[TriLUG] ssh questions

Mike M linux-support at earthlink.net
Thu Jan 9 03:40:23 EST 2003


On Thursday 09 January 2003 14:51, Tanner Lovelace wrote:
> On Thu, 2003-01-09 at 02:41, Mike M wrote:
> > I removed the contents of ~/.ssh2 in my client account and found that
> > could login in to a remote machine with just the account password.
> >
> > Is this password authentication instead of public key authentication?  Do
> > I change /etc/ssh2/sshd2_config on the ssh2 server to force public key
> > authentication only?
>
> Yes, it's password authentication.  You can disallow that in the
> server config (at least on OpenSSH, don't know about "official" ssh).
> The OpenSSH config file is /etc/ssh/sshd_config.

Thanks. I'll try that next.
>
> > I tried to bring my SSH2 generated private key (id_dsa_1024_a) to an
> > OpenSSH client.  I put the contents into ~/.ssh/id_dsa.  When I tried to
> > login to a remote account I was repeatedly prompted for the passphrase
> > for key in ~/.ssh/id_dsa.  Am I trying to do a bogus operation?
>
> id_dsa is normally your private key.  The corresponding public key
> is id_dsa.pub and that's what I generally put on the remote server,
> while id_dsa stays on the client.  It won't work, afaik, without
> both.

Aha.  I've got the public key on the remote machine stored in the SSH2 
method.  I should also store the public key on the remote machine in the 
OpenSSH way as you mention above.  I'll try that also.
-- 
Mike M.



More information about the TriLUG mailing list