I have set up public key authentication with ssh, but what happens, is that when I first log in, it still asks for a password, any subsequent login (while keeping the first login alive), does not ask for a password. I am not aware of any settings that produce such a behavior. Anybody any ideas why I am prompted for a password the first time?The password is surely not the password to access the key, as I get the ssh login message from the server and I am asked for the user@remote password.EDIT:output of ssh -vvv user@remote:first logon:OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014debug1: Reading configuration data /home/[user]/.ssh/configdebug1: /home/[user]/.ssh/config line 34: Applying options for phremotedebug1: Reading configuration data /etc/ssh/ssh_configdebug1: /etc/ssh/ssh_config line 19: Applying options for *debug1: Hostname has changed; re-reading configurationdebug1: Reading configuration data /home/[user]/.ssh/configdebug1: Reading configuration data /etc/ssh/ssh_configdebug1: /etc/ssh/ssh_config line 19: Applying options for *debug2: ssh_connect: needpriv 0debug1: Connecting to [remotehost] [[remotehost]] port [remoteport].debug1: Connection established.debug3: Incorrect RSA1 identifierdebug3: Could not load /home/[user]/.ssh/id_rsa as a RSA1 public keydebug1: identity file /home/[user]/.ssh/id_rsa type 1debug1: identity file /home/[user]/.ssh/id_rsa-cert type -1debug1: identity file /home/[user]/.ssh/id_dsa type -1debug1: identity file /home/[user]/.ssh/id_dsa-cert type -1debug1: identity file /home/[user]/.ssh/id_ecdsa type -1debug1: identity file /home/[user]/.ssh/id_ecdsa-cert type -1debug1: identity file /home/[user]/.ssh/id_ed25519 type -1debug1: identity file /home/[user]/.ssh/id_ed25519-cert type -1debug1: Enabling compatibility mode for protocol 2.0debug1: Local version string SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.3debug1: Remote protocol version 2.0, remote software version OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.3debug1: match: OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.3 pat OpenSSH_6.6.1* compat 0x04000000debug2: fd 3 setting O_NONBLOCKdebug3: put_host_port: [[remotehost]]:[remoteport]debug3: load_hostkeys: loading entries for host [[remotehost]]:[remoteport] from file /home/[user]/.ssh/known_hostsdebug3: load_hostkeys: found key type ECDSA in file /home/[user]/.ssh/known_hosts:31debug3: load_hostkeys: loaded 1 keysdebug3: order_hostkeyalgs: prefer hostkeyalgs: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521debug1: SSH2_MSG_KEXINIT sentdebug1: SSH2_MSG_KEXINIT receiveddebug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1debug2: kex_parse_kexinit: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ssh-rsa-cert-v00@openssh.com,ssh-dss-cert-v00@openssh.com,ssh-ed25519,ssh-rsa,ssh-dssdebug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.sedebug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.sedebug2: kex_parse_kexinit: hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96debug2: kex_parse_kexinit: hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96debug2: kex_parse_kexinit: none,zlib@openssh.com,zlibdebug2: kex_parse_kexinit: none,zlib@openssh.com,zlibdebug2: kex_parse_kexinit: debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: first_kex_follows 0 debug2: kex_parse_kexinit: reserved 0 debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1debug2: kex_parse_kexinit: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.sedebug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.sedebug2: kex_parse_kexinit: hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96debug2: kex_parse_kexinit: hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96debug2: kex_parse_kexinit: none,zlib@openssh.comdebug2: kex_parse_kexinit: none,zlib@openssh.comdebug2: kex_parse_kexinit: debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: first_kex_follows 0 debug2: kex_parse_kexinit: reserved 0 debug2: mac_setup: setup hmac-md5-etm@openssh.comdebug1: kex: server->client aes128-ctr hmac-md5-etm@openssh.com nonedebug2: mac_setup: setup hmac-md5-etm@openssh.comdebug1: kex: client->server aes128-ctr hmac-md5-etm@openssh.com nonedebug1: sending SSH2_MSG_KEX_ECDH_INITdebug1: expecting SSH2_MSG_KEX_ECDH_REPLYdebug1: Server host key: ECDSA ca:f9:c6:2e:47:dc:02:79:bd:22:db:8d:d0:a3:df:a5debug3: put_host_port: [[remotehost]]:[remoteport]debug3: put_host_port: [[remotehost]]:[remoteport]debug3: load_hostkeys: loading entries for host [[remotehost]]:[remoteport] from file /home/[user]/.ssh/known_hostsdebug3: load_hostkeys: found key type ECDSA in file /home/[user]/.ssh/known_hosts:31debug3: load_hostkeys: loaded 1 keysdebug3: load_hostkeys: loading entries for host [[remotehost]]:[remoteport] from file /home/[user]/.ssh/known_hostsdebug3: load_hostkeys: found key type ECDSA in file /home/[user]/.ssh/known_hosts:31debug3: load_hostkeys: loaded 1 keysdebug1: Host '[[remotehost]]:[remoteport]' is known and matches the ECDSA host key.debug1: Found key in /home/[user]/.ssh/known_hosts:31debug1: ssh_ecdsa_verify: signature correctdebug2: kex_derive_keysdebug2: set_newkeys: mode 1debug1: SSH2_MSG_NEWKEYS sentdebug1: expecting SSH2_MSG_NEWKEYSdebug2: set_newkeys: mode 0debug1: SSH2_MSG_NEWKEYS receiveddebug1: Roaming not allowed by serverdebug1: SSH2_MSG_SERVICE_REQUEST sentdebug2: service_accept: ssh-userauthdebug1: SSH2_MSG_SERVICE_ACCEPT receiveddebug2: key: /home/[user]/.ssh/id_rsa (0x7f54f7b2d480),debug2: key: /home/[user]/.ssh/id_dsa ((nil)),debug2: key: /home/[user]/.ssh/id_ecdsa ((nil)),debug2: key: /home/[user]/.ssh/id_ed25519 ((nil)),debug3: input_userauth_banner[server ssh logon greeting message]debug1: Authentications that can continue: publickey,passworddebug3: start over, passed a different list publickey,passworddebug3: preferred gssapi-keyex,gssapi-with-mic,publickey,keyboard-interactive,passworddebug3: authmethod_lookup publickeydebug3: remaining preferred: keyboard-interactive,passworddebug3: authmethod_is_enabled publickeydebug1: Next authentication method: publickeydebug1: Offering RSA public key: /home/[user]/.ssh/id_rsadebug3: send_pubkey_testdebug2: we sent a publickey packet, wait for replydebug1: Authentications that can continue: publickey,passworddebug1: Trying private key: /home/[user]/.ssh/id_dsadebug3: no such identity: /home/[user]/.ssh/id_dsa: No such file or directorydebug1: Trying private key: /home/fbence/.ssh/id_ecdsadebug3: no such identity: /home/fbence/.ssh/id_ecdsa: No such file or directorydebug1: Trying private key: /home/fbence/.ssh/id_ed25519debug3: no such identity: /home/fbence/.ssh/id_ed25519: No such file or directorydebug2: we did not send a packet, disable methoddebug3: authmethod_lookup passworddebug3: remaining preferred: ,passworddebug3: authmethod_is_enabled passworddebug1: Next authentication method: password[remoteuser]@[remotehost]'s password: debug3: packet_send2: adding 64 (len 58 padlen 6 extra_pad 64)debug2: we sent a password packet, wait for replydebug1: Authentication succeeded (password).Authenticated to 81.182.242.26 ([81.182.242.26]:2222).debug1: channel 0: new [client-session]debug3: ssh_session2_open: channel_new: 0debug2: