Remote ssh without password

[haeman]

I have setup ssh for remote user connection , now user ssh from server A to server B is no need to input password , it works fine .

But server B have a change password policy ( the user is required to change password every month , that means the password will be expired every month ) , so when user ssh to server B , they are required to change password when it was expired , can advise how to let the user is no need to change password when login with remote ssh , but still need to change password when normal login , eg. telnet , ftp etc ?

Thx

[SKR_1]

Make the entry of B server hostname in .rhosts file in perticuler user home directory on server A & vice versa.

Thanks

SKR

[Dennis Handly]

>SKR: Make the entry of B server hostname in .rhosts file in particular user home directory on server A & vice versa.

.rhosts has nothing to do with ssh, just rcp, rlogin and remsh.

I would assume there isn't a way to do this, I have to change my password with rlogin and .rhosts.

[Jeeshan]

check this attachement.

[Asif Sharif]

http://docs.hp.com/en/5991-7493/ch04.html

[Sandeep_Chaudhary]

8 ssh-keygen -t dsa -f .ssh/id_dsa
9 ls -ali .ssh
10 touch .ssh/authorized_keys2
11 chmod 640 .ssh/authorized_keys2
12 ls -ali
( copy id_dsa.pub file to other machine at $HOME)

13 cat id_dsa.pub>>.ssh/authorized_keys2
16 rm id_dsa.pub

18 cd .ssh
20 ln -s authorized_keys2 authorized_keys



rau as ftporacl@suxde082 [/home/ftporacl]
# ls -ali .ssh
total 64
356 drwxr-xr-x 2 ftporacl users 96 Mar 12 15:25 .
319 drwxr-xr-x 3 ftporacl users 8192 Mar 12 15:24 ..
360 lrwxr-xr-x 1 ftporacl users 16 Mar 12 15:25 authorized_keys -> authorized_keys2
359 -rw-r----- 1 ftporacl users 601 Mar 12 15:22 authorized_keys2
357 -rw------- 1 ftporacl users 668 Mar 12 15:15 id_dsa
358 -rw-r--r-- 1 ftporacl users 607 Mar 12 15:15 id_dsa.pub

[haeman]

thx Sandeep_Chaudhary's reply ,

can advise in which server ( server A or server B )that I should run the below command ,

8 ssh-keygen -t dsa -f .ssh/id_dsa
9 ls -ali .ssh
10 touch .ssh/authorized_keys2
11 chmod 640 .ssh/authorized_keys2
12 ls -ali
13 cat id_dsa.pub>>.ssh/authorized_keys2
16 rm id_dsa.pub
18 cd .ssh
20 ln -s authorized_keys2 authorized_keys

[Thierry D]

Hi haeman

Here find on which server to do what:

Server A:
ssh-keygen -t dsa -f .ssh/id_dsa

Server B:
(first you will need to copy the file from server A to B using scp or other ...)
cat id_dsa.pub>>.ssh/authorized_keys2

Server A:
use ssh with the user private key to connect to Server B.

Thats the big steps to make it work, hope it helps.

Regards,
Thierry

[Jeeshan]

check my attachement, there is expalanations.

[haeman]

thx reply ,

I am wonder the steps ,

I already set the user from server A is no need to use password to connect server B via ssh , but what I want now is I want the user is NO NEED TO CHANGE PASSWORD ( even the password is expired in server B ) , the above steps is fit the requirement ? thx

[Thierry D]

Hi haeman

No you won't need to change the password because it is not password dependent.

Its another mechanism which does not care about password at all

read the link and search for "How to Use RSA Key Authentication with SSH".

http://chxo.com/be2/20030905_77fe.html


Regards,
Thierry

[F Verschuren]

Hi,

If a acount is locked (and you configgured ssh corectly (pam on)) you have to change the passwd even when you use a key.

the only way to fix this is to use to sepperate users, one for normal login whit the passwd rulles on and one user that does not have the passwd rulles on.
If you use sudo you can give the one user the rights to switch to the other user.

[Steven E. Protter]

Shalom,

http://www.hpux.ws/?p=19

They key issue here is ownership and permissions on the home directory and .ssh folder. If not precise password free access will not work.

SEP