[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ssh and paswordless login between 2 woody machines



* stan (stanb@awod.com) [020325 16:26]:
> On Sun, Mar 24, 2002 at 01:31:37PM -0600, Nathan E Norman wrote:
> > On Sun, Mar 24, 2002 at 02:14:12PM -0500, stan wrote:
> > > I have two woody machines, that I want to be able to use ssh to login from
> > > one to the other without having to enter my password every time.
> > > 
> > > I added the contents of ~/.ssh/identity.pub on the machien I am loging in
> > > FROM to ~/.ssh/authorized_keys on the machine that I am loging in TO, and
> > > made certain that the permissions of it were r-- . 
> > > 
> > > But whn I do ssh to_machine, I'm still prompted for a password.
> > > 
> > > How can I fix this?
> > 
> > Check the permissions on ~/.ssh ... if that dir is world writable, ssh
> > won't do key-based authentication.
> > 
> Does this look corect?
> 
> stan@teddy:~$ ls -ld .ss*
> drwx--S---    2 stan     staff         145 Feb  6 14:59 .ssh
> drwxr-sr-x    2 stan     staff          62 Jan 13 22:45 .ssh2

Not exactly. At least with recent versions of openssh (not sure about
potato's) all of that stuff should be under ~/.ssh (i.e. ~/.ssh2 isn't
used for anything).

A quick summary:

local machine:

-rw-------    1 vineet   users         951 Aug  2  2001 .ssh/identity
-rw-------    1 vineet   users         221 Sep 29 10:55 .ssh/identity.pub

remote machine:

-rw-------    1 vineet   vineet        221 Feb 14 09:44 .ssh/authorized_keys

Which contains exactly the same information as the local
.ssh/identity.pub, something like this:

ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA/NcCWZsV13CKyosq9EpzFJs4IkA598dNGIlWpA+eX5LjJwF8xQc9XgH41KGM/dwKPKVjDnDdpm/2FHBTZmfe8hEMlcRIQlLj88KHm5lavWVY35zBraLdeVLlOhwHb3vsKjJDwLYTjJ5a/WFDj+fITzkiPB9UiONikdKInxVfcPc= vineet@gobo

(Only different, unless you want to give me access to the machine
instead of you!)

Such a key can be generated by using 'ssh-keygen -t rsa'.

good times,
Vineet

-- 
Currently seeking opportunities in the SF Bay Area
Please see http://www.doorstop.net/resume.shtml

Attachment: pgppiiGc4AVpb.pgp
Description: PGP signature


Reply to: