rhosts auth in Openssh 2.9p1

[Mark Cafferkey]

Hi,
I'm running hpux 11 and trying to use .shosts with openssh to allow a more secure rcp. However I am still prompted for a password. Debug information shows the following error:
"Rhosts Authentication disabled, originating port not trusted".
I have setuid enabled on ssh, I have the fqdn in shosts, my permissions are correct.
Anyone got any suggestions?
Thanks
Mark

[Jimmy Rogers]

I would check your sshd_config file, most likely located in /opt/openssh/etc. Try the following statements:

IgnoreRhosts no
RhostsAuthentication no
RhostsRSAAuthentication yes
RSAAuthentication yes

Hope it helps!
J.R.

[Aaron Caine · Accepted solution]

Mark,

You may also want to try using keys instead of shosts.

This is accomplished by using ssh-keygen to create a private key on client you are trying to connect from, and putting the public key on the server.

On the client, use ssh-keygen, and save the file into ~/.ssh/identity. A public file will also be created called ~/.ssh/identity.pub.

On the server you want to log into, create a file called ~/.ssh/authorized_keys, and place the contents of the identity.pub file into that one. (You may have to name the file authorized_keys2 -- i've seen it both ways in openssh2).

An example of what the authorized_keys2 file would look like is: (it is usually 1024 bytes long, most of it has been cut)

ssh-dss AAAAB3NzaC1kc3MAAAEBAJatwEvhUqb7LjhioadLllCB9Gdo7WhWwEqieof/CDl5lAg1wjcG2mwr3UznIfyz+gItdAiXCbZet0Qxokf1CA7Zo/GQdRFheCcE6YbdGBbXTxcPsoxP4/dXQypNE1/2+uf2fnG6PeYq/LTuE+QurirBiwbkBURoiMS0wFd414fnZu0qGSkhoKhvIzeYVtw== some@comment.here.com

... anc

[Mark Cafferkey]

Thank a lot guys,
Aaron - Thats exactly what I did in the end. I abandoned trying to get rhosts auth working and choose RSA instead, got it going in about 5 mins. Now scp is approx 8 times quicker than it's counterpart in ssh2 (and free)
Thanks again
Mark