channel 0: send opendebug1: Requesting no-more-sessions@openssh.comdebug1: Entering interactive session.debug2: callback startdebug2: fd 3 setting TCP_NODELAYdebug3: packet_set_tos: set IP_TOS 0x10debug2: client_session2_setup: id 0debug2: channel 0: request pty-req confirm 1debug1: Sending environment.debug3: Ignored env NVM_RC_VERSIONdebug3: Ignored env CAML_LD_LIBRARY_PATHdebug3: Ignored env XDG_VTNRdebug1: Sending env LC_PAPER = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env MANPATHdebug3: Ignored env NVM_IOJS_ORG_VERSION_LISTINGdebug1: Sending env LC_ADDRESS = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env XDG_SESSION_IDdebug3: Ignored env XDG_GREETER_DATA_DIRdebug3: Ignored env SELINUX_INITdebug1: Sending env LC_MONETARY = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env CLUTTER_IM_MODULEdebug3: Ignored env COMP_WORDBREAKSdebug3: Ignored env SESSIONdebug3: Ignored env ANDROID_HOMEdebug3: Ignored env GPG_AGENT_INFOdebug3: Ignored env TERMdebug3: Ignored env VTE_VERSIONdebug3: Ignored env XDG_MENU_PREFIXdebug3: Ignored env SHELLdebug3: Ignored env PERL5LIBdebug3: Ignored env WINDOWIDdebug1: Sending env LC_NUMERIC = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env UPSTART_SESSIONdebug3: Ignored env GNOME_KEYRING_CONTROLdebug3: Ignored env GTK_MODULESdebug3: Ignored env OCAML_TOPLEVEL_PATHdebug3: Ignored env NVM_DIRdebug3: Ignored env USERdebug3: Ignored env LS_COLORSdebug1: Sending env LC_TELEPHONE = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env XDG_SESSION_PATHdebug3: Ignored env XDG_SEAT_PATHdebug3: Ignored env SSH_AUTH_SOCKdebug3: Ignored env KRDIRdebug3: Ignored env DEFAULTS_PATHdebug3: Ignored env SESSION_MANAGERdebug3: Ignored env XDG_CONFIG_DIRSdebug3: Ignored env DESKTOP_SESSIONdebug3: Ignored env PATHdebug3: Ignored env QT_IM_MODULEdebug3: Ignored env QT_QPA_PLATFORMTHEMEdebug3: Ignored env NVM_NODEJS_ORG_MIRRORdebug1: Sending env LC_IDENTIFICATION = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env PWDdebug3: Ignored env JOBdebug3: Ignored env XMODIFIERSdebug3: Ignored env GNOME_KEYRING_PIDdebug1: Sending env LANG = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env GDM_LANGdebug3: Ignored env MANDATORY_PATHdebug1: Sending env LC_MEASUREMENT = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env COMPIZ_CONFIG_PROFILEdebug3: Ignored env IM_CONFIG_PHASEdebug3: Ignored env PAPERSIZEdebug3: Ignored env GDMSESSIONdebug3: Ignored env SESSIONTYPEdebug3: Ignored env SHLVLdebug3: Ignored env HOMEdebug3: Ignored env XDG_SEATdebug3: Ignored env LANGUAGEdebug3: Ignored env GNOME_DESKTOP_SESSION_IDdebug3: Ignored env LOGNAMEdebug3: Ignored env COMPIZ_BIN_PATHdebug3: Ignored env DBUS_SESSION_BUS_ADDRESSdebug3: Ignored env XDG_DATA_DIRSdebug3: Ignored env QT4_IM_MODULEdebug3: Ignored env LESSOPENdebug3: Ignored env NVM_IOJS_ORG_MIRRORdebug3: Ignored env INSTANCEdebug3: Ignored env TEXTDOMAINdebug3: Ignored env XDG_RUNTIME_DIRdebug3: Ignored env DISPLAYdebug3: Ignored env XDG_CURRENT_DESKTOPdebug3: Ignored env GTK_IM_MODULEdebug3: Ignored env LESSCLOSEdebug1: Sending env LC_TIME = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env TEXTDOMAINDIRdebug1: Sending env LC_NAME = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env XAUTHORITYdebug3: Ignored env COLORTERMdebug3: Ignored env _debug2: channel 0: request shell confirm 1debug2: callback donedebug2: channel 0: open confirm rwindow 0 rmax 32768debug2: channel_input_status_confirm: type 99 id 0debug2: PTY allocation request accepted on channel 0debug2: channel 0: rcvd adjust 2097152debug2: channel_input_status_confirm: type 99 id 0debug2: shell request accepted on channel 0second (or any subsequent logon):OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014debug1: Reading configuration data /home/[user]/.ssh/configdebug1: /home/[user]/.ssh/config line 34: Applying options for phremotedebug1: Reading configuration data /etc/ssh/ssh_configdebug1: /etc/ssh/ssh_config line 19: Applying options for *debug1: Hostname has changed; re-reading configurationdebug1: Reading configuration data /home/[user]/.ssh/configdebug1: Reading configuration data /etc/ssh/ssh_configdebug1: /etc/ssh/ssh_config line 19: Applying options for *debug2: ssh_connect: needpriv 0debug1: Connecting to [remoteip] [[remoteip]] port [remoteport.debug1: Connection established.debug3: Incorrect RSA1 identifierdebug3: Could not load /home/[user]/.ssh/id_rsa as a RSA1 public keydebug1: identity file /home/[user]/.ssh/id_rsa type 1debug1: identity file /home/[user]/.ssh/id_rsa-cert type -1debug1: identity file /home/[user]/.ssh/id_dsa type -1debug1: identity file /home/[user]/.ssh/id_dsa-cert type -1debug1: identity file /home/[user]/.ssh/id_ecdsa type -1debug1: identity file /home/[user]/.ssh/id_ecdsa-cert type -1debug1: identity file /home/[user]/.ssh/id_ed25519 type -1debug1: identity file /home/[user]/.ssh/id_ed25519-cert type -1debug1: Enabling compatibility mode for protocol 2.0debug1: Local version string SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.3debug1: Remote protocol version 2.0, remote software version OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.3debug1: match: OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.3 pat OpenSSH_6.6.1* compat 0x04000000debug2: fd 3 setting O_NONBLOCKdebug3: put_host_port: [[remoteip]]:[remoteportdebug3: load_hostkeys: loading entries for host [[remoteip]]:[remoteport from file /home/[user]/.ssh/known_hostsdebug3: load_hostkeys: found key type ECDSA in file /home/[user]/.ssh/known_hosts:31debug3: load_hostkeys: loaded 1 keysdebug3: order_hostkeyalgs: prefer hostkeyalgs: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521debug1: SSH2_MSG_KEXINIT sentdebug1: SSH2_MSG_KEXINIT receiveddebug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1debug2: kex_parse_kexinit: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ssh-rsa-cert-v00@openssh.com,ssh-dss-cert-v00@openssh.com,ssh-ed25519,ssh-rsa,ssh-dssdebug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.sedebug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.sedebug2: kex_parse_kexinit: hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96debug2: kex_parse_kexinit: hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96debug2: kex_parse_kexinit: none,zlib@openssh.com,zlibdebug2: kex_parse_kexinit: none,zlib@openssh.com,zlibdebug2: kex_parse_kexinit: debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: first_kex_follows 0 debug2: kex_parse_kexinit: reserved 0 debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1debug2: kex_parse_kexinit: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.sedebug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.sedebug2: kex_parse_kexinit: hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96debug2: kex_parse_kexinit: hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96debug2: kex_parse_kexinit: none,zlib@openssh.comdebug2: kex_parse_kexinit: none,zlib@openssh.comdebug2: kex_parse_kexinit: debug2: kex_parse_kexinit: debug2: kex_parse_kexinit: first_kex_follows 0 debug2: kex_parse_kexinit: reserved 0 debug2: mac_setup: setup hmac-md5-etm@openssh.comdebug1: kex: server->client aes128-ctr hmac-md5-etm@openssh.com