topic Re: Setting up passwordless ssh login in Operating System - HP-UX

Setting up passwordless ssh login

Shivkumar — Thu, 20 Nov 2008 22:33:40 GMT

Hi,

I want to setup passwordless ssh login. It should not ask the password even
the first time. How this will be achieved ?
While setting up passwordless ssh what is purpose of "known_hosts" ?

Thanks,
Shiv

Re: Setting up passwordless ssh login

James R. Ferguson — Thu, 20 Nov 2008 23:03:37 GMT

Hi Shiv:

This thread has a very good discussion of how to setup public keys in ssh:

http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1254688

The 'known_hosts' file contains the public host keys for all known hosts. The per-user version is maintained automatically. Thus, whenever a user connects from an unknown host, its key is added to the per-user file if you choose to acknowledge the fingerprint. If you don't, the connection can still be made, but you will be prompted the next time as if you had never connected.

See the manpages for 'sshd' and 'ssh' for more information.

Regards!

...JRF...

Re: Setting up passwordless ssh login

Sagar Sirdesai — Mon, 24 Nov 2008 07:41:33 GMT

Say You want to login from Server A as root to Server B without password.

On Server A generate the public key using the ssh-keygen command by login as root

Then on Server B go to the home-dirof/.ssh
and append the public key string to authorised_keys file

Also in known_hosts file append the hostname of server A.

Sagar

Re: Setting up passwordless ssh login

Shivkumar — Mon, 24 Nov 2008 19:40:44 GMT

So it means that we need to configure always 2 files "authorised_keys" and "known_hosts" for setting up passwordless login ?

Re: Setting up passwordless ssh login

Steven Schweda — Mon, 24 Nov 2008 21:58:48 GMT

> So it means that we need to configure
> always 2 files "authorised_keys" and
> "known_hosts" [...]

I wouldn't worry about "known_hosts". That
should be maintained automatically. You need
to deal with the actual key files,
"authorized_keys", and, perhaps, "identity".