Re: Configuring ssh on Red Hat Linux 7.3

From: Jean-David Beyer (jdbeyer@exit109.com)
Date: 05/16/02 

From: Jean-David Beyer <jdbeyer@exit109.com>
Date: Thu, 16 May 2002 07:24:22 -0400

Nico Kadel-Garcia wrote:
>
> "Jean-David Beyer" <jdbeyer@exit109.com> wrote in message
> news:3CE24C9E.60CEAA6E@exit109.com...
> > Nico Kadel-Garcia wrote:
>
> > I did not discover the problem, but I found a solution:
> >
> > I made all new keys on both my machines for both myself and for the
> > system (i.e., those in ~/.ssh and /etc/ssh) and distributed them to
> > all my users (i.e., myself and the system on both machines). That
> > fixed it, but it is not symmetric.
> >
> > When valinux calls touchl, it asks for jdbeyer's password, but when
> > touchl calls valinux, it asks for the valinux's passphrase. Perhaps
> > there is a passphrase on the valinux system keys. If so, I suppose I
> > could just take them off.
>
> System keys absolutely should not have a passphrase. Can you look at the
> iniit scripts for the Linux system and see how the system keys get generated
> if one is not already present?

They were generated with a passphrase (by mistake), so I did

ssh-keygen -p -P oldpassphrase -N ''

to take it off. Now when I am prompted for it, I just hit "Enter" and
I get in (without being asked for the login since I passed the
known-hosts test). It seems to me that I did it the same way on both
machines, and I copied the sshd_config file from one machine to the
other (and I am almost certain I restarted the sshd). It may be that
the clients are a little different (ssh_config); I guess I will have
to check that.

I can live with it the way it is, but I would like to understand why
they are different. 

-- 
 .~.  Jean-David Beyer           Registered Linux User 85642.
 /V\                             Registered Machine    73926.
/( )\ Shrewsbury, New Jersey     http://counter.li.org 
^^-^^ 7:20am up 6 days, 8:22, 3 users, load average: 3.07, 3.04, 3.00

Relevant Pages

  • Re: Configuring ssh on Red Hat Linux 7.3
    ... myself and the system on both machines). ... it asks for the valinux's passphrase. ... >> there is a passphrase on the valinux system keys. ... > System keys absolutely should not have a passphrase. ...
    (comp.security.ssh)
  • Re: Configuring ssh on Red Hat Linux 7.3
    ... myself and the system on both machines). ... it asks for the valinux's passphrase. ... > there is a passphrase on the valinux system keys. ... System keys absolutely should not have a passphrase. ...
    (comp.security.ssh)
  • Re: Configuring ssh on Red Hat Linux 7.3
    ... myself and the system on both machines). ... > touchl calls valinux, it asks for the valinux's passphrase. ... > there is a passphrase on the valinux system keys. ...
    (comp.security.ssh)
  • Re: asking passphrase only on first use
    ... >required and not when ssh-add is started. ... you have to enter the passphrase for all of them ... >the associated keys or not during that session. ... These commands invoked from .bashrc will add an ssh-agent if appropriate ...
    (SSH)
  • Re: Passwordless ssh, "once and for all"...
    ... ssh in "ssh machine1@123.123.123.123" ... When creating keys for passwordless access, create keys with no passphrase ... Passwordless ssh, "once and for all"... ...
    (SSH)