OpenSSH 3.4p1 host based authentication help

From: Sreedhar Babu (sridharb7@yahoo.com)
Date: 02/26/03

  • Next message: David Komanek: "Re: OpenSSH: Password/Key + Kerberos Authentification"
    Date: Wed, 26 Feb 2003 02:18:27 -0800 (PST)
    From: Sreedhar Babu <sridharb7@yahoo.com>
    To: secureshell@securityfocus.com
    
    

    Hi,

    We are using redhat linux 8.0 with OpenSSH 3.4p1 and
    trying to configure hostbased authentication just
    using rhosts and shosts. Basically we don't want to go
    by RhostRSAAuthentication which require host public
    key of ssh client system on ssh server.

    Entered client hostname in /etc/rhosts.equiv,
    /etc/shosts.equiv, /etc/ssh/shosts.equiv, ~/.rhosts
    and ~/.shosts of root user. Still root user is not
    able to ssh or scp from client to server.

    Key-based authentication is working perfectly fine. As
    we have lot of ssh clients going to come in our
    network we don't want to go by key-based
    authenctication. Please help me.

    thanks and regards,
    Sreedhar.

    __________________________________________________
    Do you Yahoo!?
    Yahoo! Tax Center - forms, calculators, tips, more
    http://taxes.yahoo.com/



    Relevant Pages

    • Re: Hostbased access problems with OpenSSH 3.4p1
      ... >authentication, with some access being controlled by shosts.equiv files. ... >Upgrading to 3.4p1 took this capability away, and it seems to be tied to ... When ssh is suid enabled, ... The ssh client won't use a privileged port if it's ...
      (comp.security.ssh)
    • Re: ssh disconnects with "mo more authentication methods available"
      ... Per Hedeland wrote: ... > PAM and password authentication are incompatible - you have to use ... > If you don't need PAM functionality (e.g. passwd file is your only way ... I think you need to upgrade to a newer ssh client ...
      (comp.unix.bsd.freebsd.misc)
    • Re: Q: pub key login still asks for password??
      ... The default configuration is to attempt public key authentication prior ... to password authentication, so basically, yes. ... 'ssh -v' should have the ssh client make explicit what it's attempting ...
      (comp.security.ssh)
    • Re: Freecycle leads to Yahoo email woes
      ... Which is why it was failing at the Authentication stage, ... - though you can also use the Yahoo one, ... But they *were* arriving at the Yahoo Mail Account OK? ... All the time people use the Yahoo WebSite to access their eMails, ...
      (uk.people.silversurfers)
    • Re: OL2003, send/receive fail only at first start of day
      ... Wow, OK, I -also- have Yahoo POP mail accounts, and that's where mine is ... I was hopeful the firewall settings would resolve this, but no, it failed me ... > business mail) require authentication. ...
      (microsoft.public.outlook.general)