topic Re: ssh without password in Operating System - HP-UX

ssh without password

heaman1 — Tue, 12 May 2009 06:41:58 GMT

I know ssh-keygen -t rsa can public key to let local user login / scp to remote server without password , if I use this method to set it , ALL scp / remote login is no need to input password , can advise if I want only a specific ( not all ) jobs can do it ( without password to scp / remote login ) , what can i do ? thx

Re: ssh without password

Ganesan R — Tue, 12 May 2009 06:51:14 GMT

Hi Heaman,

ssh password less login is user specific. If you setup a ssh password less login for a specific user then all ssh/scp/sftp/slogin won't require password to specific destination server where you have put the public key.

I don't think you can restrict with specific job.

Re: ssh without password

heaman1 — Tue, 12 May 2009 06:54:35 GMT

thx reply ,

if I want to let specific job to password less to run , what can i do ? thx

Re: ssh without password

Nido — Tue, 12 May 2009 07:07:09 GMT

Hi,

As Ganesan stated passwordless ssh will be user specific.
You can have your job owned by specific user and have that user passwordless authentication using SSH.

Thanks,

Re: ssh without password

heaman1 — Tue, 12 May 2009 07:22:46 GMT

thx ,

If I would like to do it , except passwordless ssh , is there other method ? thx

Re: ssh without password

Vikas Thorat — Tue, 12 May 2009 07:35:03 GMT

Hi Heaman1,

If your user is intend to do only that specific job then you can follow below steps :

1)This specific user should have shell /usr/bin/rsh
2) Create a directory (/home/username/bin) where all your required commands / binaries will reside so this user can execute only these benaries (remotely)
3)Under this users profile specify PATH variable to : export PATH=/home/username/bin
4)Whatever command and files you are going to execute should have respective file permissions for this specific user.

Hope, this way around will work in your case.

Please, assign points if the solution found suitable.

regards,

Vikas Thorat

Re: ssh without password

Sajjad Sahir — Tue, 12 May 2009 07:48:23 GMT

once u downloaded software

please make in users home directory .ssh directory

if ssh from first server to second server then cut and paste public key from server one in $HOME/.ssh/authorized_keys on server two
reverse the process for reverse.

$HOME and $HOME/.ssh must not be writable by group or other.

thanks and regards

Sajjad Sahir

Re: ssh without password

Suraj K Sankari — Tue, 12 May 2009 08:20:01 GMT

Hi,

Just create a new user keep all the things are same means permissions, home directiory but make it passwd less and give to that particular customer.

Suraj

Re: ssh without password

Ganesan R — Tue, 12 May 2009 08:35:15 GMT

Hi Heaman1,

>>If I would like to do it , except passwordless ssh , is there other method ?<<

if you still don't want to go for standard password less login method, you should try with tools like "expect"

With the help of this tool, you can issue password inside the script. You can use that script to ssh/scp/sftp.

You can download expect from here.
http://expect.nist.gov/

Refer this recent thread on how to configure the script.

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1337805

Also this

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1005570

Re: ssh without password

Steven E. Protter — Tue, 12 May 2009 09:35:01 GMT

Shalom,

Individual users can exchange ssh passwords via public key exchange.

http://www.hpux.ws/?p=10

SEP