SSH key passphrase authentication

OdinsDream · Veteran Joined: 01 Jun 2002 Posts: 1057

How can I enable RSA keyphrase authentication when my users log in via SSH, rather than asking for their system password?

I'm interested in creating keys for the users, and then having it ask them for their passphrase when they SSH to the server.

mglauche · Posted: Wed Oct 23, 2002 7:45 am Post subject:

create a rsa keypair, sing it with a keyphrase, then upload the public part to the server you want to connect to. Also check out the EXCELENT howto on ssh keymanagement on the gentoo frontpage.

OdinsDream · Veteran Joined: 01 Jun 2002 Posts: 1057

I'm not sure I understand "then upload the public part to the server you want to connect to".

I'm running Gentoo on my machine... "p2c2e".

I want to log into p2c2e via SSH, from anywhere else, and I want it to ask me for my username, and then instead of password, I want Keyphrase.

Is this possible? or am I going to have to carry around public key data wherever I go?

nitro322 · Guru Joined: 24 Jul 2002 Posts: 596 Location: USA

read the articles he mentioned - they're excellent guides. I set this up myself the other day using these articles and I had everything working in minutes. Here are the direct links:

http://www-106.ibm.com/developerworks/linux/library/l-keyc/
http://www-106.ibm.com/developerworks/linux/library/l-keyc2/
http://www-106.ibm.com/developerworks/linux/library/l-keyc3/

Parts 1 and 2 should cover all the basics. Have fun!

OdinsDream · Veteran Joined: 01 Jun 2002 Posts: 1057

Great!

This is working now, as long as I do ssh user@p2c2e, but if I just do ssh p2c2e and then type in a user name, I get the classic password authentication.

Is there a way to make both methods ask for keyphrases?

BackSeat · Posted: Fri Oct 25, 2002 12:48 pm Post subject:

Do you have the same username on both systems? If not, check out the use of the .ssh/config file, which can provice the remote username for you.

BS

OdinsDream · Veteran Joined: 01 Jun 2002 Posts: 1057

onlawn · n00b Joined: 25 Oct 2002 Posts: 45

On the Putty website is the long instructions on using rsa/dsa keypairs. In the end it wasn't worth it. I still use Putty, but not that way.

For an alternative, try Cygwin. It will work with Daniel's tutorial. Just install the ssh and cygwindll packages if thats all you want.

OdinsDream · Veteran Joined: 01 Jun 2002 Posts: 1057

Well, I'm not as concerned with my own ability to work around this as I am with other users I add to the system.

I want all logins to be done via RSA keyphrase authentication, regardless of the client, and how they connect.

At the very least, I'd like to disable standard password authentication. Is this possible ?

rac · Posted: Sat Oct 26, 2002 5:05 am Post subject: