topic Re: SSH Problem in Operating System - Linux

SSH Problem

Prashant Zanwar_2 — Tue, 24 Feb 2004 07:36:59 GMT

Hi,

There are two systems A & B
I am generating SSH key using ssh_keygen in a file under my home directory.
This file I am taking from machine A to Machine B under my home /home/prashant/.ssh/authorized_keys.
Now if I try to do ssh harjit@b,
ideally this shall not ask for password, but it is asking...

I have checked file permissions and everything, bounced sshd and inetd...changed nsswitch.conf, no luck...

Error is given below:
Feb 24 06:51:41 bslgdc-linux1 sshd[6450]: Authentication refused: bad ownership or modes for directory /home/harjit

Please help..

Will assign points

Regards
Prashant

Re: SSH Problem

Alexander Chuzhoy — Tue, 24 Feb 2004 08:39:49 GMT

if you generate a file with ssh-keygen then you should append the content of your .ssh/id_dsa.pub into .ssh/authorized_keys file on destination machine. Is that what you did?

Re: SSH Problem

Prashant Zanwar_2 — Tue, 24 Feb 2004 09:05:58 GMT

yes i did cat id_dsa.pub >> authorized_keys

Regards
Prashant

Re: SSH Problem

Alexander Chuzhoy — Tue, 24 Feb 2004 09:19:39 GMT

it's because of your security -that's set on .ssh/authorized_keys file. It shouldn't be to "open" toherwise ssh is failing protectively
chmod it to 644
_
chmod the .ssh directory to 700
+
see that the owner of the .ssh/authorized_keys file is the correct owner.

Re: SSH Problem

Olivier Drouin — Tue, 24 Feb 2004 10:02:13 GMT

Error is given below:
Feb 24 06:51:41 bslgdc-linux1 sshd[6450]: Authentication refused: bad ownership or modes for directory /home/harjit

SSH verifies *recursively* the permission settings down to "/".

Re: SSH Problem

Steven E. Protter — Tue, 24 Feb 2004 10:41:56 GMT

You may have missed steps in the procedure.

Attaching a good doc. You can use cat >> instead of X windows.

SEP

Re: SSH Problem

Armin Kunaschik — Wed, 25 Feb 2004 04:02:23 GMT

Looks like the permissions of your local home directory are wrong.
Remove write-permission for group and world:

chmod go-w $HOME

If things don't work simply remove all
write permissions for group and world
of $HOME, $HOME/.ssh and $HOME/.ssh/* on
both server and client side.
This fixes 90% of my known ssh problems :-)

Regards,
Armin