Host based authentication and /etc/hosts.equiv

mike.salehi_at_gmail.com
Date: 07/11/05 

Date: 11 Jul 2005 06:33:00 -0700

         I am trying to set up host based authentication using open ssh
4.1
on solaris.

         Here are the extra things on the client side (i.e ssh_config)
HostbasedAuthentication yes
EnableSSHKeysign yes
RhostsRSAAuthentication yes
RSAAuthentication yes
preferredAuthentications
hostbased,publickey,keyboard-interactive,password
UsePrivilegedPort yes

ON the server side
RhostsRSAAuthentication yes
HostbasedAuthentication yes
IgnoreRhosts no

I have also put /etc/ssh/ssh_host_dsa_key to the other machines
/etc/ssh/ssh_known_hosts

Needless to say, its not working, I find conflicting info do I need to
put
the mahines in eachothers /etc/hosts.equiv?

Relevant Pages

  • Re: can passwordless SSH work without DNS ?
    ... >I tried placing the lines ... >HostbasedAuthentication no ... >RhostsRSAAuthentication no ... >server for this to work but I do not have root access to it. ...
    (comp.security.ssh)
  • Re: pubkey authorisation problem - how to setup a secure ssh
    ... > IgnoreRhosts yes ... > # RhostsRSAAuthentication and HostbasedAuthentication ... > # To disable tunneled clear text passwords, ...
    (comp.security.ssh)
  • hostbased authentication with SuSE 9.3
    ... Switch on HostbasedAuthentication and EnableSSHKeysign in ssh_config: ... Copy this file to all the hosts you want to trust. ...
    (comp.security.ssh)
  • Hostbased auth for root only
    ... I have a requirement to have unattended root access to these systems. ... able to use hostbased, but kerberos instead. ... I would configure the server with the 3 config files .... ... HostbasedAuthentication yes ...
    (SSH)