On Thu, 2002-07-04 at 08:57, Wesley Murphy wrote:
> There is a way, or there should be, to enable secure access to a machine 
> without having to enter a password.
> 
> My problem is this:
> 
> I have two machines, both running ssh, they both have static ips on the 
> interfaces that I will be using for this.  I would like to be pre-authorised 
> as root to scp/ssh from one machine to the other. (i.e. without having to 
> type in a password)
> I have browsed through ssh docs for days and have yet to come up with a 
> working solution.   I think that it should be a very simple thing.
> 
> Is there a way to do this?
yep
> 
> Exactly how would I do this ?

on local machine ( where connection will be initiated from)
1) as root, generate a key with no (empty) passphrase,  I use dsa keys.

ssh-keygen

When pompted for the passphrase just hit enter.
hit enter again to confirm

either hit enter to accept the default key name or give one that you
want.

now place the pub key on the remote machine. From the local machine you
can do this:

cat ~/.ssh/id_dsa.pub|ssh remotemachinename 'cat >>.ssh/authorized_keys'
 
What this does is append the pub key from the local machine to the
remote machines authorized_keys file that is looked to for check whether
or not a user is allowed to log in.  

You will probably be prompted for a password since the key is not there
yet.  If it is the first time, the local ssh process will tell you that
is has not seen this host before do you want to continue.  type yes.

you shold be jammin.  ssh remotemachinename shoult put you at the
command prompt.

Several caveats:

I believe that the default openssh sshd_config file will be fine, but
specifically,

/etc/ssh/sshd_config  on the remote machine must have
 PermitRootLogin yes # This is the default.

give it a shot.

Bret



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to