SSH Keys

jtrooney · Tux's lil' helper Joined: 10 Nov 2004 Posts: 82

Hey guys...I'm trying to reimplement a backup utility on a couple of my servers at work. The way this works is it is a script that connects as root to to the others, using a public key and ssh, and executes an rsync command. This is up and running with out a problem but I need to add this functionality over to another server as well and am having trouble getting this up and running. I have created an ssh key using

lopez · Posted: Mon Apr 25, 2005 6:57 pm Post subject:

check your permissions on your .ssh dir and authorized_keys

bigfunkymo · Apprentice Joined: 23 Jan 2004 Posts: 237

are you running your ssh agent?
_________________
[No package... Grabbing a set.]

neilhwatson · l33t Joined: 06 Feb 2003 Posts: 719 Location: Canada

See my blog entries on SSH and backups:
http://technocrat.watson-wilson.ca/blosxom/computer/ssh-howto.html
http://technocrat.watson-wilson.ca/blosxom/blosxom/computer/backup.html

I would advise against doing this as root. Why not copy the backup files as a different user? Things to check:
1. Permissions of the key files must be 644 for public and 600 for private.
2. Try ssh -vvv to see debugging information.
3. Check the server logs.
4. Does the ssh server permit root logins?
_________________
The true guru is a teacher.
Neil Watson

jtrooney · Tux's lil' helper Joined: 10 Nov 2004 Posts: 82

First off...thanks for the fast replies guys =) I went ahead and double double checked the permissions and it is working now. The only problem is that i have to enter the passphrase everytime inorder for this to work. How can I create a key so that I won't need to enter the passphrase?

BTW I'm just trying to mirror our current setup over to a new server. After looking at the authorized keys on the other servers I noticed that the other keeys look something like

lopez · Posted: Tue Apr 26, 2005 1:56 am Post subject:

If you don't want a passphrase don't enter any when you create your rsa/dsa private key.
Its not the best way without a passphrase though I suggest using ssh-agent.

Here is a nice article to get you going:
http://www-106.ibm.com/developerworks/library/l-keyc2/

dashnu · l33t Joined: 21 Jul 2004 Posts: 703 Location: Casco Maine

*edit nm
_________________
write quit bang