LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 07-10-2006, 01:36 PM   #1
neocontrol
Member
 
Registered: Jul 2005
Posts: 273

Rep: Reputation: 31
passphraseless dsa key


Hello,

I need a dsa key between a linux and solaris machine.

I've read the how to's, and i cant figure this out. which machine am i making the keys on?

where do i put them?

what file do i need to edit to get them to work?

THanks,
 
Old 07-10-2006, 01:39 PM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
a dsa key to do what?? if you mean ssh, check out david ross's linuxanswer in our tutorial section.
 
Old 07-10-2006, 02:02 PM   #3
neocontrol
Member
 
Registered: Jul 2005
Posts: 273

Original Poster
Rep: Reputation: 31
I need a passphraseless, password less connection between two machines we have.

I've read that file you mentioned, and I'm still confused. Top problems.

1.) Which key do I put where? public --> ? private --> ?
2.) restart ssh services?
 
Old 07-10-2006, 02:29 PM   #4
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
yes ok, i get the passphrase stuff... not a problem.

1) you put the client private key onto the server, as that's the way that you make the connection. the server must know about the client, not the other way round.

2) nothing needs to be restarted, this is something that totally unpriveledged users can do totally safely.
 
Old 07-10-2006, 02:35 PM   #5
neocontrol
Member
 
Registered: Jul 2005
Posts: 273

Original Poster
Rep: Reputation: 31
Okay, another question.

Lets say I'm logged in at "bob" and I run a program, that needs to copy a file over to anohter server. In the script it goes over and tries to login as "tom" and puts the file in a directory over there.

Do I create the key as bob, and copy it over to tom?

I'm really feeling lost on this.

I've gotten this to work before, when it was straight forward, e.g. just using passphrases. This, I can't seem to grasp.

Thanks for you help,
 
Old 07-10-2006, 03:19 PM   #6
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
the logins are typically on a per user basis at the most granular level. if user a on the client copies their key to user b's key file on the server then you will be able to log in automatically whilst changing username.
 
Old 07-11-2006, 11:58 AM   #7
neocontrol
Member
 
Registered: Jul 2005
Posts: 273

Original Poster
Rep: Reputation: 31
Okay, still working on this.

I created a key combo on the client machine. I created it under root, as that is the user we use to run this particular script. Installed the key pair under the default /root/.ssh/

The client we are on is linux, and the server we are trying to get on , is solaris.

On the solaris machine, there isnt a /root directory, but it looks like roots home is / I typed cd and then did a pwd to figure this out.

So I put the public key under /.ssh and just for the hell of it, i put it under the user we are going into this machine as /users/charlie/.ssh

Here's the sshd config file from the solaris machine. *I only put the stuff that's not commented*

port 22
StrictModes no
UserConfigDirectory "%D/.ssh"
AuthorizationFile authorization
AllowTcpForwarding yes
AllowX11Forwarding yes
AlloweedAuthentications publickey,password
allowUsers charlie *theres more but not needed here*
PermitRootLogin no
DSAAuthentication yes
PubkeyAuthentication yes
AuthorizedKeysFile .ssh/id_dsa.pub

I have no idea what else to put, or if i have something wrong in here.

Sorry to be a pain,
 
Old 07-11-2006, 02:18 PM   #8
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
i don't understand why this is so tricky... why have you changed the AuthorizedKeysFile values? why are you copying the public key anywhere? that's the bit that the client gives the server on login. the server needs the private keys, as the documentation states.

and as an aside... have you not noticed the little line there that says "PermitRootLogin no" ? leave it there and use a non-root user for this function.
 
Old 07-11-2006, 02:51 PM   #9
neocontrol
Member
 
Registered: Jul 2005
Posts: 273

Original Poster
Rep: Reputation: 31
"the server needs the private keys"

Well this could be a good reason why this doesn't work at all. I'm an idiot.

I made the changes, now i get a differnt error. But at least it uses the dsa keys. Thanks for all your help. I think I can figure it out from here.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Which is better RSA or DSA public key? tarballedtux Linux - Security 12 02-03-2009 06:15 AM
warning: clamav-0.87.1-1.1.fc2.rf.i386.rpm: V3 DSA signature: NOKEY, key ID 6b8d79e6 Niceman2005 Linux - Software 4 03-07-2006 05:28 AM
V3 DSA signature: NOKEY, key I 123racoons Fedora 0 06-24-2004 11:59 AM
How do I get a DSA public key ??? amp2000 Linux - General 5 12-17-2003 03:30 PM
warning: curl-7.10.3-1.i386.rpm: V3 DSA signature: NOKEY, key ID df3d5207 Lespuff Linux - Newbie 2 11-30-2003 11:25 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 10:57 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration