[ale] ssh help?

Mike Kachline kachline at cc.gatech.edu
Sun Jan 17 21:54:55 EST 1999


-----BEGIN PGP SIGNED MESSAGE-----

On Sun, 17 Jan 1999, Nomad the Wanderer wrote:
>Ok,
>  I have 1.2.26 compiled and installed.  I have 2 questions though.
>I just put my identity.pub on my local machine into authorized_keys on
>the remote machine.  I ssh in it doesn't use the key though.  
<snip>
	One caveat is that, in order to use the RSA key for authentication,
you've essentially got to ssh from client to server, then from server to
client. That way, both of the machines are present in your "known_hosts" 
files. Thus, something like....

	localbox$ ssh remote.box
	Enter Normal password:
	remote$ ssh local.box
	Enter Normal Password:
	localbox$exit
	remote$ scp local.box:identity.pub .
	remote$ cat ./identity.pub >> ~/.ssh/authorized_keys
	remote$ exit
	localbox$ ssh remote.box
	Enter RSA password:


	... And you should be good to go. The trick is that, from the remote
box, you've got to ssh back to your local box in order for the remote box to
get an entry in it's "known hosts" file.


>
>  Second, what option needs to be used to force ssh to use the RSA key
>instead of normal passwords?
<snip>
	Take a look at sshd(8). Read up on the "RSAAuthentication" option. By
default, ssh enables RSA authentication over rhost authentication, so, chances
are, if you *want* to use RSA authentication, you won't need to make any
changes to your /etc/sshd_config.


									- Mike
============================================================================
Michael Kachline CS, Georgia Institute of Technlology
kachline at cc.gatech.edu
http://brightstar.gt.ed.net/kachline
============================================================================

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv

iQCVAwUBNqKkdLp4G55ObFUlAQE1gQP/YJyOap2V/6/n5fDnV3EQ4XMkhVAq4d4r
LWFd6A97sfuubPPsJiUJcfQ7bPvn42XSswDob4ft4Zx586hVn3Ga64L2rhagkIId
WkKtCivlZyqktakMcF8CcvrTOl4bAOGt9y1c9exlRNp9DgPikUMOqJJpg4GNYH3h
K+OmFVz8AQE=
=JkQ1
-----END PGP SIGNATURE-----






More information about the Ale mailing list