ssh passwordless connection problem

[mrk_1]

Hi,
I tried to setup the passwordless connection to remote host on HP-UX server.
but still its asking password to connect to remote host.

Attached the procedure.

Can anyone help me to solve the problem.

Thanks in advance.

[Steven Schweda]

Search the Forum. This has been covered
countless times.

"ssh -v [...]" is usually helpful, for a
start.

[Uday_S_Ankolekar]

Also check the permissions of destination ~home and !home/.ssh directory.
ssh does not like if permission is open for others.

-USA..

[Jeroen Peereboom]

chmod 777 authorized_keys????

better make it chmod 640 !

cannot check the required settings of .ssh directory itself...

JP

[mrk_1]

Hi,
Thanks for the reply.

what would be the permission for .ssh folder.
I changer the chmod 640 for authorized_keys.

Thanks,
Ram

[OldSchool]

svr# ls -ld .ssh
drwx------ 2 root system 512 Jul 03 2007 .ssh
svr# ls -l .ssh
total 40
-rw------- 1 root system 214 Jul 03 2007 authorized_keys
-rw-r--r-- 1 root system 12599 Dec 11 14:18 known_hosts
svr#

[mrk_1]

ls -ld .ssh
drwx------ 2 user1 users 1024 Jan 23 19:20 .ssh


ls -l .ssh
total 4
-rw-r--r-- 1 user1 users 394 Jan 23 19:18 authorized_keys
-rw-r--r-- 1 user1 users 884 Jan 23 19:18 known_hosts

Still not working.

Thanks.

[mrk_1]

I tried in loal host:

user1@A[XXX]:/users/user1/admin [1] ssh -v B

OpenSSH_4.3p2-hpn, OpenSSL 0.9.7i 14 Oct 2005
HP-UX Secure Shell-A.04.30.006, HP-UX Secure Shell version
debug1: Reading configuration data /opt/ssh/etc/ssh_config
debug1: Connecting to b [xxxxxxxxx] port 22.
debug1: Connection established.
debug1: identity file /users/user1/admin/.ssh/id_rsa type 1
debug1: identity file /users/user1/admin/.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_4.3p2-hpn
debug1: match: OpenSSH_4.3p2-hpn pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.3p2-hpn
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'B' is known and matches the RSA host key.
debug1: Found key in /users/user1/admin/.ssh/known_hosts:1
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Offering public key: /users/user1/admin/.ssh/id_rsa
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug1: Trying private key: /users/user1/admin/.ssh/id_dsa
debug1: Next authentication method: keyboard-interactive
Password:


Still asking password....

[OldSchool]

I said:
ls -ld .ssh
drwx------ 2 root system 512 Jul 03 2007 .ssh
ls -l .ssh
total 40
-rw------- 1 root system 214 Jul 03 2007 authorized_keys
-rw-r--r-- 1 root system 12599 Dec 11 14:18 known_hosts
svr#

You said:
ls -ld .ssh
drwx------ 2 user1 users 1024 Jan 23 19:20 .ssh
ls -l .ssh
total 4
-rw-r--r-- 1 user1 users 394 Jan 23 19:18 authorized_keys
-rw-r--r-- 1 user1 users 884 Jan 23 19:18 known_hosts

Do you see the difference?

And the permissions need to be correct on both ends of the connection.

[mrk_1]

Hi all,
I found below error in /var/adm/syslog/syslog.log at remote host B when I tried from local host A.

Jan 23 19:58:07 B sshd[22075]: Authentication refused: bad ownership or modes for directory /users/user1/admin

Home directory of user1 is looking bad authendication at Remote host.

Is it necessary to be same permission for both HOME directory.

Thanks.