Berkeley CSUA MOTD:Entry 18923
Berkeley CSUA MOTD
 
WIKI | FAQ | Tech FAQ
http://csua.com/feed/
2024/11/23 [General] UID:1000 Activity:popular
11/23   

2000/8/8 [Academia/Berkeley/Ocf] UID:18923 Activity:insanely high
8/8     I want to use scp/ssh without a passphrase from my OCF account
        to soda.  I've copied my OCF ~/.ssh/identity.pub to soda
        ~/.ssh/authorized_keys, and also added my OCF account to soda
        ~/.rhosts.  But OCF asks me for the OCF passphrase.  What am I
                    \_ Are you using a passphrase with your OCF identity?
                       If so, use 'ssh-keygen -p' to remove it.
                       \_ That works, but isn't it bad to have no
                          passphrase?  Besides, I have a passphrase
                          on soda and I can get to OCF without soda asking
                          me for a passphrase.  I have a passphrase
                          on OCF and when I try soda it asks me for
                          the passphrase.
                          \_ That's strange. AFAIK, if you have a passphrase
                             associated with an identity, it should always
                             prompt you when you use that identity (unless
                             using ssh-agent). Are you sure it's not
                             falling back to rlogin? ssm's advice is good:
                             use ssh -v to figure out what's really going on.
                             \_ if .rhosts has an entry for the remote host,
                                it's not supposed to ask (and it doesn't,
                                for soda to OCF, but not vice versa)
                                \_ soda's sshd has RhostsAuthentication
                                   disabled.
        doing wrong?  When I reverse the process, I can ssh/scp from
        soda to OCF just fine without soda asking for either a
        passphrase or password (no need for ssh-agent).  Thanks in advance.
        \_ Please post your soda and OCF passwords, and one of our
           friendly help people will gladly assist you.  - root
           \_ And your username. - friendly person
        \_ You cut'n'paste the .pub contents and it became multiple lines
           instead of one long line.  You're welcome.
           \_ I scp'd the file over directly.  Thanks, but that's not it.
        \_ Run ssh with -v option and see what it sez -- social science major
        \_ ?  I recopied identity.pub over and checked .rhosts.
           This is when it doesn't work, from OCF to soda:
Trying rhosts or /etc/hosts.equiv with RSA host authentication.
Remote: Accepted by .rhosts.
Remote: Your host key cannot be verified: unknown or invalid host key.
Remote: The host name used to check the key was 'conquest.ocf.berkeley.edu'.
Remote: Try logging back from the server machine with the canonical host name !
Server refused our rhosts authentication or host key.
           Now this is when it works, from soda to OCF:
Trying rhosts or /etc/hosts.equiv with RSA host authentication.
Remote: Accepted by .rhosts.
Received RSA challenge for host key from server.
Sending response to host key RSA challenge.
Remote: Rhosts with RSA host authentication accepted.
Rhosts or /etc/hosts.equiv with RSA host authentication accepted by server.
        \_ Crap, full discussion blown away on motd restore.  Am I ever
           going to get scp without pass{word|phrase} prompting to work?
                \_ Go read ~mehlhaff/tmp/motd,v then
                   \_ I did.  Let's continue then:
        \_ What was this process of "added my local machine's host key
           to my known_hosts".  I blew away the existing entries in my
           ~/.ssh/known_hosts and re-ssh'd in from soda and OCF and vice
           versa to re-create these keys.  Is this what you mean?
           \_ This sounds like it should work. I added my local host
              key manually (man sshd for format) since I'm behind
              a firewall.
              \_ foo.  I'm thinking it's some kind of ssh 1.2.26/27
                 discrepancy.  I must train harder.  Thanks for the help.