SSH user equivalency still prompt for password


 
Thread Tools Search this Thread
Operating Systems Linux SSH user equivalency still prompt for password
# 1  
Old 05-27-2010
SSH user equivalency still prompt for password

Hi All,

I've followed the exact same steps of how to setup and enable SSH user equivalent including the right permission, but when I "ssh" it still prompts for password. Could you help to see what I did wrong?

I appreciate any helps.

Smilie

Code:
server1.com:/u01/oracle
RAC1 > mkdir -p ~/.ssh
RAC1 > chmod 700 ~/.ssh
server1.com:/u01/oracle
RAC1 > /usr/bin/ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/u01/oracle/.ssh/id_rsa): 
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /u01/oracle/.ssh/id_rsa.
Your public key has been saved in /u01/oracle/.ssh/id_rsa.pub.
The key fingerprint is:
1a:35:46:e5:d4:f7:12:9a:e6:dd:f1:ea:47:dd:69:8a oracle@server1.com
server1.com:/u01/oracle
RAC1 > cd .ssh
server1.com:/u01/oracle/.ssh
RAC1 > ls -ltr
total 8
-rw-r--r-- 1 oracle oinstall  409 May 27 14:12 id_rsa.pub
-rw------- 1 oracle oinstall 1675 May 27 14:12 id_rsa
server1.com:/u01/oracle/.ssh
RAC1 > touch ~/.ssh/authorized_keys
server1.com:/u01/oracle/.ssh
RAC1 > ls -ltr
total 8
-rw-r--r-- 1 oracle oinstall  409 May 27 14:12 id_rsa.pub
-rw------- 1 oracle oinstall 1675 May 27 14:12 id_rsa
-rw-r--r-- 1 oracle oinstall    0 May 27 14:13 authorized_keys
server1.com:/u01/oracle/.ssh
RAC1 > ssh server1.com cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys
The authenticity of host 'server1.com (10.100.69.101)' can't be established.
RSA key fingerprint is 04:1b:1a:73:04:60:40:9c:a3:fd:e0:a4:b8:7d:a7:45.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'server1.com,10.100.69.101' (RSA) to the list of known hosts.
oracle@server1.com's password: 
server1.com:/u01/oracle/.ssh
RAC1 > ssh server2.com cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys
The authenticity of host 'server2.com (10.100.69.102)' can't be established.
RSA key fingerprint is 3d:4c:f0:ea:84:de:c3:95:24:bd:1c:28:80:63:4b:90.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'server2.com,10.100.69.102' (RSA) to the list of known hosts.
oracle@server2.com's password: 
server1.com:/u01/oracle/.ssh
RAC1 > ls -ltr
total 16
-rw-r--r-- 1 oracle oinstall  409 May 27 14:12 id_rsa.pub
-rw------- 1 oracle oinstall 1675 May 27 14:12 id_rsa
-rw-r--r-- 1 oracle oinstall  832 May 27 14:15 known_hosts
-rw-r--r-- 1 oracle oinstall  818 May 27 14:15 authorized_keys
server1.com:/u01/oracle/.ssh
RAC1 > cat authorized_keys
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtDSLNO5xMQWAlyWfYyiwIQdTTE/Tw8MJzlxKjJaYO/tp/YlI5W8btIAkIm3RPhDd2QBl71RIcoXq2eIxEcxH0v6S6m/AWDMEtQGN/DdFUyW1rOpGnqkk73mxeTbDTJzrGZzpOmsODCXJxnHyFGuExTVv6Z2uVETCMqvFYblysANYWDMuDYIJ4MRTivkVQNRSZ71/IlqVAhwZbUiTaE1IkXtbqrBdi5BcVR4DyKkUdJDdgN8Mt9R1Ap7ExHQizf86Bcpn44keFaCEvpnySwA4iBP+UFPtXxhqKssrkhMFHSgw4pUrTGDpNBQnzPpaF5HwOtg4U4KOK6l4iCY7ho1F7w== oracle@server1.com
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0N8iAJaUMzQf3lxv4Lhpd0Sw12ISKdnpuw7FkJwEHg9pA7PLbovKCivUhqyonBRoDBKRESseEK0HRtK1tHmVtnfejV2tAVx2wZeDy1kR3AmkFXUuZ4bY/Q6ed5uk2HH5aLvx2e2krmk4oaXd5bTejwOEyErBtzeOyVC/AnxBwqTdTDD+vY71x+c9aGkVaw6wvj1oUjMtLPIEPgHyV/HePTt1DOiu8QTwgKt6EwP69elr8pmB8JBuLhzIymQKUAY+mE/4q6EjVChyd7/KaGQ+1r0i+4IQn08tqZK5WI35iswaSqyPef7lqShpBcwulPK57QDUbRQltySpxHq+tUPNuQ== oracle@server2.com
server1.com:/u01/oracle/.ssh
RAC1 > scp ~/.ssh/authorized_keys server2.com:.ssh/authorized_keys
oracle@server2.com's password: 
authorized_keys                                                                                  100%  818     0.8KB/s   00:00    
server1.com:/u01/oracle/.ssh
RAC1 > chmod 600 ~/.ssh/authorized_keys
server1.com:/u01/oracle/.ssh
RAC1 > ssh server1.com hostname
oracle@server1.com's password: 
server1.com
server1.com:/u01/oracle/.ssh
RAC1 > ssh server2.com hostname
oracle@server2.com's password:


