Re: putty and SuSE and OpenSSH2 without password

From:
Date: 09/25/02 

Date: Wed, 25 Sep 2002 00:36:03 GMT

"Michael Lootz" <mlootz@freenet.de> wrote in message
news:amq3s2$e81$02$1@news.t-online.com...
> Hello William,
>
> "William Hooper" <whooper@infinet.com.NO_SPAM> schrieb im Newsbeitrag
> news:bcl46-45k.ln1@snowball.whooper.org...
> > "Michael Lootz" <mlootz@freenet.de> wrote in message
> > news:amn8ud$nnq$02$1@news.t-online.com...
> > [snip]
> > Failed publickey for ROOT from IP#client port 1058 ssh2"
> > >
> > > with rsa:
> > > "Server refused our key"
> > > and in /var/log/messages:
> > > "bad pkalg h\223^R@h\223^R@"
> > >
> > > With protocol 1 I have no problem to connect without password
> > > from any client..The keys are generated with puttygen and
> > > appended to the right file (~/.ssh/authorized_keys2 with the
> > > rights 644).
> > > The firewall doesn't block the port 22.
> > >
> > > My main question is does anyone get this working?
> > >
> > > regards
> > > Michael
> > >
> > Two things. Your authorized_keys2 file should be not be set for group
or
> > other read permissions. Set it to 600.
> > Second, your keys are probably in the wrong format. See the PuTTY FAQ:
> > http://www.chiark.greenend.org.uk/~sgtatham/putty/faq.html#A.1.2
> >
>
> in the putty-help it should only be no write permissions for group/other.
> But I changed it to 600 and it doesn't make any difference.
> The key is in the right format, puttygen can read it.
> Is it right that the privat key file has both information, the privat and
> the public key? That is confusing me because the worst thing
> is to save both keys in one file.
>
> So my question: is still the same.
>
> regards
> Michael
>

Puttygen being able to read it doesn't matter (it stands to reason if you
created it in puttygen that it can read it). Please read the FAQ link I
posted.

The permissions might just be me being over cautious. Why allow everyone to
read it if they don't need to. It is always safest to make everything in
the .ssh directory unavailable to anyone else. 

--
William Hooper

Some mistakes are too much fun to only make once

Relevant Pages