Powered by Invision Power Board


  Reply to this topicStart new topicStart Poll

> ssh version2 login without password, ssh without password prompting
neil
Posted: Mar 8 2005, 02:40 PM
Quote Post


Newbie
*

Group: Members
Posts: 2
Member No.: 849
Joined: 8-March 05



I have been trying with no success to get Openssl to connect between servers without a password prompt.
All works OK for the 'root' user but when I try and set it up for another user it fails, I am carrying out the following steps to acheive this:
serverA% ssh-keygen -t dsa -f ~/.ssh/id_dsa
When you are asked for a passphrase, leave it empty. Now send the public key to serverB.
serverA% cd .ssh
serverA% scp id_dsa.pub user@serverB:~/.ssh
Next, log in to serverB and add the public key to the list of authorized keys.
serverA% ssh user@serverB
serverB% cd .ssh
serverB% cat id_dsa.pub >> authorized_keys2
serverB% chmod 640 authorized_keys2
serverB% rm -f id_dsa.pub


I get the following results:
ssh -v venus
OpenSSH_3.9p1, OpenSSL 0.9.7e 25 Oct 2004
debug1: Reading configuration data /usr/local/etc/ssh_config
debug1: Connecting to venus [172.16.2.16] port 22.
debug1: Connection established.
debug1: identity file /users1/www/.ssh/identity type -1
debug1: identity file /users1/www/.ssh/id_rsa type -1
debug1: identity file /users1/www/.ssh/id_dsa type 2
debug1: Remote protocol version 1.99, remote software version OpenSSH_3.9p1
debug1: match: OpenSSH_3.9p1 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.9p1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'venus' is known and matches the RSA host key.
debug1: Found key in /users1/www/.ssh/known_hosts:1
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Trying private key: /users1/www/.ssh/identity
debug1: Trying private key: /users1/www/.ssh/id_rsa
debug1: Offering public key: /users1/www/.ssh/id_dsa
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Next authentication method: keyboard-interactive
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Next authentication method: password
www@venus's password:
PMEmail Poster
Top
fishsponge
Posted: Mar 18 2005, 11:03 PM
Quote Post


Administrator
********

Group: Admin
Posts: 679
Member No.: 1
Joined: 13-February 03



i doubt this makes a difference, but i do rsa instead of dsa... try it... ya never know.
PMEmail PosterUsers WebsiteICQAOLYahooMSN
Top
neil
Posted: Mar 21 2005, 04:18 PM
Quote Post


Newbie
*

Group: Members
Posts: 2
Member No.: 849
Joined: 8-March 05



All sorted, issue was down to incorrect permissions on the users home folder.
PMEmail Poster
Top
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
« Next Oldest | SSH/Telnet/RLogin/RSH | Next Newest »

Topic Options Reply to this topicStart new topicStart Poll

 



[ Script Execution time: 0.0739 ]   [ 12 queries used ]   [ GZIP Enabled ]




Partners: Cambridge Plus :: <Link Available> :: 3D Mechanical Design :: <Link Available>
Unix Man Pages / Linux Man Pages :: HiFi Forum :: SIP VoIP Phone & Provider Reviews :: UNIX/Linux Forum Archives

More info on advertising on Unix/Linux Forum