8/8 I want to use scp/ssh without a passphrase from my OCF account
to soda. I've copied my OCF ~/.ssh/identity.pub to soda
~/.ssh/authorized_keys, and also added my OCF account to soda
~/.rhosts. But OCF asks me for the OCF passphrase. What am I
\_ Are you using a passphrase with your OCF identity?
If so, use 'ssh-keygen -p' to remove it.
\_ That works, but isn't it bad to have no
passphrase? Besides, I have a passphrase
on soda and I can get to OCF without soda asking
me for a passphrase. I have a passphrase
on OCF and when I try soda it asks me for
the passphrase.
\_ That's strange. AFAIK, if you have a passphrase
associated with an identity, it should always
prompt you when you use that identity (unless
using ssh-agent). Are you sure it's not
falling back to rlogin? ssm's advice is good:
use ssh -v to figure out what's really going on.
\_ if .rhosts has an entry for the remote host,
it's not supposed to ask (and it doesn't,
for soda to OCF, but not vice versa)
\_ soda's sshd has RhostsAuthentication
disabled.
doing wrong? When I reverse the process, I can ssh/scp from
soda to OCF just fine without soda asking for either a
passphrase or password (no need for ssh-agent). Thanks in advance.
\_ Please post your soda and OCF passwords, and one of our
friendly help people will gladly assist you. - root
\_ And your username. - friendly person
\_ You cut'n'paste the .pub contents and it became multiple lines
instead of one long line. You're welcome.
\_ I scp'd the file over directly. Thanks, but that's not it.
\_ Run ssh with -v option and see what it sez -- social science major
\_ ? I recopied identity.pub over and checked .rhosts.
This is when it doesn't work, from OCF to soda:
Trying rhosts or /etc/hosts.equiv with RSA host authentication.
Remote: Accepted by .rhosts.
Remote: Your host key cannot be verified: unknown or invalid host key.
Remote: The host name used to check the key was 'conquest.ocf.berkeley.edu'.
Remote: Try logging back from the server machine with the canonical host name !
Server refused our rhosts authentication or host key.
Now this is when it works, from soda to OCF:
Trying rhosts or /etc/hosts.equiv with RSA host authentication.
Remote: Accepted by .rhosts.
Received RSA challenge for host key from server.
Sending response to host key RSA challenge.
Remote: Rhosts with RSA host authentication accepted.
Rhosts or /etc/hosts.equiv with RSA host authentication accepted by server.
\_ Crap, full discussion blown away on motd restore. Am I ever
going to get scp without pass{word|phrase} prompting to work?
\_ Go read ~mehlhaff/tmp/motd,v then
\_ I did. Let's continue then:
\_ What was this process of "added my local machine's host key
to my known_hosts". I blew away the existing entries in my
~/.ssh/known_hosts and re-ssh'd in from soda and OCF and vice
versa to re-create these keys. Is this what you mean?
\_ This sounds like it should work. I added my local host
key manually (man sshd for format) since I'm behind
a firewall.
\_ foo. I'm thinking it's some kind of ssh 1.2.26/27
discrepancy. I must train harder. Thanks for the help. |