Re: bypassing ssh passwords FC3

From: General Schvantzkoph (schvantzkoph_at_yahoo.com)
Date: 12/25/04


Date: Sat, 25 Dec 2004 10:57:04 -0500

On Thu, 23 Dec 2004 23:59:21 +0000, noi wrote:

> Has anyone managed to make ssh authentication/pubkey work to bypass ssh
> passwords in FC3.
>
> I've made a public keys but nothing is working to bypass the password
> request when executing ssh.
>
> $ ssh -i .ssh/authorized_key noi@ssh_server
>
> on ssh_client
> 1) Used ssh_keygen1024 -t rsa (also tried with dsa) to create public keys
>
> 2) copied public key to ssh_server
>
> on ssh_server
>
> 3) cp public key to .ssh
>
> 4) created .ssh/config from /etc/ssh/ssh_config
>
> 5) updated config to identifykey .ssh/authorized_key
>
> 6) restarted sshd
>
> ssh still asks for password.
>
> Has anyone gotten ssh authentication to work in FC3?

You have to setup your /etc/ssh/sshd file to allow RSA authetication,
# override default of no subsystems
Subsystem sftp /usr/lib/ssh/sftp-server
IgnoreRhosts yes
AuthorizedKeysFile /etc/ssh/authorized_keys
IgnoreUserKnownHosts no
PrintMotd yes
StrictModes yes
RSAAuthentication yes
PermitEmptyPasswords no
PasswordAuthentication no
GatewayPorts no
AllowTcpForwarding yes
KeepAlive yes

I use webmin to setup SSH. It has a dandy ssh configuration tools. Get
webmin from http://www.webmin.com



Relevant Pages

  • Re: [OT] ssh remote command execution without public keys.
    ... >> set right I don't see why it should be any less secure than public ... > a password to ssh. ... > public keys are forced to be able to run only a single command. ... > script at the other end is prepared for hostile input. ...
    (Debian-User)
  • Re: Passing password in ssh
    ... If I create keys without a passphrase, and share the public keys between ... So you have to crack user@A's account, at least to the point of getting the private key. ... The .ssh directory also needs to be set this way. ... But even having a pass phrase does not help if someone uses dumb passwords. ...
    (Fedora)
  • Securing SSH: Does disabling password authentication work?
    ... Like most everyone who runs an SSH server on the standard port, ... password authentication when trying to authenticate to the server. ... Public keys work fine as well. ...
    (Debian-User)
  • Re: Passing password in ssh
    ... If I create keys without a passphrase, and share the public keys between ... You do know that you first have to get the private key of the key ... The .ssh directory also ... But simply cracking into a user's account who has access to several ...
    (Fedora)
  • Re: Help with SSH
    ... > I am trying to set up authentication with SSH so I can let a script run ... > a command through ssh on a remote server. ... > public keys and have copied the public key to the remote server to the ...
    (RedHat)