CMS SSH Keys?

[PeteBull]

Is there anything special that needs to be done on CMS to log in using an SSH key?

I've created the .ssh directory in ~ and I've added the public key to authorized_keys2. I've chmod 700 .ssh and chmod 600 authorized_keys2 and it still doesn't work. I even restarted ssh on CMS.

am I missing something?

 

[PeteBull]

Has anyone been able to ssh into cms using authorized_keys?

 

[BIS]

When you say "it doesn't work" what exactly does that mean? