Re: Rhosts authentication with openssh 3.7

From: Neil W Rickert (rickert+nn_at_cs.niu.edu)
Date: 11/20/03 

Date: 20 Nov 2003 20:02:19 GMT

ludovic.leclerc@col.bsf.alcatel.fr (ludovic LECLERC) writes:

>...
>Now I was asked to upgrade openssh version (due to vulnerability
>reasons) so I tried v3.7.1p2. And what a surprise !
>RhostsAuthentication option is now deprecated. So now my scripts fail
>because ssh asks for a password each time I use a "ssh localhost"
>command ...
>I tried to use RhostsRSAAuthentication instead but it fails (ask a
>password) with this messages :

>...
>debug1: Remote: Your host key cannot be verified: unknown or invalid
>host key.
>debug1: Server refused our rhosts authentication or host key.
>debug1: Doing password authentication.
>root@localhost's password:

Either:

        Make "ssh" setuid

                chown ssh root
                chmod u+s ssh

or:

        set EnableSSHKeysign to "yes" in your ssh_config
        file. (And make sure that ssh-keysign is setuid).