Last edited by pludi; 05-27-2010 at 05:07 PM.. Reason: code tags, please...
# 2  
Old 05-28-2010
Say you want to connect from server1 to server2 without password

You have to copy the pulic key of server 1 (~/.ssh/id_rsa.pub ) and paste this key in authirize file of server2 (~/.ssh/authorized_keys). Are you doing it correctly? This link might help you.

3 Steps to Perform SSH Login Without Password Using ssh-keygen & ssh-copy-id (link removed)
# 3  
Old 05-28-2010
I don't see anything wrong per se with what you've done so far. Could you post the output of
Code:
ssh -vv server2.com hostname

Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

How to pass password and prompt user for IP address while doing ssh and scp?

Hi All, I want to copy /.ssh/OM.pub file from source to destination. Here source IP address, username and password is always fixed. Whereas destination server IP address, password always gets changed. From destination server :- I am trying to write a script in which it should log in to... (3 Replies)
Discussion started by: madhur.baharani
3 Replies

2. Red Hat

Sudo Password Prompt over SSH

I am not sure what I am missing here. I have the following identical entry in /etc/sudoers on multiple Red Hat 6.4 servers. icinga ALL=NOPASSWD:/usr/bin/yum --security --exclude\="kernel*" check-update On one server when I enter the command over SSH as follows it works fine. ssh -t -q... (1 Reply)
Discussion started by: scotbuff
1 Replies

3. SuSE

SLES 11.2 slow SSH password prompt

We are having an issue with slow password prompts via SSH login on all of our SLES 11.2 boxes. The output from a ssh -v login attempt shows a delay here: debug1: SSH2_MSG_SERVICE_ACCEPT receivedThis issue only happens on the first logon of the day; subsequent logons are normal. Adding the client's... (8 Replies)
Discussion started by: j_aix
8 Replies

4. Programming

Test SSH but do not return password prompt

Hello forum, I want to have a function to test for passwordless SSH setup. Pretty simple. However, what I'm finding difficult is to NOT return a password prompt to screen IF it's not in place. Here's the function: check_passwordless_ssh_working() #check passed parameter, assuming it is... (4 Replies)
Discussion started by: doonan_79
4 Replies

5. AIX

ssh keys - no password prompt from AIX to RPA

hello, i am running an AIX 5.3 machine and i want to connect via ssh to the RPA Management site without prompting for password. i already had a public key of this server as i use the same thing for ssh connection with other AIX machines. i connected to the RPA Management Site and i run the... (9 Replies)
Discussion started by: omonoiatis9
9 Replies

6. Solaris

expired password prompt at ssh login

Hi, I am using DSEE 6.3 to authenticate and authorize my Solaris 9 and 10 users. Everything works fine except password expiration. I use built-in global password policy for all users. The policy works well. However I could not find the right pam configuration in order to prompt users at ssh... (2 Replies)
Discussion started by: niyazi
2 Replies

7. UNIX for Dummies Questions & Answers

SSH version of rlogin (ie without password prompt)

I have 3 Solaris 10 UNIX servers, the shadow and passwd file are all identical and are automatically sync every 5 minutes. A majority of the users do not have CLI access but rather use a menu. I currently have menu options that allows them to rlogin to another server and I need to have the... (1 Reply)
Discussion started by: creedonjm
1 Replies

8. UNIX for Dummies Questions & Answers

change user> to user@host> ssh prompt

Hi, I was wondering how to change the prompt for my ssh login. At the moment it is like user> while I'd like it to be as user@host> It is in the .bash_profile or .ssh ??? Thanks (2 Replies)
Discussion started by: pmasterkim
2 Replies

9. UNIX and Linux Applications

SSH: Avoiding password prompt with rsa key generation

Hi, I am using a remote storage service for backing up our data - we want to have a script run as part of a cron job which would do the backups from our local Linux machine to the service's Linux machine. I want to use tar and ssh to do this (rather than mounting the disk and using cp) .... (5 Replies)
Discussion started by: same1290
5 Replies

10. UNIX for Dummies Questions & Answers

rsh as super user without password prompt

Dear forum, First off, I'm using Solaris 5.6 UNIX. I'm trying to write a script which will connect to remote computers on a network (by specific IP's from a hosts file) and will run a separate script which is installed in each of the remote computers. My problem is that to run the script in the... (1 Reply)
Discussion started by: TheMightyUrrrrf
1 Replies
Login or Register to Ask a Question