How can I setup ssh public key authentication.

[scorbel]

I have installed FC3 and I want to setup sh public key authentication. so that i am not obliged to give my password each time I connect to a remote machine using SSH protocol.

Thanks

Regards
JO

[blammo]

Mmm.... not sure what you mean. Are you saying that anyone that connects to your SSH daemon using a valid user name will automatically be able to log on without a password?

[scorbel]

No,

I have FC3 insalled on my Laptop and want to connect to a remote Solaris Machine using SSH but do not want to be prompted for remote password each time I connect.

Suppose I am logged in as local user local/localpwd and want to connect as remote user remote/remotepwd with "ssh -l remote remotehost " -->I do not want to be prompted forpassword remotepwd.

Hope it would clarify...
Thanks
for your quick response

[blammo]

Okay, you can find the info you need by looking at "man ssh-keygen". It involves creating the key pair and transfering the public key to the server, creating the directories, etc. Even though it's convenient, I don't think it's a secure practice!

[scorbel]

Tried it using lussh (which does the ssh-keygen) but itw orks for certain users and not for others...
Sometimes public key authentication could not be configured...for certain couple user/server
Do you have an idea ..

Thanks
JO

[blammo]

I haven't messed with this stuff but I googled it and ran across an article that I found very interesting. Pretty much runs the gamut of this kind of authentication. Good read!

http://www-106.ibm.com/developerwork...ry/l-keyc.html

[scorbel]

Finally solved the isseu it was the rights access defined for .ssh folder on the remote host.
must be :
drwxr-xr-x 2 jalserge 770 4096 May 11 11:46 .ssh

Thanks
a lot

[geesun]

in the host linux we need do this:
1.$:cd ~/
$:mkdir .ssh
$:cd .ssh
$:ssh-keygen -t dsa
answer all as default (Enter is ok),it will generate two files: id_dsa id_dsa.pub
2. cp id_dsa.pub to the server u want to login (u can use ftp or scp .etc)
3. login the server, then do
cd ~/
mkdir .ssh
cp id_dsa.pub ~/.ssh
cat id_dsa.pub >>authorized_keys
after that. u can login the server from the host without passwd.

[capnlinux]

It is really a good idea to put a pass-phrase on your private key during the keygen process. This makes it a tad less convenient for you, but a lot harder for anyone who somehow gains access to your private key file.