Shell Programming and Scripting

Hi
i have generate public private key pair using command

ssh-keygen -t rsa -b 2048

and then it made the two keys under the directory

~/.ssh ( in server 1)

one is public key and another one is private ..

i copied public one key onto my second server under the directory

~/.ssh ( in server 2)

in file authorized_keys


and then from server 1 when i entered this command

sftp user2@server2

it asks a passowrd


y it is asking password as i am suppose to automation

What are the permissions on ~/.ssh and the files within? OpenSSH is quite picky about the correct permission, and will refuse to use any of the files if they don't match. Also, did you protect the private key using a password?

Hi

First of all thanks a lot for replying the mail

i have given 777 permission to all the files on server 1 and on server 2 under the directory ~/.ssh

still when i try to connect it asks me a password

---------- Post updated at 06:57 AM ---------- Previous update was at 06:52 AM ----------

and also when i entered this command on server 1

ssh-keygen -t rsa -b 2048

it asks me enter pass phrase i did not give anything i just pressed enter twice
so ideally it should be automated between server 1 and server 2

because i copied the public key in server 2

That's far too permissive, and OpenSSH doesn't like that. ~/.ssh should be 755 max, and authorized_keys should be 600. In no case should the group or other field be set to allow writing.

Current versions of OpenSSH include the ssh-copy-id utility, that copies your identity file and corrects permissions where needed. Give it a try.

hi

i did the same i changed the permission but it is still asking for password

and yes there is one thing i am seeing here that in the server 1 machine when i do

sftp user2@server2


it do asks for password then if i provide the password it connects and then it creates a file knows_host in the ~/.ssh/ directory in server 1

well , i don't know why it creates this file but it is still asking for password.

please help me regarding this.

Each SSH server has a unique cryptographic fingerprint to lessen the chance of attacks by redirected connections.

Can you give the output of the following command for both servers?

Code:

ls -ld ~/.ssh ~/.ssh/id_rsa*

Hi

In server 1 the output is

Code:

drwx------ 2 ABC def 512 Feb 25 13:20 def/ABC/.ssh
-rw------- 1 ABC def 883 Feb 25 13:18 def/ABC/.ssh/id_rsa
-rw-r--r-- 1 ABC def 230 Feb 25 13:18 def/ABC/.ssh/id_rsa.pub

and in server 2 it is

Code:

$ ls -ld ~/.ssh ~/.ssh/id_rsa*
ABC/ghi/.ssh/id_rsa*: No such file or directory
drwx------ 2 ghi ABC 512 Feb 25 13:22 ABC/ghi/.ssh

In server 2 i have copied public key in "authorized_keys" file