topic Re: ssh login in Operating System - HP-UX

ssh login

Cliff Lim Kok Hwee — Wed, 26 Oct 2005 08:34:21 GMT

Gd Day Forum,

I just setup a HP-UX 11i serverC into an existing environment where currently all servers are login using ssh from a centralise serverA as follows without being prompted root login password.

serverA#> ssh serverB

Can anyone advise what entries need to be added into serverB to allow this access?

Thanks/cliff

Re: ssh login

Ranjith_5 — Wed, 26 Oct 2005 08:54:26 GMT

Hi,

You have to create create $HOME/.ssh/authorized_keys to make this happen.

there are many threads already there on the same subject. See

http://www2.itrc.hp.com/service/james/search.do?searchtext=ssh+without+password&hpl=1&todo=search&searchcriteria=allwords&from=forums&searchcategory=ALL&rn=25&presort=rank&source=7000&esc=us.support.itrc.hp.com&wpa=forums1.itrc.hp.com%3A80&origin=0&chkServStor=on

Regards,
Syam

Re: ssh login

Alzhy — Wed, 26 Oct 2005 08:56:06 GMT

Simply copy (permissions set as well) serverB's ~/.ssh/authorized_keys* to serverC's ~/.ssh directory.

Re: ssh login

Mel Burslan — Wed, 26 Oct 2005 09:08:43 GMT

You need to create a public/private key pair on server B and append the public portion of this key to serverA's $USERNAME/.ssh/authorized_keys file.

or

if you do not want to mess with creating and massaging key pairs, go to another system let's say serverC, which trusts serverA, goto same user's home directory
cd .ssh
grep serverA authorized_keys

copy this key (make sure it is copied without any line breaks)

then

go to serverB and go to the same user's home directory
if you do not have a .ssh directory, create it otherwise

cd .ssh
cat >> authorized_keys

paste the copied key in the buffer

hit ctrl-D

make sure your authorized keys ownership is right and owned by the username and its default group and permissions is no looser than 640.

you should be good to go.

at your first attempt you will be asked to confirm the identity of serverB from serverA but after that, there are no questions asked.

Re: ssh login

Bharat Katkar — Wed, 26 Oct 2005 09:33:15 GMT

Hi,
Say you have to set ssh between server C and A then:

On server C:
1. # ssh A
When it asks for password just use to break and get the prompt back.
This will create /.ssh directory in server C.
2. # ssh-keygen -d
DO NOT PUT ANY PASSPHRASE (just provide blank ENTERs)
Verify that id_dsa.pub file is created in /.ssh directory. This is your public key. You need to distribute it to other machines like here server A.

Copy or ftp this file id_dsa.pub to server A say in /tmp directory

Then on server A:
3. # cat /tmp/id_dsa.pub >> /.ssh/authorized_keys

Now you can do login to server C from server A without being prompted for password.

e.g.
On server A
# ssh C
This will give you root login of server C.

Hope that helps.
Regards,

Re: ssh login

Cliff Lim Kok Hwee — Wed, 26 Oct 2005 09:40:29 GMT

Thanks for the replies!

I tried copying directly the /root/home/root/.ssh/authorized_keys from trusted serverA over to serverC but when i issue the command

serverA> ssh serverC or ip address
NOTHING JUST HUNG THERE.

thanks/cliff

Re: ssh login

Alzhy — Wed, 26 Oct 2005 09:42:17 GMT

On ServerC .. are you sure you have your sshd setup right?

Try running a debug ssh session to ServerC..

ssh -vvv serverC (not sure of syntax...)