ssh key based authentication - SSH
This is a discussion on ssh key based authentication - SSH ; hello all,
need some help/pointers on the problem iam having
i have 3 solaris boxes say A,B,C
i want to ssh from A to B and A to C without being prompted for password.
So, i generated key in box ...
-
ssh key based authentication
hello all,
need some help/pointers on the problem iam having
i have 3 solaris boxes say A,B,C
i want to ssh from A to B and A to C without being prompted for password.
So, i generated key in box A using
ssh-keygen -t rsa -N ""
so in ~user/.ssh dir i see id_rsa.pub. I ftp'ed this to machines B and C and
put them in ~user/.ssh dir as files authorized_keys2
now, login to machine A as user: user, and then ssh to machine C works, but
fails onmachine B (it prompts for user B).
dont see any diff in machine B and C, but somehow ssh (key based auth works
only for C). how can i debug this? appreciate any tips
ssh version:
OpenSSH_3.9p1, OpenSSL 0.9.7d 17 Mar 2004
-
Re: ssh key based authentication
On Mon, 23 Jan 2006 10:16:33 -0500, Madhu Ramachandran wrote:
> hello all,
> need some help/pointers on the problem iam having i have 3 solaris boxes
> say A,B,C
>
> i want to ssh from A to B and A to C without being prompted for password.
> So, i generated key in box A using
> ssh-keygen -t rsa -N ""
>
> so in ~user/.ssh dir i see id_rsa.pub. I ftp'ed this to machines B and C
> and put them in ~user/.ssh dir as files authorized_keys2
>
> now, login to machine A as user: user, and then ssh to machine C works,
> but fails onmachine B (it prompts for user B).
>
> dont see any diff in machine B and C, but somehow ssh (key based auth
> works only for C). how can i debug this? appreciate any tips
>
> ssh version:
> OpenSSH_3.9p1, OpenSSL 0.9.7d 17 Mar 2004
Check permissions for .ssh and auhorized_keys2 in B and C. If they are
not the right ones, the SSH daemon in those boxes might not make use of
the data in them.
-
Re: ssh key based authentication
Thomas Carter wrote:
> On Mon, 23 Jan 2006 10:16:33 -0500, Madhu Ramachandran wrote:
>
>> hello all,
>> need some help/pointers on the problem iam having i have 3 solaris
>> boxes say A,B,C
>>
>> i want to ssh from A to B and A to C without being prompted for
>> password. So, i generated key in box A using
>> ssh-keygen -t rsa -N ""
>>
>> so in ~user/.ssh dir i see id_rsa.pub. I ftp'ed this to machines B
>> and C and put them in ~user/.ssh dir as files authorized_keys2
Recent versions of OpenSSH do not require the use of "authorized_keys2", you
can just use "authorized_keys".
Try using "ssh -v -v B" to see what precisely is going on. I've also seen
some real oddness on Solaris boxes where someone installs OpenSSH on top of
or in parallel with an existing copy of another SSH service.