help w/ sshd pubkeyauth

PTBmilo · 02-16-2003, 12:06 AM

Hi all. I'm trying to set up my sshd server so that I don't need to type in passwords when I log on. I'm having trouble getting it to work and was wondering if someone could help me out.

When I try to log on from the remote host, I get this:

Permission denied (publickey,keyboard-interactive)
Here's the relevant parts of my sshd_config file:

Code:

HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key

RSAAuthentication yes
PubkeyAuthentication yes
AuthorizedKeysFile      '%h/.ssh/authorized_keys'

PasswordAuthentication no
PermitEmptyPasswords no

I went to ~/.ssh/ and did "cat known_hosts > authorized_keys"

Is this the correct way to set up that file?

can somebody help me out here?

thanks in advance.

m0rl0ck · 02-16-2003, 02:06 AM

Run "ssh-agent" then "ssh-keygen -d". Then put each machines public key into the other machines authorized_keys2 file. Youll have to create this file on each machine.
Be careful not to get line breaks into the key when you copy it or it wont work.
Besides logging in without passwords you ll also be able to remotely run commands on the other machine. Just ssh <machine> <command>

ex.
ssh booger /usr/local/scripts/onppp
booger is my firewall

pjcp64 · 02-24-2003, 05:27 AM

Excellent article with step by step instructions and explanations.

http://www.gentoo.org/proj/en/keychain.xml

It doesn't cover the ssh_config and sshd_config files though. Modifications to these will have to be researched elsewhere.