Hi,

I am currently doing SAP distributed installation i.e. CI (hosta) and DB (hostb). Now for running jobs from CI to DB server we have to complete ssh configuration without password authentication.

For this I performed below steps:

1. generated ssh public and private key on CI (hosta) using ssh-keygen -t rsa at /home/sidadm directory.

2. Since sidadm user exists on both server but it's home directory is encrypted so copied the public key from hosta to DB (hostb) on /etc/ssh/auth_key/authorized_keys.

3. Changed the ownership to sidadm with 600 permission on authorized_keys.

4. Made changes in /etc/ssh/sshd_config file and allowed RSAAuthentication, PublickeyAuthentication.

5. Changed AuthorizedKeysFile path to /etc/ssh/auth_key/authorized_keys.

6. Changed PasswordAuthentication to No.

All these steps allowed ssh from hosta to hostb without using password and jobs were running from App to DB. After sometime when I tried to connect to DB (hostb) using putty from my desktop it started giving error for all user logon(root, sidadm, etc.) as below:

"Disconnected: No supported authentication methods available (server sentublickey, gssapi-keyex,gssapi-with-mic)".

I had to forcibly remove ssh to allow users logon to DB (hostb).

Can anyone please help what I have missed which created this issue as ssh is required in our scenario.


Thanks,
Newbie

Once you disable Password Authentication, all logins need to use Key-based auth. You go through pretty much the same steps to set this up for each PuTTY client. The Pageant and PuTTYgen tools are on the PuTTY website.

1 members found this post helpful.

Hi Smallpond,

Thanks for your reply.

As I am newbie in linux programming and ssh, so please bear with me if I ask basic question.

So as per your reply I have to perform same steps on my desktop for ssh i.e. create .ssh directory and I have to add my desktop in known host and copy public key file to authorized_keys on .ssh directory at desktop?

OR

I just copy publc key id_pub.rsa file from hosta and using puttygen-->Conversion-->Import key.


Thanks,
Newbie