Hostbased Authentication


 
Thread Tools Search this Thread
Top Forums UNIX for Advanced & Expert Users Hostbased Authentication
# 1  
Old 09-10-2010
Error Hostbased Authentication

How to setup a host based Authentication for a server and a client,or for a server and more clients?
Can someone help me in this please.......
# 2  
Old 09-10-2010
As part of ssh or just as a tcp wrapper like using /etc/hosts.allow and /etc/hosts.deny??
# 3  
Old 09-10-2010
Bug

As a part of ssh....
Thanks for your assistance in advance..
# 4  
Old 09-10-2010
From man page of sshd_config:
Code:
          HostbasedAuthentication
               Specifies whether rhosts or /etc/hosts.equiv
               authentication together with successful public key
               client host authentication is allowed (hostbased
               authentication).  This option is similar to
               RhostsRSAAuthentication and applies to protocol version
               2 only.  The default is ``no''.

So edit your /etc/ssh/sshd_config accordingly, setting HostbasedAuthentication yes, restart sshd and play arround with filling /etc/hosts.equiv with names/ip-addresses.
# 5  
Old 09-10-2010
Data

Quote:
Originally Posted by zaxxon
From man page of sshd_config:
Code:
          HostbasedAuthentication
               Specifies whether rhosts or /etc/hosts.equiv
               authentication together with successful public key
               client host authentication is allowed (hostbased
               authentication).  This option is similar to
               RhostsRSAAuthentication and applies to protocol version
               2 only.  The default is ``no''.

So edit your /etc/ssh/sshd_config accordingly, setting HostbasedAuthentication yes, restart sshd and play arround with filling /etc/hosts.equiv with names/ip-addresses.
iam a newbie, sorry for asking too much questions,
does this applies for both client and server?
# 6  
Old 09-10-2010
No worries. It applies to any machine where a sshd is running. ssh_config is for client config and sshd_config is for server config. If there is a acting as a server, you have to edit it's /etc/ssh/sshd_config and restart it's sshd, plus editing the hosts.equiv to your needs. If you come from another box like a pc with putty or ssh client from a linux box for example, you do not have to edit or restart anything on the client.
# 7  
Old 09-10-2010
Data

Quote:
Originally Posted by zaxxon
No worries. It applies to any machine where a sshd is running. ssh_config is for client config and sshd_config is for server config. If there is a acting as a server, you have to edit it's /etc/ssh/sshd_config and restart it's sshd, plus editing the hosts.equiv to your needs. If you come from another box like a pc with putty or ssh client from a linux box for example, you do not have to edit or restart anything on the client.

i did the configurations, i enabled the HostbasedAuthentication yes in both the ssh_config of client and sshd_config of server. Then i added the the client hostname and ip in the following manner in etc/hosts.equiv file of the server.

clienthost ip

but when i gave ssh server from the client it is asking for the password.
Please correct me if i were wrong in any of the above mentioned scenarios...
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. SuSE

Authentication with PAM

Hello all, I recently updated PAM policy files (pam_authz.policy) on HP-UX Servers with AD groups involving allowing and denying the certain groups.. Could anyone tell me what is the equivalent mechanism in SLES(Linux)? Is it possible to allow/deny AD group access with the SLES LDAP... (0 Replies)
Discussion started by: lcclaj0
0 Replies

2. UNIX and Linux Applications

Authentication in Jenkins

What do you guys use for authentication on Jenkins? We are currently not using anything and I am attempting to use AD, however when I have it enabled, the jenkins CLI does not allow my slaves to register anonymously.. which is understandable, however I cannot find the proper syntax for the... (0 Replies)
Discussion started by: s ladd
0 Replies

3. Red Hat

Authentication Failed

Hi everyone ... ( Linux Cent OS ) i cant login as root user in my lab machine ... i did give correct root and root passwd ..but it showing Authentication Failed ... plz help me (4 Replies)
Discussion started by: coolboys
4 Replies

4. UNIX for Advanced & Expert Users

PAM authentication.

I have applied pam authentication for local users as highlighted in below file. # cat /etc/pam.d/system-auth #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time authconfig is run. auth required pam_env.so auth sufficient pam_unix.so... (0 Replies)
Discussion started by: pinga123
0 Replies

5. Red Hat

samba authentication

Hi friends, I have a requirement is to authenticate samba users seperately. 1. Linux samba server 2. Linux Client 3. Need to mount samba share on linux client permanently without providing credentials. 4. when user is accessing that mount point need to be prompted for credentials. ... (1 Reply)
Discussion started by: arumon
1 Replies

6. Linux

evolution authentication

We are using fedora 8 on my system in that we are using evolution for checking mail we have configured mail server on fedora 8 in another system earlier when i was open the evolution it was asking password for authentication from last two days whenever i open the evolution it was not asking... (1 Reply)
Discussion started by: ambavaram
1 Replies

7. Solaris

authentication problem

Sir, We are using windows amd solaris systems on my company when ever we are sharing the files from windows to solaris it was asking authentication as a administrator i can share the if normal user wants to share the files from windows to solaris every time i have to go and type the username and... (1 Reply)
Discussion started by: ambavaram
1 Replies

8. Forum Support Area for Unregistered Users & Account Problems

authentication of new user

I recently registered, but never received the email with the instructions for authenticating my account. I confirmed my email in in the profile looks correct. I found and clicked the link to resend the authentication email. I clicked that link two days ago and I still don't have the email. It... (1 Reply)
Discussion started by: dwallace
1 Replies

9. UNIX for Advanced & Expert Users

Netcat with Authentication?

I'd like to do a data transfer without encryption but with a guarantee that my data comes from a legit source. I'm thinking something that uses a public key scheme to sign the data. Does anyone know of something like that? Thanks! -Pileofrogs (1 Reply)
Discussion started by: pileofrogs
1 Replies

10. Cybersecurity

Password Authentication

I would like to know how to validate an unix password from shell script (If is possible) Thanks very much ;) (3 Replies)
Discussion started by: juan_o_morillo
3 Replies
Login or Register to Ask a Question