On Thu, 08 Mar 2012 04:39:00 +0100
"LLLActive@GMX.Net"
Hi all,
I've done the following procedure to get a passwordless login on a remote server:
as root:
$ ssh-keygen Enter file in which to save the key (/home/your_user/.ssh/id_rsa): <Enter> Enter passphrase (empty for no passphrase): <Enter> Enter same passphrase again: <Enter> Your identification has been saved in /root/.ssh/id_rsa. Your public key has been saved in /root/.ssh/id_rsa.pub. The key fingerprint is: (-:) co:ec:aa:a1:de:34:5c:95:24:1d:25:4a:84:aq:65:ca root@server The key's randomart image is: +--[ RSA 2048]----+ | .******* | | ..B-.-. | | kjak | | . ..+<-, | | . #+#^´ | | . | | | | | | | +-----------------+
Then I upload the key
as root: $ ssh-copy-id user@myserver.org Password:
message: Now try logging into the machine, with "ssh 'user@ssh.yourserver.org'", and check in: ~/.ssh/authorized_keys to make sure we haven't added extra keys that you weren't expecting.
Now, when I login, the password is asked *again*.
Where does the id_rsa get used? It is in /root/.ssh/ together with id_rsa.pub when generated by ssh-keygen. I am root when performing the login on the remote server at the moment. Later, I will use a dedicated user.
Any suggestions welcome.
:-) Dreiel
I'm doing this all the time now and the way it's typically set up your procedure should 'just work' with one small change. Don't become root on your local system before generating the public / private key pair. It isn't necessary and is likely the source of your problem. IOW: as user: ssh-keygen [enter, enter, enter] ssh-copy-id user@domain.tld [password when prompted] [This appends the public key in ~/'user'/.ssh/authorized_keys on the remote system] now, to log in: ssh user@domain.tld That's it. If this doesn't work, the remote host configuration is most likely not 'default,' in which case you already know where to look. But be careful turning off password authentication if physical access to the machine is costly or unpleasant. Better to use 'fail2ban' or something similar to fend off the script kiddies. hth & regards, Carl -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org