Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
ssh hostbased auth
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
sKewlBoy
Guru
Guru


Joined: 03 Nov 2002
Posts: 406
Location: Portugal

PostPosted: Wed Dec 18, 2002 5:52 pm    Post subject: ssh hostbased auth Reply with quote

sorry for bothering with the noob question (but there's no longer the newbies forum).
How can I set up Host Base Authorizatioon between my desktop and my server ?
I've chaged HostbasedAuthentication to yes in server's sshd_config. I have ssh-keygen'ed for the user I want in my desktop.
What else do I have to do ?

Thanks
Back to top
View user's profile Send private message
rtn
Guru
Guru


Joined: 15 Nov 2002
Posts: 427

PostPosted: Wed Dec 18, 2002 10:39 pm    Post subject: Reply with quote

You need the host key of the client in the known hosts of the server.
Probably the easiest way to do it would be to ssh from the server
to the client as that user so that the host key is automagically added
to his $HOME/.ssh/known_hosts file.

What exactly are you trying to do? If it's just that you want to be able
to login without a password, there probably are better ways of handling it.

--rtn
Back to top
View user's profile Send private message
sKewlBoy
Guru
Guru


Joined: 03 Nov 2002
Posts: 406
Location: Portugal

PostPosted: Fri Dec 20, 2002 10:38 am    Post subject: Reply with quote

Yes, that's what I want. Logging in without password.
Back to top
View user's profile Send private message
rtn
Guru
Guru


Joined: 15 Nov 2002
Posts: 427

PostPosted: Fri Dec 20, 2002 4:45 pm    Post subject: Reply with quote

If it's for a workstation or something, you can use ssh-agent to manage
an rsa key, and set up your authorized_keys file to allow the login. This
way, you'll type your rsa passphrase once per session (you can run
ssh-agent as a wrapper for X, so all of your xterms and X clients have
the agent enabled) and be able to open connections without a passphrase.

If it's for some type of automation, you can do the same thing, but
generate a key with a null passphrase. If you're going to set it up this
way, you really should limit the commands that can be run in the
authorized_keys file. There are examples of this in the man page for sshd.

If you want to post more specific requirements, I'm sure we can figure
out some of your best bets, sacrificing as little security as possible for
convenience.

--rtn
Back to top
View user's profile Send private message
sKewlBoy
Guru
Guru


Joined: 03 Nov 2002
Posts: 406
Location: Portugal

PostPosted: Fri Dec 20, 2002 4:58 pm    Post subject: Reply with quote

Thanks, I guess that'll be enough. I havent tried it yet, bvut that's probably what I want.
But what if I use putty to connect to the server ?
Back to top
View user's profile Send private message
rtn
Guru
Guru


Joined: 15 Nov 2002
Posts: 427

PostPosted: Fri Dec 20, 2002 5:27 pm    Post subject: Reply with quote

sKewlBoy wrote:
Thanks, I guess that'll be enough. I havent tried it yet, bvut that's probably what I want.
But what if I use putty to connect to the server ?


putty can do the same thing. check out puttygen for key generation
and pageant for key management. You can start pageant up with your
startup applications, and go from there.

--rtn
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum