OpenSSH hosbased authetication without DNS

From: Istvan Viczian (vici_at_dof.se)
Date: 05/14/03

  • Next message: moseley_at_hank.org: "Could not reverse map" 
    Date: Wed, 14 May 2003 16:53:30 +0200
To: secureshell@securityfocus.com, openssh-unix-dev@mindrot.org

    Hi,

    I have found a general way to configure hostbased authentication
    using OpenSSH on several , ( I created a howto about it at
    http://www.omega.telia.net/vici/openssh )
    but there is one remaining problem which I still could not solve.

    I would like to make hostbased authetication work without DNS resolving
    available
    both on the server and client side.
    First I added the IP addresses to the appropriate config files on the
    server side and if the
    DNS service does not work on the servers side, the hosbased
    authentication works fine.
    But when I disable DNS service only on the client side, and try to
    login by ssh hostbased authentication method, to the target machine, the
    hostbased authetication
    method seems fail on the client side, because the client could not
    resolve its own name:
         [root@localhost etc]# ssh -o HostBasedAuthentication=yes 10.1.1.1
         get_socket_ipaddr: getnameinfo 8 failed
         userauth_hostbased: cannot get local ipaddr/name

    This problem seems general, using any of OpenSSH_3.x version both on
    client and server side.

    I tried to find any configurational solution in order to avoid it, but I
    have not
    found any.

    Regards,
    Istvan

  • Next message: moseley_at_hank.org: "Could not reverse map"

    Relevant Pages

    • Re: HostBased Authentication issues : OpenSSH 3.4p1 - SOLVED
      ... > I have a set of systems I need to have hostbased authentication ... I had it working at openssh 3.1 but it seems to fail now. ... > The client recognizes the server host key and the server tries host ... The only possibility I see is that both client and server ...
      (comp.security.ssh)
    • Re: OpenSSH and .rhosts usage
      ... > I used RSH to run remote command by using .rshosts file and the system not ... on the server run: ... from both client and server. ... For hostbased authentication to work, ...
      (comp.unix.solaris)
    • Re: ssh trusted host
      ... >> which hosts you are prepared to accept hostbased authentication from. ... without disabling /etc/ssh/ssh_known_hosts, but not vice versa). ... and server config - see above. ...
      (comp.unix.bsd.freebsd.misc)
    • Re: Host based authentication and /etc/hosts.equiv
      ... In hostbased authentication, the server authenticates the client host's ... identity by means of its host key. ...
      (comp.security.ssh)
    • Re: openssh-3.0.2p1 (hostbased authentication) permission denied
      ... You have set the client to use only hostbased authentication, ... not trying *any* methods at all ("none" is not a real method). ... private key. ...
      (comp.security.ssh)