Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Forums
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-02-2009 01:19 PM
06-02-2009 01:19 PM
DSA key
>sftp XXXX
Connecting to xxxx...
No DSA host key is known for XXXxand you have requested strict checking.
Host key verification failed.
Connection closed.
********
DSA key is already there in (/home/user/.ssh/id_dsa
Please help me out
- Tags:
- sftp
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-02-2009 01:23 PM
06-02-2009 01:23 PM
Re: DSA key
If you "cut-and-pasted" the key make sure that you did so correctly.
Regards!
...JRF...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-02-2009 01:26 PM
06-02-2009 01:26 PM
Re: DSA key
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-02-2009 01:36 PM
06-02-2009 01:36 PM
Re: DSA key
You need a copy of the id_dsa.pub key of the server you are connecting FROM in the /home/user/.ssh/known_hosts file on the server you are connecting TO.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-02-2009 01:39 PM
06-02-2009 01:39 PM
Re: DSA key
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-02-2009 01:43 PM
06-02-2009 01:43 PM
Re: DSA key
If you are logging into the remote site, then YOUR id_dsa.pub needs to go into THEIR /home/user/.ssh/known_hosts
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-02-2009 01:51 PM
06-02-2009 01:51 PM
Re: DSA key
If you are logging into the remote site, then YOUR id_dsa.pub needs to go into THEIR /home/user/.ssh/authorized_keys file (not the known_hosts).
On YOUR server you might need the HOST key of the REMOTE server in the /home/user/.ssh/known_hosts on your local server.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-02-2009 01:52 PM
06-02-2009 01:52 PM
Re: DSA key
my server name xxx {root}: / >sftp xxx.xxx.ca
Connecting to xxx.xxx.ca...
No DSA host key is known for xxx.xxx.ca and you have requested strict checking.
Host key verification failed.
Connection closed.
Here are keys listed
Server name {root}: /home/user/.ssh >ll
total 48
-rw------- 1 user user 672 Jan 29 15:53 id_dsa
-rw-r--r-- 1 user user 604 Jan 29 15:53 id_dsa.pub
-rw-r--r-- 1 user user 1300 Feb 2 14:01 known_hosts
server name {root}: /home/user/.ssh >
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-02-2009 01:57 PM
06-02-2009 01:57 PM
Re: DSA key
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-03-2009 12:37 PM
06-03-2009 12:37 PM
Re: DSA key
AAAIANuvyb3dj7b5cO5w1F4xtTQETicbGddlreHlHM
How to paste the key in
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-03-2009 01:40 PM
06-03-2009 01:40 PM
Re: DSA key
> How to paste the key in
Use 'vi'. You can copy-and-paste into an offered line or merge from an external file. Be sure that you don't inadvertanly add newlines where there are none!
Regards!
...JRF...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-05-2009 11:58 AM
06-05-2009 11:58 AM
Re: DSA key
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-05-2009 07:13 PM
06-05-2009 07:13 PM
Re: DSA key
So there are two ways to add the key:
1. (most reliable) copy the public key file to the target system as an ASCII file. Then append it to the authorized_keys file:
cp /tmp/id_dsa.pub >> ~userabc/.ssh/authorized_keys
Be sure to count the lines:
wc ~userabc/.ssh/authorized_keys
Each key in the file must be exactly 1 line.
2. Resaerch your terminal emulator (SecureCRT, PuTTY, Reflection, xterm, hyperterminal, etc) to see how the emulator handles copy/paste. Most emulators silently insert end-of-line codes when you copy multiple lines on the screen. Some emulators such as Reflection have an option to suppress the separators and match the original input string.
When you use vi, depending on your .exrc file (or built-in defaults), there may be a wrap-margin setting and/or auto-indent which will break up the line. Turn off wm and ai with:
:set noai wm=0
Then insert the new line. Type ESC to finish the insert and then jump to the beginning of the key using the character 0 (zero). If it moves to the beginning of the line but not the beginning of the key, then the key has been split by copy/paste. Move to the beginning of the line and type J (capital J) which joins the current line with the next line. Move to the space between the two strings. Delete the space (carefully). Repeat the J command and remove the extra space until the key is one line with no imbedded spaces.
(choose your method)
Note also that permissions and ownerships are critical. On the target system, the HOME directory cannot be writable by any user except the owner. .ssh must be 700 permission, all files in .ssh should be 600. If any of these are not correct or the public key is not pasted correctly, sftp (ssh) will fail without telling you what you did wrong.
Bill Hassell, sysadmin
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-06-2009 01:14 AM
06-06-2009 01:14 AM
Re: DSA key
This works better using cat. :-)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-06-2009 03:34 PM
06-06-2009 03:34 PM
Re: DSA key
cat /tmp/id_dsa.pub >> ~userabc/.ssh/authorized_keys
Absolutely correct. cp won't work.
Bill Hassell, sysadmin