Archives


- Beowulf
- Beowulf Announce
- Scyld-users
- Beowulf on Debian

[Beowulf] Password less ssh

Many of your questions may have already been answered in earlier discussions or in the FAQ. The search results page will indicate current discussions as well as past list serves, articles, and papers.

Search

Sean Dilda agrajag at dragaera.net
Wed Dec 8 06:27:04 PST 2004


Suvendra Nath Dutta wrote:
> On this note, I know this has been rehashed many times before, but using 
> OpenSSH 3.8 on SUSE 9.1, I couldn't get host authentication to work. I 
> followed all the instructions out in the web but everything failed. I 
> ended up copying the root's dsa key to every user's ssh directory and 
> using public-key authentication. Has someone successfully implemented 
> host authentication using SSH (hopefully v2) 

Yes

and has written it up in a
> nice How To?

No :)

Some stuff that might be useful:

in ssh_config:

HostbasedAuthentication yes
EnableSSHKeysign yes  # This may not be needed, depending on your 
version of ssh

and the 'HostbasedAuthentication' flag needs to be set in sshd_config as 
well.

You also need to make sure all the appropriate keys are in 
/etc/ssh/ssh_known_hosts

And /etc/ssh/shosts.equiv needs to be setup.  I did mine with netgroups.

And if you want root to be able to ssh in with host based, you need to 
setup /root/.shosts as well.

I did this on RHL9 and RHEL3.



More information about the Beowulf mailing list