Hi

I have a system PRIMARY where I can push or pull files to/from STANDBY using scp. I can also ssh without entering a password.

On the STANDBY system if I try and use scp or ssh it asks for a password.

I checked in ~/.ssh and there was no authorized_keys file on the PRIMARY server. After some googling (I can't post the URL I'm afraid) I have copied the public key (id_rsa.pub) on the STANDBY to a new file authorized_keys on the PRIMARY.

This hasn't worked though - still asking for the password.

What have I done wrong/am I missing?

If I look at the authorized_keys file on STANDBY I can see that it contains (amongst other entries) the public key from PRIMARY, so I assumed doing the opposite way round would now allow me to scp/ssh from the STANDBY to PRIMARY... but no joy.

I don't want to start regenerating key pairs etc as this is a Production system (this was already set up, all I have done is create the authorized_keys file on the PRIMARY).

Thanks!

Ross

It's picky about file permissions. try ssh-copy-id username@host instead of copying the file manually.

Also try scp -v -v to see what scp thinks it's doing.

Hi

Thanks... not sure what was meant by "try ssh-copy-id username@host instead of copying the file manually" ?

File permissions of authorized_keys look the same on both servers.

Used the -v option on scp and can see the differences:

STANDBY -> PRIMARY
debug1: Authentications that can continue: publickey,password,hostbased
debug1: Next authentication method: publickey
debug1: Offering public key: /oracle/S1P/102_64/.ssh/id_rsa
debug1: Authentications that can continue: publickey,password,hostbased
debug1: Trying private key: /oracle/S1P/102_64/.ssh/id_dsa
debug1: Next authentication method: password
-then requests password


PRIMARY -> STANDBY
debug1: Authentications that can continue: publickey,password,hostbased
debug1: Next authentication method: publickey
debug1: Offering public key: /oracle/S1P/102_64/.ssh/id_rsa
debug1: Server accepts key: pkalg ssh-rsa blen 277
debug1: read PEM private key done: type RSA
debug1: Authentication succeeded (publickey).
-etc - carries on and works

So the difference is that it's not accepting the public key.

Does the public key have to be the same on both?? It's not... sure it doesn't need to be. As long as it's in authorized_keys it should work, right?

Cheers

Ross