This issue is caused by KARAF-5330.
A new role "ssh" was introduced, and that new role was not added to 
keys.properties.
Once  done

_g_\:admingroup = group,admin,manager,viewer,systembundles,ssh

the key based login also works again. This seems to be broken in 4.1 and 4.2.

- Martin


On 22.12.2018 17:02, Martin Lichtin wrote:
Hi Karaf Users

Can someone confirm password-less login using a public/private key-pair works 
with Karaf 4.1.7?
It's documented at: 
http://karaf.apache.org/manual/latest/#_managing_authentication_by_key

I cannot get it work and wondering if I'm doing something wrong. Steps I did to 
test the feature:

ssh-keygen -t dsa -f karaf.id_dsa # enter nothing for the passphrase

# add a "karaf" entry with the generated public key
vi apache-karaf-4.1.7/etc/keys.properties

# start Karaf
apache-karaf-4.1.7/bin/karaf server

# try to connect without providing a password
ssh -p 8101 -i ./karaf.id_dsa karaf@localhost
Password authentication
Password:

So it still prompts for a password... the public/private key-pair approach 
doesn't work in Karaf 4.1.7 :-(

I tried 4.1.5, 4.1.6, it also does not work. However, same approach works fine 
in 4.0.10.

- Martin


Reply via email to