CODEWITHSUNDEEP
google-cloud-platformsshgoogle-compute-engine
Loenix
Loenix

Reputation: 1090

Unable to connect to a compute engine instance though SSH/SFTP using an external account

I am unable to connect to the VM of a compute engine instance. My account is out of the organization, considering "[email protected]" as user, "wordpress-1-vm" as instance and "project-1" as project for example. My SSH key is already existing, this is the same key for other servers.

At organization level, we added the roles/compute.osLoginExternalUser to my account and enable-oslogin was set to TRUE.

Now connecting with gcloud is ok.

gcloud compute ssh --zone "us-central1-c" "wordpress-1-vm" --tunnel-through-iap --project "project-1"

From the docs, I ran the command:

gcloud compute os-login ssh-keys add --key-file="D:\Path\to\key.pub" --project=project-1 --ttl=730d

According to gcloud command, my user should be "ext_a_man_company_com".

This should work but connecting to ext_a_man_company_com@instance-ip:22 using ppk on PuTTY is returning

"Server refused our key"
Disconnected: No supported authentication methods available (server sent: publickey)

How should I connect to this server ?

NB: I also tried by adding ssh key to metadata with no success.

Upvotes: 0

Views: 495

Answers (1)

Remigiusz Samborski
Remigiusz Samborski

Reputation: 68

You can try troubleshooting OS Login configuration using these instructions.

If you are trying to add the key directly via VM's metadata then you need to remember to turn off OS Login for this particular VM to make it work.

Assuming both options don't work then I recommend checking your putty configuration and making sure you're using the correct user. You should be able to see what is happening in sshd logs directly on your instance (logging via console or gcloud to gain access).

Upvotes: 1

Related Questions