SSH:当使用跳转主机(bastion)时被拒绝的权限(公钥)

Question

我正在通过如下所示的堡垒主机建立一个SSH连接：ssh -o ProxyCommand="ssh -W %h:%p username@bastion" username@targetserver

它给了我一个错误:用户名@塔吉特服务器:权限被拒绝(公开密钥)

但是，如果我像这样运行：ssh username@bastion，然后从bastion ssh username@targetserver运行，它就能工作了。

在bastion主机上的日志显示我的src主机已成功验证，但随后会发生断开连接的情况。

来自堡垒的日志：

Oct 26 23:25:29 BASTION_HOST sudo: pam_unix(sudo:session): session closed for user root
Oct 26 23:25:36 BASTION_HOST sshd[6316]: Accepted publickey for SPONGEBOB from 1.2.3.4 port 34096 ssh2: RSA SHA256:uZuFoMk06/oPwnRSWKnm/462BbpXqE4hxEn8iQJ00rY
Oct 26 23:25:36 BASTION_HOST sshd[6316]: pam_unix(sshd:session): session opened for user SPONGEBOB by (uid=0)
Oct 26 23:25:36 BASTION_HOST systemd-logind[571]: New session 67 of user SPONGEBOB.
Oct 26 23:25:37 BASTION_HOST sshd[6388]: Received disconnect from 1.2.3.4 port 34096:11: disconnected by user
Oct 26 23:25:37 BASTION_HOST sshd[6388]: Disconnected from user SPONGEBOB 1.2.3.4 port 34096
Oct 26 23:25:37 BASTION_HOST systemd-logind[571]: Session 67 logged out. Waiting for processes to exit. Oct 26 23:25:37 BASTION_HOST sshd[6316]: pam_unix(sshd:session): session closed for user SPONGEBOB
Oct 26 23:25:37 BASTION_HOST systemd-logind[571]: Removed session 67.

TargetHost：

Oct 26 23:25:37 TARGET_HOST sshd[8931]: Connection closed by authenticating user SPONGEBOB 10.0.0.8 port 52956 [preauth]

如有任何建议，敬请见谅。

Answer 1

问题解决了。用于对目标服务器进行身份验证的密钥是来自src主机的密钥，而不是我所认为的来自堡垒的密钥。