openssh between linux and HP-UX

[Marty Metras]

I'm trying to set up a Public key so I can use rsync and SSH without it prompting for a password.
I have set up public key on 4 boxes 2 use HP-UX and 2 are Linux.
Here is the problem:
Using ssh to the Linux boxes works fine.
Using ssh to the HP-HX boxes always prompts for the Password.
On all 4 boxes ssh ver. is the same 3.1
The Authorize_keys file has the Public key for each of the boxes.
Is there a compatiable issue going from unix to unix or linux to unix?
What do I need to learn to make this work?
Can you help?
Marty

[Kodjo Agbenu]

Hello,

I would suggest you compare the daemon config files /etc/ssh/sshd_config on both Linux and Hp-ux sides.

If you want further investigations, post the /etc/sshd_config file as well as the syntax you are using to connect from one system to the other.

Good luck.

Kodjo

[Steven Mertens]

hi,

Did't you enter an empty
passphrase for your keys ?

rgds.

Steven

[Marty Metras]

Hi kodio,
Here is what is in the ssh_config files.
I have change nothing in them. They are still default.

Marty
ssh_config

Unix both boxes "N" and "A" /opt/ssh/etc/sshd_config
Protocol 2
Subsystem sftp /opt/ssh/libexec/sftp-server
All other other lines are remarked out

Linux both boxed "I" and "U" /etc/ssh/ssh_config
SyslogFacility AUTHPRIV
X11Forwarding yes
Subsystem sftp /usr/libexec/openssh/sftp-server
All other other lines are remarked out

[Marty Metras]

Steven,
I did leave the passphrase empty.
Marty

[Kodjo Agbenu]

Hi Marty,

It seems that hp-ux"s default sshd config does allow only protocol 2, which means dsa or rsa only.

I would suggest that you replace :

Protocol 2

by

Protocol 2,1

in /etc/ssh/sshd_config on your Hp-ux boxes, then restart the daemon.

Please post the result of that tests.

Good luck.

Kodjo

[Steven E. Protter · Accepted solution]

Your best bet is to exchange public keys between the servers user by user.

Attached is a cookbook.

I've gotten it to work though it seems to work more smoothly on the Linux side.

P

[Marty Metras]

Thanks Steven,

It looked like the problem I was having with this was a right issue with the user. Reviewing syslog and using the "-v" I found that the user was giving too much rights. After I took (Write) access away from the group all was fine. Coping the PublicKey to the box I wanted to log in to also was a problem to start with.
What I have now and is working fine is as follows.
4 servers with the same users on all 4 with 4 PublicKeys so this user can keep things in sync by using scripts on each server that has information that is shared by the user that dose the syncing. It is almost complete automated.
These computers have to have friends to talk to or they get lonely too.
I could have not have been able to make this work with out the forums help.

I sent a reply before telling what I had done to fix this. I dont see it in the responce change.

Thanks again.
Marty