ssh login without password

shishirkotkar · 04-12-2008, 07:34 AM

i have an LTSP network...
i want to try local applications...ie execute the application on the thin client rather than on on the LTSP server

my thin clients host name is ws101
LTSP server linux- 75hv

To do so i followed following procedure on the LTSP server

1. Add this line to lts.conf

LOCAL_APPS = Y

This forces workstations to start the ssh daemon when they boot.

2. To enable login in on the workstation without a password we did this:

first generate as root a DSA key
> ssh-keygen -q -t dsa -f /root/.ssh/id_dsa
Create a directory .ssh in /opt/ltsp/i386/root/
> mkdir /opt/ltsp/i386/root/.ssh
> chmod 700 /opt/ltsp/i386/root/.ssh
Copy the public dsa file
> cp /root/.ssh/id_dsa.pub /opt/ltsp/i386/root/.ssh/authorized_keys
> chmod 600 /opt/ltsp/i386/root/.ssh/authorized_keys

Questions

Now to try password less ssh login what am i suppose to do??
What i did was from the thin client i gave command "ssh root@ws101"
after i do this it asks me for root@ws101's password...

Do i have to do any configurration changes in ssh_config or sshd_config??

Bruce Hill · 04-12-2008, 09:04 AM

Here's my passwordless loging tute:

Code:

On the server:
ssh-keygen -f /root/.ssh/identity.silas -t dsa
rsync -va /root/.ssh/identity.silas.pub root@silas:/root/.ssh/
The above lines you run on the backup server, and then you go to silas and you run:
cat /root/.ssh/identity.silas.pub >> /root/.ssh/authorized_keys
chmod 640 /root/.ssh/authorized_keys
rm -f /root/.ssh/identity.silas.pub
Then test passwordless logins from server to silas by typing this at the server's prompt:
ssh -o"BatchMode yes" -o"user root" silas -i /root/.ssh/identity.silas

silas is the client ... adjust accordingly

choogendyk · 04-12-2008, 04:27 PM

Or, for a more complete explanation that won't trip you up if something is slightly different with your setup, take a look at

http://sial.org/howto/openssh/publickey-auth/

I've relied on the howto's on this site for a number of things, including ssl certificates, ssh, etc.