OpenSSH hostbased auth: known_hosts format

From: Philip Le Riche (gr75@bcs.org.uk)
Date: 02/27/02


From: Philip Le Riche <gr75@bcs.org.uk>
Date: Wed, 27 Feb 2002 17:42:11 +0000

I'm trying to get hostbased authentication to work using OpenSSH 3.0.2.1,
downloaded prebuilt for AIX (with oldlibc) from the Bull Freeware site.
I'm using protocol 2. It won't play ball.

I've appended /etc/openssh/ssh_host_dsa_key.pub on each machine to
/etc/ssh_known_hosts on the other.

I've enabled HostbasedAuthentication in ssh_config and sshd_config.

I've added IgnoreRhosts = no on the server.

I've tried UsePrivilegedPort in ssh_config.

I've torn out one or two handfuls of hair.

I even read the man page. And in SSHD(8) under SSH_KNOWN_HOSTS FILE FORMAT
it says that each line starts with hostnames, bits, exponent. But DSA keys
don't seem to have bits or exponent.

Is the man page wrong, or do I still need to sacrifice a couple more
virgins in front of it?

- Philip