SSH - Prompting for password


 
Thread Tools Search this Thread
Top Forums UNIX for Advanced & Expert Users SSH - Prompting for password
# 1  
Old 06-09-2005
SSH - Prompting for password

Hi,
Can anybody tell me a way to do ssh , without prompting for password from keyboard, Using RSA. The requirement is I need to create the key , using passphrase also.....
Is there any way to do it in UNIX ?
I am doing it from AIX machine , but remote machine is Linux
I tried my best , couldn't succeed Smilie Smilie
Shihab

Last edited by shihabvk; 06-09-2005 at 04:41 AM..
# 2  
Old 06-10-2005
There is so called "Host based authentication" can do the job. I can't provide full detail but you can google with above string. It mainly depends on ssh server and wherether the ssh client on AIX knows how to talk to the openssh ssh daemon on linux.

Tom
# 3  
Old 06-10-2005
if your SSH versions on both servers are talking in the same protocol --- OpenSSH v2 and OpenSSH v2 or OpenSSH v1 and OpenSSH v1 --- see "man ssh-keygen" for scripting options ...

otherwise, see the OpenSSH website for more tips ...
# 4  
Old 06-28-2005
1) on the machine you are connecting from:

ssh-keygen -t dsa
hit enter and enter when it asks you for a password

2) cd $HOME/.ssh

3) scp id_dsa.pub root@<IP_address_of_machine_connecting_TO:/tmp

4) Get on the machine connecting TO and:

5) cat /tmp/id_dsa.pub >> $HOME/.ssh/authorized_keys

Note:

SSH has to be of roughly the same version and should use the same algorithm, i.e. either only rsa or only dsa. Be consistent. I am not sure if OpenSSH will work with SSH. It likely will, but if not, install OpenSSH on both machines.

Now you are able to connect passwordless. On the machine connecting from:

ssh root@<machine_connecting_to> uname -a

and it will show you the output of that command. Also can do ssh root@<machine_connecting_to>

Second Note:

Make sure that all files in $HOME/.ssh are chmoded to 600. SSH will not work if anything is say 755, world readable, even if the .ssh direction is not.

Last edited by etc; 06-28-2005 at 03:04 PM..
# 5  
Old 07-09-2005
...a more secure method

The only issue with the above outlined process is that you now have a totally unencrypted private key laying around your hard drive, which is a security risk. So you should not always use this method of no password on the key, depending on other security factors, such as if your home directory is on an NFS exported directory within a large network, thus more vulnerable to attack.
Consider using ssh-agent. You can read about it in the online man or www.openssh.org. In this case, you supply a password when you generate your keys. I.e., when you do the ssh-keygen -t rsa command, don't simply hit enter twice, but actually enter a password when it prompts you for one. This will encrypt your private key, and to be able to use it you need to specify the password. But here is the cool thing: with ssh-agent, you only need to enter the password once per login session, and ssh-agent lets you reuse the key with no pawword authentication for the rest of that session. Thus you enter the key's password once, and then you can do ssh, scp, and sftp without any password authentication whatsoever.
(The entire process is real easy to do. For step by step instructions, see http://www.cc.gatech.edu/cns/software/ssh-agent.html.)

Last edited by hadarot; 07-09-2005 at 06:16 PM..
# 6  
Old 07-25-2005
Quote:
Originally Posted by hadarot
The only issue with the above outlined process is that you now have a totally unencrypted private key laying around your hard drive, which is a security risk. So you should not always use this method of no password on the key, depending on other security factors, such as if your home directory is on an NFS exported directory within a large network, thus more vulnerable to attack.
While this is certainly true, sometimes using unencrypted ssh private keys is the most secure way to carry out some tasks. For example, if I wanted to copy an file from one server to another server every night at 3am, that would be a good time to use an unencrypted ssh key.

