Re: [FC5] how to use public key login for ssh?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



thanks so much for your friends help.

i got it solved!!  this is exactly bcos of the permission setting:

it works correctly after I did the following:
$ chmod 700 ~/.ssh
$ chmod 600 ~/.ssh/authorized_keys

thanks for all of you.

~manchi


On 2006-07-07 12:39:35 +0800, Todd Zullinger <[email protected]> said:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Man-Chi,

sorry that I am a newbie to fedora FC5, I used to be in Solaris
environment.
No need to be sorry. :)

i could not configure correctly for public key ssh login as I used
to do in Solaris.

my step:

1) cat my public key and put in my $fedora_user/.ssh/authorized_keys
What are the permissions on ~/.ssh and on ~/.ssh/authorized_keys?
OpenSSH is particular about them and won't use the key if the
permissions on the file or directory are too lax.  I set ~/.ssh to 700
and authorized_keys to 600 and ssh is happy.

2) configure fedora's /etc/ssh/sshd_config, uncomment the following
2 lines

PubkeyAuthentication yes
AuthorizedKeysFile      .ssh/authorized_keys
It doesn't hurt, but you don't need to do this because the values
specified in sshd_config are the defaults.

However, ssh login still prompts me for password.....
What is the prompt?  It may be a prompt for the password of your key,
unless the key has no password (which is bad) or you are using the
ssh-agent and have already added your key to the agent.

- -- Todd        OpenPGP -> KeyID: 0xD654075A | URL: www.pobox.com/~tmz/pgp
======================================================================
If a government were put in charge of the Sahara Desert, within five
years they'd have a shortage of sand.
    -- Dr. Milton Friedman

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)
Comment: When crypto is outlawed bayl bhgynjf jvyy unir cevinpl.

iG0EARECAC0FAkSt5YcmGGh0dHA6Ly93d3cucG9ib3guY29tL350bXovcGdwL3Rt
ei5hc2MACgkQuv+09NZUB1p9IQCgxcTJic1bPJv5p3Yf5WJc+ssKhc8AoLHG8HOy
utheLHkzDr2ntPpB0SyA
=2d51
-----END PGP SIGNATURE-----



[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux