Shell Programming and Scripting

Hi,

I am trying to connect to a windows server via sftp from a user A and my job did log into it via user B. So I uses the following command to connect to teh new server.

Code:

B>sftp -o IdentityFile=/pathtofile/id_rsa a@windows_server

and it worked. But I don't want to use private key. Can we use public key in some way to achieve this?.

the unix enviroment is : HP-UX.

Thanks
George

---------- Post updated 05-26-16 at 12:29 AM ---------- Previous update was 05-25-16 at 08:35 PM ----------

Can some update regarding this? Isn't there any other way to do this?

I'm not quite sure what you are asking, so perhaps I'm off on the wrong track, but the public key would be shared/copied to the target server so that your client can open the connection.

The private key is not shared with anyone. The process, as I understand it, is that the host sending data encrypts it with the public key of the other. The public key of the server is shared to you as you open the connection first time (the question about the fingerprint and storing it in the known_hosts file) The only process that can decrypt each packet then is the one with (local & private) access to the private key. Your private key is never shared on the network.

What are you actually trying to achieve?
Can you give more examples (in CODE tags) of what you have set up - but don't publish your private key, naturally!



Thanks,
Robin

Hi George1234,
The description you have provided seems to asking for a way to allow someone logged in as userA on an HP-UX system to impersonate userB to access files on a Windows server on your network.

The UNIX and Linux Forums is not a hackers website and you will not find anyone here who will help you hack into a server nor to impersonate another user to gain access to their private files. If this is not what you are trying to do, please describe more clearly what you are trying to do and explain why you don't just login as userB to access userB's files.

DON,

our job runs with user A and public key in placed for it in windows server. But as we are moving some parts to a different unix server and we can place only one public key per user into this windows server.

So in our new server our jobs runs with A but could not connect to windows server via sftp because the windows server contains public key of the old one.( which we cant change). Therefore, we have setup different user B and put it's public key to the new sftp server. Now all of jobs with user A and so this sftp part also needs to be run via user A. So via below command the job connect to windows server.

a>sftp -o IdentityFile=/pathtofile/id_rsa b@windows_server

I am checking via any other way/command is possible to do this activity in unix, because we are using private key (which we don't want to do).

I guess, if the requirement is clearly understood now, then hacking possibility is certainly of out of question.

I don't get it; mayhap I'm a bit thick here...

Put user A's public key into remote user B's authorized_keys (or however this may be called in windows) file, and try connecting interactively via ssh B@remote_server for a test.
What be the result?

I tried it. But still, it looks for user A ( by which the jobs are running) profile. It never goes to check user B's authorized keys.

Can you show us the output from what you are trying? If possible, can you add a -v flag and paste the results into the thread, in CODE tags naturally. This should clarify what you are trying to do and what refusal we are getting.



Robin