoreinformationNoKerberoscredentialsavailable(defaultcache:KEYRING:persistent:0)debug2:wedidnotsendapacket,disablemethoddebug3:authmethod_lookuppublickeydebug3:remainingpreferred:keyboard-interactive,passworddebug3:authmethod_is_enabledpublickeydebug1:Nextauthenticationmethod:publickeydebug1:OfferingRSApublickey:/root/.ssh/id_rsadebug3:send_pubkey_testdebug3:sendpacket:type50debug2:wesentapublickeypacket,waitforreplydebug3:receivepacket:type51debug1:Authenticationsthatcancontinue:publickey,gssapi-keyex,gssapi-with-mic,passworddebug1:Tryingprivatekey:/root/.ssh/id_dsadebug3:nosuchidentity:/root/.ssh/id_dsa:Nosuchfileordirectorydebug1:Tryingprivatekey:/root/.ssh/id_ecdsadebug3:nosuchidentity:/root/.ssh/id_ecdsa:Nosuchfileordirectorydebug1:Tryingprivatekey:/root/.ssh/id_ed25519debug3:nosuchidentity:/root/.ssh/id_ed25519:Nosuchfileordirectorydebug2:wedidnotsendapacket,disablemethoddebug3:authmethod_lookuppassworddebug3:remainingpreferred:,passworddebug3:authmethod_is_enabledpassworddebug1:Nextauthenticationmethod:passwordroot@edc'spassword:debug3:sendpacket:type50debug2:wesentapasswordpacket,waitforreplyeedpriv0debug1:Connectingtoedc[10.0.2.25]port22.debug1:Connectionestablished.debug1:permanently_set_uid:0/0debug1:identityfile/root/.ssh/id_rsatype1debug1:key_load_public:Nosuchfileordirectorydebug1:identityfile/root/.ssh/id_rsa-certtype-1debug1:key_load_public:Nosuchfileordirectorydebug1:identityfile/root/.ssh/id_dsatype-1debug1:key_load_public:Nosuchfileordirectorydebug1:identityfile/root/.ssh/id_dsa-certtype-1debug1:key_load_public:Nosuchfileordirectorydebug1:identityfile/root/.ssh/id_ecdsatype-1debug1:key_load_public:Nosuchfileordirectorydebug1:identityfile/root/.ssh/id_ecdsa-certtype-1debug1:key_load_public:Nosuchfileordirectorydebug1:identityfile/root/.ssh/id_ed25519type-1debug1:key_load_public:Nosuchfileordirectorydebug1:identityfile/root/.ssh/id_ed25519-certtype-1debug1:Enablingcompatibilitymodeforprotocol2.0debug1:LocalversionstringSSH-2.0-OpenSSH_7.4debug1:Remoteprotocolversion2.0,remotesoftwareversionOpenSSH_7.4debug1:match:OpenSSH_7.4patOpenSSH*compat0x04000000debug2:fd3settingO_NONBLOCKdebug1:Authenticatingtoedc:22as'root'debug3:hostkeys_foreach:readingfile"/root/.ssh/known_hosts"debug3:record_hostkey:foundkeytypeECDSAinfile/root/.ssh/known_hosts:1debug3:load_hostkeys:loaded1keysfromedcdebug3:order_hostkeyalgs:preferhostkeyalgs:[e-mail],[e-mail],[e-mail],ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521debug3:sendpacket:type20debug1:SSH2_MSG_KEXINITsentdebug3:receivepacket:type20debug1:SSH2_MSG_KEXINITreceiveddebug2:localclientKEXINITproposaldebug2:KEXalgorithms:curve25519-sha256,[e-mail],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-cdebug2:hostkeyalgorithms:[e-mail],[e-mail],[e-mail],ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,[e-mail],[e-mail],[e-mail],ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dssdebug2:ciphersctos:[e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],[e-mail],aes128-cbc,aes192-cbc,aes256-cbcdebug2:ciphersstoc:[e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],[e-mail],aes128-cbc,aes192-cbc,aes256-cbcdebug2:MACsctos:[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-sha1debug2:MACsstoc:[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-sha1debug2:compressionctos:none,[e-mail],zlibdebug2:compressionstoc:none,[e-mail],zlibdebug2:languagesctos:debug2:languagesstoc:debug2:first_kex_follows0debug2:reserved0debug2:peerserverKEXINITproposaldebug2:KEXalgorithms:curve25519-sha256,[e-mail],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1debug2:hostkeyalgorithms:ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519debug2:ciphersctos:[e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],aes256-gcm@opendebug3:receivepacket:type51debug1:Authenticationsthatcancontinue:publickey,gssapi-keyex,gssapi-with-mic,passwordPermissiondenied,pleasetryagain.root@edc'spassword:debug3:sendpacket:type50debug2:wesentapasswordpacket,waitforreplydebug3:send_pubkey_testdebug3:sendpacket:type50debug2:wesentapublickeypacket,waitforreplydebug3:receivepacket:type51debug1:Authenticationsthatcancontinue:publickey,gssapi-keyex,gssapi-with-mic,passworddebug1:Tryingprivatekey:/root/.ssh/id_dsadebug3:nosuchidentity:/root/.ssh/id_dsa:Nosuchfileordirectorydebug1:Tryingprivatekey:/root/.ssh/id_ecdsadebug3:nosuchidentity:/root/.ssh/id_ecdsa:Nosuchfileordirectorydebug1:Tryingprivatekey:/root/.ssh/id_ed25519debug3:nosuchidentity:/root/.ssh/id_ed25519:Nosuchfileordirectorydebug2:wedidnotsendapacket,disablemethoddebug3:authmethod_lookuppassworddebug3:remainingpreferred:,passworddebug3:authmethod_is_enabledpassworddebug1:Nextauthenticationmethod:passworddebug3:receivepacket:type51debug1:Authenticationsthatcancontinue:publickey,gssapi-keyex,gssapi-with-mic,passwordPermissiondenied,pleasetryagain.各文件权限：drwx------2rootroot80Jun1318:25.drwxr-xrwx.22rootroot4096Jun1303:33..-rw-------1rootroot1566Jun1318:25authorized_keys-rwxrwxrwx1rootroot1675Jun1318:22id_rsa-rwxrwxrwx1rootroot390Jun1318:22id_rsa.pub-rwxrwxrwx1rootroot175Jun1303:33known_hostssshd_config文件配置：#$OpenBSD:sshd_config,v1.802008/07/0202:24:18djmExp$#Thisisthesshdserversystem-wideconfigurationfile.See#sshd_config(5)formoreinformation.#ThissshdwascompiledwithPATH=/usr/local/bin:/bin:/usr/bin#Thestrategyusedforoptionsinthedefaultsshd_configshippedwith#OpenSSHistospecifyoptionswiththeirdefaultvaluewhere#possible,butleavethemcommented.Uncommentedoptionschangea#defaultvalue.#Port22#AddressFamilyany#ListenAddress0.0.0.0#ListenAddress::#Disablelegacy(protocolversion1)supportintheserverfornew#installations.Infuturethedefaultwillchangetorequireexplicit#activationofprotocol1Protocol2#HostKeyforprotocolversion1#HostKey/etc/ssh/ssh_host_key#HostKeysforprotocolversion2#HostKey/etc/ssh/ssh_host_rsa_key#HostKey/etc/ssh/ssh_host_dsa_key#Lifetimeandsizeofephemeralversion1serverkey#KeyRegenerationInterval1h#ServerKeyBits1024#Logging#obsoletesQuietModeandFascistLogging#SyslogFacilityAUTHSyslogFacilityAUTHPRIVLogLevelDEBUG3#Authentication:#LoginGraceTime2m#PermitRootLoginyesStrictModesno#MaxAuthTries6#MaxSessions10RSAAuthenticationyesPubkeyAuthenticationyesAuthorizedKeysFile.ssh/authorized_keysAuthorizedKeysCommandnoneAuthorizedKeysCommandRunAsnobody#Forthistoworkyouwillalsoneedhostkeysin/etc/ssh/ssh_known_hosts#RhostsRSAAuthenticationno#similarforprotocolversion2#HostbasedAuthenticationno#Changetoyesifyoudon'ttrust~/.ssh/known_hostsfor#RhostsRSAAuthenticationandHostbasedAuthentication#IgnoreUserKnownHostsno#Don'treadtheuser's~/.rhostsand~/.shostsfiles#IgnoreRhostsyes#Todisabletunneledcleartextpasswords,changetonohere!