topic Re: SSH Experts in Operating System - HP-UX

SSH Experts

Chrisl_2 — Fri, 26 May 2006 11:56:10 GMT

Hi all. On my hp systems, I have created passwordless ssh logins thru the following simple procedure.
1. have the remote user generate keys:
ssh-keygen -t rsa
this creates id_rsa and id_rsa.pub files
2. copy id_rsa.pub to my box
3. add id_rsa.pub to my authorized_keys file
done - works great
Problem - on a remote SUN I have the user run
ssh-keygen -t rsa. It creates id_rsa_2048_a and id_rsa_2048_a.pub. I copy the pub key over to my box and add it to authorized_keys. I can't connect. The format of the public key is different in that is actually looks like it is contained in an email. Should I edit the key in authorized_keys to make it look format wise like the HP generated keys?

TIA

Re: SSH Experts

Florian Heigl (new acc) — Fri, 26 May 2006 11:58:48 GMT

No,

first of all check both SSH keys are version2 ssh keys - then and only then they should look the same and be compatible.

I had the very same issue on my Tru64 box which still used SSHv1 - I wouldn't even have noticed without the issues. :)

Re: SSH Experts

Chrisl_2 — Fri, 26 May 2006 12:04:05 GMT

according to man ssh-keygen the -t rsa generates a version 2 protocol.

Re: SSH Experts

Peter Nikitka — Fri, 26 May 2006 12:09:17 GMT

Hi,

generally it would help if you tell the OS-versions of HPs and SUNs.

You can get more and more verbose output when doing
ssh -v host
ssh -vv host
ssh -vvv host

This should give sufficent output to analyze the problem.

mfG Peter

Re: SSH Experts

Chrisl_2 — Fri, 26 May 2006 15:34:30 GMT

ok, I figured this out. The commercial ssh and openssh generate the public key in different formats. To change formats, run ssh-keygen -i -f >> authorized_keys. Normally, you would just cat pubkey >>authorized_keys.

chris

Re: SSH Experts

Chrisl_2 — Fri, 26 May 2006 15:35:32 GMT

see thread