Re: Using public key pair to authenticate

From: Greg Wooledge (wooledg_at_eeg.ccf.org)
Date: 11/24/04

  • Next message: Sebestyén Zoltán: "'ssh' command behavior"
    Date: Wed, 24 Nov 2004 08:03:21 -0500
    To: "Loo, Peter" <Peter.Loo@bannerhealth.com>
    
    

    On Tue, Nov 23, 2004 at 04:57:33PM -0700, Loo, Peter wrote:
    > I am working with two Unix servers running AIX 5.2. One server is
    > running "OpenSSH_3.6.1p2-CERT-patched, SSH protocols 1.5/2.0, OpenSSL
    > 0x009060df" while the other is running "SSH Secure Shell 3.2.0".
    >
    > I created the key pair on the server with OpenSSH using "ssh-keygen".
    [...]

    OpenSSH and SSH.Com have different key file formats. You must use
    ssh-keygen to convert from one to the other.

    If you use OpenSSH's ssh-keygen(1) to do the conversion, you probably
    want to use the -e option. I have no idea what the corresponding option
    is for SSH.Com's implementation.

    > named the output files as (identity & identity.pub). Then I copied the
    > contents of "identity.pub" to the file named authorized_keys on the
    > server with "SSH Secure Shell 3.2.0".

    Sounds like you built an rsa1 type keypair. That's not going to work
    very well with an SSH2 server. Try this instead: ssh-keygen -t rsa

    (No, I have no idea why OpenSSH is defaulting to type rsa1.)


  • Next message: Sebestyén Zoltán: "'ssh' command behavior"

    Relevant Pages

    • Announce: OpenSSH 4.2 released
      ... OpenSSH 4.2 has just been released. ... implementation and includes sftp client and server support. ...
      (SSH)
    • Re: GSSAPI SSH WIN 2003
      ... OpenSSH does not have this flexibility. ... server that does; it is one of the most long-standing inadequacies of most ... used publickey authentication, for the simple reasons that it's ... > group will get Service ticket for my HP-UX box. ...
      (comp.security.ssh)
    • Announce: OpenSSH 4.3 released
      ... OpenSSH 4.3 has just been released. ... implementation and includes sftp client and server support. ...
      (SSH)
    • =?Utf-8?Q?DC_hin=C3=BCber_nach_=C3=84nderung_von_Pri?= =?Utf-8?Q?vilegien_=28OpenSSH_auf_Ser
      ... Server, zusammen bilden die eine AD Domäne ab. ... Jetzt versuche ich OpenSSH auf beiden zum Laufen zu bekommen. ... dass der Local System Account unter Windows Server 2003 nicht ... GPOs, da unsere GPO zuerst zieht und damit die Benutzer, die in den o.g. ...
      (microsoft.public.de.german.windows.server.general)
    • RE: SecureID Question
      ... I used to work for RSA Security and built most of their "unsupported" Linux ... OpenSSH or the native Login is used. ... I did some work to integrate SecurID with OpenSSH for a couple of specific ... When I log into my openssh server I then try to ssh to a server from there ...
      (SSH)