nonedebug2: mac_setup: setup hmac-md5-etm@openssh.comdebug1: kex: client->server aes128-ctr hmac-md5-etm@openssh.com nonedebug1: sending SSH2_MSG_KEX_ECDH_INITdebug1: expecting SSH2_MSG_KEX_ECDH_REPLYdebug1: Server host key: ECDSA ca:f9:c6:2e:47:dc:02:79:bd:22:db:8d:d0:a3:df:a5debug3: put_host_port: [[remoteip]]:[remoteportdebug3: put_host_port: [[remoteip]]:[remoteportdebug3: load_hostkeys: loading entries for host [[remoteip]]:[remoteport from file /home/[user]/.ssh/known_hostsdebug3: load_hostkeys: found key type ECDSA in file /home/[user]/.ssh/known_hosts:31debug3: load_hostkeys: loaded 1 keysdebug3: load_hostkeys: loading entries for host [[remoteip]]:[remoteport from file /home/[user]/.ssh/known_hostsdebug3: load_hostkeys: found key type ECDSA in file /home/[user]/.ssh/known_hosts:31debug3: load_hostkeys: loaded 1 keysdebug1: Host '[[remoteip]]:[remoteport' is known and matches the ECDSA host key.debug1: Found key in /home/[user]/.ssh/known_hosts:31debug1: ssh_ecdsa_verify: signature correctdebug2: kex_derive_keysdebug2: set_newkeys: mode 1debug1: SSH2_MSG_NEWKEYS sentdebug1: expecting SSH2_MSG_NEWKEYSdebug2: set_newkeys: mode 0debug1: SSH2_MSG_NEWKEYS receiveddebug1: Roaming not allowed by serverdebug1: SSH2_MSG_SERVICE_REQUEST sentdebug2: service_accept: ssh-userauthdebug1: SSH2_MSG_SERVICE_ACCEPT receiveddebug2: key: /home/[user]/.ssh/id_rsa (0x7fc9d08bf480),debug2: key: /home/[user]/.ssh/id_dsa ((nil)),debug2: key: /home/[user]/.ssh/id_ecdsa ((nil)),debug2: key: /home/[user]/.ssh/id_ed25519 ((nil)),debug3: input_userauth_banner[server ssh logon message]debug1: Authentications that can continue: publickey,passworddebug3: start over, passed a different list publickey,passworddebug3: preferred gssapi-keyex,gssapi-with-mic,publickey,keyboard-interactive,passworddebug3: authmethod_lookup publickeydebug3: remaining preferred: keyboard-interactive,passworddebug3: authmethod_is_enabled publickeydebug1: Next authentication method: publickeydebug1: Offering RSA public key: /home/[user]/.ssh/id_rsadebug3: send_pubkey_testdebug2: we sent a publickey packet, wait for replydebug1: Server accepts key: pkalg ssh-rsa blen 279debug2: input_userauth_pk_ok: fp a6:51:bb:ea:bc:4d:32:94:29:6e:d0:d4:f3:45:5b:a6debug3: sign_and_send_pubkey: RSA a6:51:bb:ea:bc:4d:32:94:29:6e:d0:d4:f3:45:5b:a6debug1: Authentication succeeded (publickey).Authenticated to [remoteip] ([[remoteip]]:[remoteport).debug1: channel 0: new [client-session]debug3: ssh_session2_open: channel_new: 0debug2: channel 0: send opendebug1: Requesting no-more-sessions@openssh.comdebug1: Entering interactive session.debug2: callback startdebug2: fd 3 setting TCP_NODELAYdebug3: packet_set_tos: set IP_TOS 0x10debug2: client_session2_setup: id 0debug2: channel 0: request pty-req confirm 1debug1: Sending environment.debug3: Ignored env NVM_RC_VERSIONdebug3: Ignored env CAML_LD_LIBRARY_PATHdebug3: Ignored env XDG_VTNRdebug1: Sending env LC_PAPER = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env MANPATHdebug3: Ignored env NVM_IOJS_ORG_VERSION_LISTINGdebug1: Sending env LC_ADDRESS = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env XDG_SESSION_IDdebug3: Ignored env XDG_GREETER_DATA_DIRdebug3: Ignored env SELINUX_INITdebug1: Sending env LC_MONETARY = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env CLUTTER_IM_MODULEdebug3: Ignored env COMP_WORDBREAKSdebug3: Ignored env SESSIONdebug3: Ignored env ANDROID_HOMEdebug3: Ignored env GPG_AGENT_INFOdebug3: Ignored env TERMdebug3: Ignored env VTE_VERSIONdebug3: Ignored env XDG_MENU_PREFIXdebug3: Ignored env SHELLdebug3: Ignored env PERL5LIBdebug3: Ignored env WINDOWIDdebug1: Sending env LC_NUMERIC = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env UPSTART_SESSIONdebug3: Ignored env GNOME_KEYRING_CONTROLdebug3: Ignored env GTK_MODULESdebug3: Ignored env OCAML_TOPLEVEL_PATHdebug3: Ignored env NVM_DIRdebug3: Ignored env USERdebug3: Ignored env LS_COLORSdebug1: Sending env LC_TELEPHONE = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env XDG_SESSION_PATHdebug3: Ignored env XDG_SEAT_PATHdebug3: Ignored env SSH_AUTH_SOCKdebug3: Ignored env KRDIRdebug3: Ignored env DEFAULTS_PATHdebug3: Ignored env SESSION_MANAGERdebug3: Ignored env XDG_CONFIG_DIRSdebug3: Ignored env DESKTOP_SESSIONdebug3: Ignored env PATHdebug3: Ignored env QT_IM_MODULEdebug3: Ignored env QT_QPA_PLATFORMTHEMEdebug3: Ignored env NVM_NODEJS_ORG_MIRRORdebug1: Sending env LC_IDENTIFICATION = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env PWDdebug3: Ignored env JOBdebug3: Ignored env XMODIFIERSdebug3: Ignored env GNOME_KEYRING_PIDdebug1: Sending env LANG = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env GDM_LANGdebug3: Ignored env MANDATORY_PATHdebug1: Sending env LC_MEASUREMENT = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env COMPIZ_CONFIG_PROFILEdebug3: Ignored env IM_CONFIG_PHASEdebug3: Ignored env PAPERSIZEdebug3: Ignored env GDMSESSIONdebug3: Ignored env SESSIONTYPEdebug3: Ignored env SHLVLdebug3: Ignored env HOMEdebug3: Ignored env XDG_SEATdebug3: Ignored env LANGUAGEdebug3: Ignored env GNOME_DESKTOP_SESSION_IDdebug3: Ignored env LOGNAMEdebug3: Ignored env COMPIZ_BIN_PATHdebug3: Ignored env DBUS_SESSION_BUS_ADDRESSdebug3: Ignored env XDG_DATA_DIRSdebug3: Ignored env QT4_IM_MODULEdebug3: Ignored env LESSOPENdebug3: Ignored env NVM_IOJS_ORG_MIRRORdebug3: Ignored env INSTANCEdebug3: Ignored env TEXTDOMAINdebug3: Ignored env XDG_RUNTIME_DIRdebug3: Ignored env DISPLAYdebug3: Ignored env XDG_CURRENT_DESKTOPdebug3: Ignored env GTK_IM_MODULEdebug3: Ignored env LESSCLOSEdebug1: Sending env LC_TIME = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env TEXTDOMAINDIRdebug1: Sending env LC_NAME = hu_HU.UTF-8debug2: channel 0: request env confirm 0debug3: Ignored env XAUTHORITYdebug3: Ignored env COLORTERMdebug3: Ignored env _debug2: channel 0: request shell confirm 1debug2: callback donedebug2: channel 0: open confirm rwindow 0 rmax 32768debug2: channel_input_status_confirm: type 99 id 0debug2: PTY allocation request accepted on channel 0debug2: channel 0: rcvd adjust 2097152debug2: channel_input_status_confirm: type 99 id 0debug2: shell request accepted on channel 0
ssh public key auth: first login still asks for a password
ssh;key authentication
This is probably caused by the fact, that your home directory (and therefore the key) is not accessible during the login time. This can be caused by the fact, that your home is mounted from network drive (on shared system) after login or your home directory is encrypted (usually installs of workstations).Solving this is complicated, but I will have a look for some discussion. Solution is to move the AuthorizedKeysFile to some other place, that will be accessible or us global store for keys (/etc/security/authorized_keys), or some kind of SSO management system (IPA, LDAP), which will get your key from directory server (yes, can be local). Depends on how much control of the target system you have.Probably best solution is to store your keys in other place, changing the value in sshd_config:AuthorizedKeysFile /etc/ssh/%u/authorized_keysFurther discussion is available on SuperUser or here on Unix & Linux, or description on help.Ubuntu.