Hi,
I want to use SCP to transfer files from HP - UNIX to IBM AIX

I have generated keys using ssh-keygen -t rsa on the UNIX box.

I have copied the public key to the AIX box to the HOME_DIR of the user /.ssh/ authorized_keys

When i try to use SCP it is still asking for a password. Please help me.

When i do the same to another HP-UNIX its working fine.

Thanks
Vijay

is the use of keys allowed in the sshd config file?

PubkeyAuthentication yes
PasswordAuthentication no
HostbasedAuthentication no

A frequently made error is to copy the key by means of X-Windows copy & paste. This way the quite lengthy line with the key gets split up into several lines and if the windows are of the same size it looks ok - but isn't.

bakunin

Thanks for the replies.
I hope we need to enable in the Cofig file for Authentication.

It means we have to enable Yes in the IBM AIX box right.
PasswordAuthentication Yes

In which path we will have the sshd config file On the UNIX and on the AIX
to change the yes no status

i can only look at solaris... path under solaris 10 is "/etc/ssh/sshd_config"

I see
PasswordAuthentication yes
on the UNIX side and I beleive it should be Yes only as i am able to transfer to another UNIX box with the same configuration without a prompt for password.

Please confirm me if i need to make that Yes on the AIX server also inorder for the SCP no to ask password when i do SCP.

Thanks
Vijay

Another thing which would be good to get ruled out is incompatible SSH versions. OpenSSH and ssh.com SSH are compatible on the protocol level but use different configuration file formats and key file formats. If you telnet to port 22, do you see OpenSSH in the banner? (Type in some random junk and the remote host will terminate the connection when the handshake fails.)

Clarification: you said you are being asked for a 'password'.

Do you mean it's asking for your unix password or is asking you for your SSH passphrase? If it's the latter, this would be expected.

If you don't want to have to enter the SSH passphrase, you can run the ssh agent.

Also, you can set password authentication to no (don't allow failback to unix passwords) if you want.