Hi Guys,

I was able to setup password-less ssh on two CentOS 5.5 servers, I don't encounter any problem on root account but when I try on another user it fails and ask for a password

This what I've done.

centostest1 = Source
centostest2 = Destination

On Source Server (centostest1)

1. ssh-keygen
2. ssh-copy-id -i id_rsa root@centostest2
ssh-copy-id -i id_rsa user@centostest2
3. Now to test

ssh root@centostest2 <--- no problem, no password needed
ssh user@centostest2 <--- problem, it asked the password for user

Anyone would like to help me and light my path?

Check /etc/ssh/sshd_config file on the servers. Look at the paragraph of instructions above the UsePAM Yes line. It explains the two changes needed to use pubkey authentication. From your message, it looks like you created keys for the clients, but didn't make configuration changes on the server.

Launch ssh with the -vv option (two v's not a w). This will provide more debugging feedback.

One common problem is if the permissions on the user's home directory or the .ssh subdirectory is too permissive.

If you can log into the server using username/password, check the ~/.ssh/authorized_keys file to see if they look OK and the public keys were added.

An entry in sshd_config of "PermitRootLogin without-password" will disable password authentication for root. This could be why users can use password authentication while root can't.

This might be out of question a little bit, but I think you should ssh-copy the id_rsa.pub key, not the id_rsa which is the private key.

You should also be doing keygen separately for each user.
Ideally you shouldn't login remotely as root, even with ssh-keys

Thank you for your replies.

@jschiwal:

Have checked the "PermitRootLogin" on sshd_config and it's commented. As for the

@sibe:

I think the command is right, because when you execute the command ssh-copy-id -i id_rsa root@centostest2 it sends the id_rsa.pub to the remote server.

@chrism01

I have done generating ssh-keygen on "root" user and the other "user". What I've done is

A) on root user
su - root
ssh-keygen
ssh-copy-id -i id_rsa root@centostest2

B) on rsyncusr
su - rsyncusr
ssh-keygen
ssh-copy-id -i id_rsa rsyncusr@centostest2

But still I can login password-less uaing 'root', but not in 'rsyncusr'

You're right, thank you for enlightening me

are they different users?


----
sibe

Ow sorry, a little typo error, actually it's "rsyncusr" not "user"

Anyone would like to help me guys?

Did you try the suggested -vvv to ssh?