#PasswordAuthenticationyes#PermitEmptyPasswordsnoPasswordAuthenticationyes#Changetonotodisables/keypasswords#ChallengeResponseAuthenticationyesChallengeResponseAuthenticationno#Kerberosoptions#KerberosAuthenticationno#KerberosOrLocalPasswdyes#KerberosTicketCleanupyes#KerberosGetAFSTokenno#KerberosUseKuserokyes#GSSAPIoptionsGSSAPIAuthenticationno#GSSAPIAuthenticationyes#GSSAPICleanupCredentialsyes#GSSAPICleanupCredentialsyes#GSSAPIStrictAcceptorCheckyes#GSSAPIKeyExchangeno#Setthisto'yes'toenablePAMauthentication,accountprocessing,#andsessionprocessing.Ifthisisenabled,PAMauthenticationwill#beallowedthroughtheChallengeResponseAuthenticationand#PasswordAuthentication.DependingonyourPAMconfiguration,#PAMauthenticationviaChallengeResponseAuthenticationmaybypass#thesettingof"PermitRootLoginwithout-password".#IfyoujustwantthePAMaccountandsessioncheckstorunwithout#PAMauthentication,thenenablethisbutsetPasswordAuthentication#andChallengeResponseAuthenticationto'no'.#UsePAMnoUsePAMyes#Acceptlocale-relatedenvironmentvariablesAcceptEnvLANGLC_CTYPELC_NUMERICLC_TIMELC_COLLATELC_MONETARYLC_MESSAGESAcceptEnvLC_PAPERLC_NAMELC_ADDRESSLC_TELEPHONELC_MEASUREMENTAcceptEnvLC_IDENTIFICATIONLC_ALLLANGUAGEAcceptEnvXMODIFIERS#AllowAgentForwardingyes#AllowTcpForwardingyes#GatewayPortsno#X11ForwardingnoX11Forwardingyes#X11DisplayOffset10#X11UseLocalhostyes#PrintMotdyes#PrintLastLogyes#TCPKeepAliveyes#UseLoginno#UsePrivilegeSeparationyes#PermitUserEnvironmentno#Compressiondelayed#ClientAliveInterval0#ClientAliveCountMax3#ShowPatchLevelno#UseDNSyes#PidFile/var/run/sshd.pid#MaxStartups10:30:100#PermitTunnelno#ChrootDirectorynone#nodefaultbannerpath#Bannernone#overridedefaultofnosubsystemsSubsystemsftp/usr/libexec/openssh/sftp-server#Exampleofoverridingsettingsonaper-userbasis#MatchUseranoncvs#X11Forwardingno#AllowTcpForwardingno#ForceCommandcvsserverssh_config配置：#$OpenBSD:ssh_config,v1.252009/02/1701:28:32djmExp$#Thisisthesshclientsystem-wideconfigurationfile.See#ssh_config(5)formoreinformation.Thisfileprovidesdefaultsfor#users,andthevaluescanbechangedinper-userconfigurationfiles#oronthecommandline.#Configurationdataisparsedasfollows:#1.commandlineoptions#2.user-specificfile#3.system-widefile#Anyconfigurationvalueisonlychangedthefirsttimeitisset.#Thus,host-specificdefinitionsshouldbeatthebeginningofthe#configurationfile,anddefaultsattheend.#Site-widedefaultsforsomecommonlyusedoptions.Foracomprehensive#listofavailableoptions,theirmeaningsanddefaults,pleaseseethe#ssh_config(5)manpage.#Host*#ForwardAgentno#ForwardX11no#RhostsRSAAuthenticationno#RSAAuthenticationyes#PasswordAuthenticationyes#HostbasedAuthenticationno#GSSAPIAuthenticationno#GSSAPIDelegateCredentialsno#GSSAPIKeyExchangeno#GSSAPITrustDNSno#BatchModeno#CheckHostIPyes#AddressFamilyany#ConnectTimeout0#StrictHostKeyCheckingask#IdentityFile~/.ssh/identity#IdentityFile~/.ssh/id_rsa#IdentityFile~/.ssh/id_dsa#Port22#Protocol2,1#Cipher3des#Ciphersaes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc#MACshmac-md5,hmac-sha1,[e-mail],hmac-ripemd160#EscapeChar~#Tunnelno#TunnelDeviceany:any#PermitLocalCommandno#VisualHostKeynoHost*GSSAPIAuthenticationyes#IfthisoptionissettoyesthenremoteX11clientswillhavefullaccess#totheoriginalX11display.AsvirtuallynoX11clientsupportstheuntrusted#modecorrectlywesetthistoyes.ForwardX11Trustedyes#Sendlocale-relatedenvironmentvariablesSendEnvLANGLC_CTYPELC_NUMERICLC_TIMELC_COLLATELC_MONETARYLC_MESSAGESSendEnvLC_PAPERLC_NAMELC_ADDRESSLC_TELEPHONELC_MEASUREMENTSendEnvLC_IDENTIFICATIONLC_ALLLANGUAGESendEnvXMODIFIERS