Re: SSH Athentification with public key

[Stephen Samuel <samuel@bcgreen.com>]

Gerd Müller wrote:
> Hello,
> 
> i want to update hourly a remote mirror-server with rsync via ssh. In 
> order to enable the file-server to establish a ssh-session without 
> password prompt, i created on file-server a keypair with ssh-keygen -t 
> rsa (empty passphrase) and copied the public key (id_rsa.pub) to the 
> /root/.ssh/authorized_keys File (on mirror-server). This file didn't 
> exist before.

Try:
	cd .ssh
	chmod og-w auth* . ..
	mv authorized_keys authorized_keys2

The authorized_keys file must be owned and readable by root,
(or owned and readable by the user that  is being authenticated for)
The authorized_keys file, the .ssh directory and your home directory
must ONLY be writable by the owner. They CANNOT be group-writable.

Matt Hemingway wrote:
 > Could be a couple things:
 >
 > 1. When you copied the id_rsa.pub file, did you do a copy and paste from an xterm window to an xterm window or did you sftp/scp/ftp the file over?  I had a similar 
problem, where I had copied the contents from an xterm window to an xterm window and instead of the lines wrapping at the end of the window, line breaks were inserted. 
Each public key entry must be one line.
 >
 > 2. Make sure the authorized_keys file is owned and readable by root.
 >
 > Also, try ssh -vvv root@mirror-server and see if you get any usefull info.   strace can come in handy as well.

if you're using the DSA or RSA public keys. They should go into the
authorized_keys2 file.
                ^
It's only identity.pub (the ssh1 public key file) who'se contents
get coppied into authorized_keys


-- 
Stephen Samuel +1(604)876-0426                samuel@bcgreen.com
		   http://www.bcgreen.com/~samuel/
Powerful committed communication, reaching through fear, uncertainty and
doubt to touch the jewel within each person and bring it to life.

-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html