Re: Trusted SSH on Solaris

From: Jeff Koenig (Jeff.Koenig@experian.com)
Date: 12/09/02

  • Next message: DAVIS M. RAGAN (MACK): "scp2 times out?"
    Date: Mon, 09 Dec 2002 15:02:03 -0600
    From: "Jeff Koenig" <Jeff.Koenig@experian.com>
    To: <mcintoshcd@san.rr.com>, <secureshell@securityfocus.com>
    
    

    Configuring SSH keys so passwords are not required:
    ===================================================
    #The following example sets up an SSH2 RSA key
    #and allows "usera" to SSH or SCP from "servera" to "serverb"
    #without requiring a password

    # Run "ssh-keygen -t rsa" on servera as usera to generate public and private keys:
    [servera as usera] ssh-keygen -t rsa

    #press enter to save the key in the default location
    #which is ~/.ssh/id_rsa
    #press enter at passphrase prompt (for an empty passphrase)
    #press enter to confirm empty passphrase

    #cat the newly created public key and
    #copy the public key to your clipboard
    [servera as usera] cat ~/.ssh/id_rsa.pub

    #connect to serverb
    #create a .ssh directory in your home directory
    [serverb as usera] mkdir ~/.ssh
    [serverb as usera] chmod 700 ~/.ssh

    #make an "authorized_keys" file in the ~./ssh directory on serverb
    #and paste the public key in that file
    [serverb as usera] vi ~/.ssh/authorized_keys
    [serverb as usera] chmod 700 ~/.ssh/authorized_keys

    #test the key by trying to SSH from servera to serverb
    #you should not be asked for a password
    [servera] ssh serverb

    >>> cdm <mcintoshcd@san.rr.com> 12/07/02 10:54PM >>>
    I have downloaded and installed the latest OpenSSH packages from
    sunfreeware.com (3.5) I have them working on Solaris 2.6 through 9
    without a problem. For script based backups, I need to eliminate the
    requirement to provide a password. During my web searches, I have found
    many examples for other flavors of Unix. I have tried several of these
    methods without success.

    Does anyone have the definitive steps to take that will provide a remote
    login via ssh without asking for a password on Solaris?

    Any assistance would be immeasurably appreciated.



    Relevant Pages

    • Re: Cross Realm Not working for SSH
      ... i have configured 2 realms and established cross realm trust between them. ... When i am doing SSH in simple authentication, it is working fine ie not ... suppose UserA is in REALMA and SSH server serverB in REALMB ...
      (comp.protocols.kerberos)
    • Cross Realm Not working for SSH
      ... i have configured 2 realms and established cross realm trust between them. ... When i am doing SSH in simple authentication, it is working fine ie not ... suppose UserA is in REALMA and SSH server serverB in REALMB ... Sent from the Kerberos - General mailing list archive at Nabble.com. ...
      (comp.protocols.kerberos)
    • Re: problems setting up SSH without passwords
      ... Also try on ServerB: $HOME/.ssh/authorized_keys2 ... Also try ssh -1 option that is force version 1. ... next auth method to try is publickey ... we sent a publickey packet, ...
      (SSH)
    • Re: How to use ipfw to restrict a certain user?
      ... > I have user, user1, that should be allowed to ssh to a machine, serverA, ... > and open a TCP-tunnel to another machine serverB on port 99. ...
      (comp.unix.bsd.freebsd.misc)