To mitiage the risk, as mentioned above, you should make 100% sure that the directory containing the keys isn't being shared or served, and that the permissions on the private key are 0400 (user read-only). In the example above, where the user is only doing file copies, you should look into using a restricted shell like rssh, so that even if the key is compromised, the scope of attacks is much more limited.
# 7  
Old 07-26-2005
BTW, ssh will not work if permissions on the files are not restricted to the owner (read only for group/others will not work).
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Crontab - password prompting

// Red Hat Enterprise Linux Server release 6.7 I wanted to pass the password, but when I execute this cron, it stops at Password: prompt. Please advise on how to fix the error. Thank you for tour help in advance. #!/usr/bin/ksh su - pmserver echo "su - pmserver" cd... (2 Replies)
Discussion started by: Daniel Gate
2 Replies

2. UNIX for Dummies Questions & Answers

SFTP without prompting password

Dear unix experts, i have a requirement as below. i need to use SFTP as FTP. ftp -n -v << ENDFTP open test_ftp.server user ftp_user_name ftp_password quit ENDFTP if i use this in a shell script, it's not asking for password. But i want the similar thing achived using... (5 Replies)
Discussion started by: AraR87
5 Replies

3. Shell Programming and Scripting

SFTP prompting for password even though password is in script

Hi All, I am trying to transfer a file from one server to a remote server using SFTP. Client is not ready for key setup. I am working on Solaris 10. Here is the code. #!/bin/ksh # sample automatic Sftp script to dump a file USER="user1" PASSWORD="pass1" HOST="host1" sftp $USER@$HOST... (6 Replies)
Discussion started by: megha2525
6 Replies

4. Shell Programming and Scripting

Ssh is prompting for password

Hi, When i am trying to connect to other server using ssh coomand, it is prompting for password. But i want to hardcode it with username so that it should not prompt for password. And i dont want to use "ssh-keygen" method as it is not allowed. Please help me. Regards, Mukta (7 Replies)
Discussion started by: Mukta
7 Replies

5. Shell Programming and Scripting

Prompting for password

Hi, I have SVN installed in my UNIX solaris server. I actually automated the process that downloads code from SVN server to UNIX solaris server in script. When i run the script, its asking for password to download every element. Its really difficult to type password for every element when... (3 Replies)
Discussion started by: gthangav
3 Replies

6. UNIX for Dummies Questions & Answers

[SSH-RSA] Still prompting for password after generating keys

Hello, I'm trying to perform these operations without entering any password, as user "fzd":fzd@machine1> scp /tmp/srcFile1 fzd@machine2:/tmp/$destFile fzd@machine1> scp fzd@machine2:/tmp/$srcFile /tmp/$destFilebut alsofzd@machine1> scp /tmp/srcFile1 machine2:/tmp/$destFile fzd@machine1> scp... (6 Replies)
Discussion started by: fzd
6 Replies

7. Red Hat

prompting for passwords even i configured ssh password less authentication

There are two servers : 1. Site 2. Testing from site server i want to connect testing server with ssh password less authentication. i generated public and private keys with ssh-keygen -t rsa on site server. cat id_rsa >> authorized_keys cat id_rsa.pub >> authorized_keys i... (15 Replies)
Discussion started by: rehantayyab82
15 Replies

8. UNIX for Advanced & Expert Users

scp without prompting for password

I am trying to copy a file from remote machine using scp. I followed the steps to configure public/private key usage. But still prompting for password when I do ssh. I did the following steps to configure scp without asking password Step 1 : local host > ssh-keygen -t rsa and when prompted... (9 Replies)
Discussion started by: satish@123
9 Replies

9. Programming

ssh via java prompting for password

Hi, I have set up my remote server for password-less login via ssh. If I run the command on my server - ssh user@remoteserver "ls -l" I get an output, but when I try to do this via java String sCmd = new String{"/usr/bin/ssh", " user@remoteserver", "\"ls -l\""}; Process p =... (3 Replies)
Discussion started by: nrworld
3 Replies

10. UNIX for Dummies Questions & Answers

sftp prompting for password

I have the problem with SFTP; BELOW IS the entry from my ssh_config file It's prompting me for password all the time when using SFTP. pLEASE help. (1 Reply)
Discussion started by: dsravan
1 Replies
Login or Register to Ask a Question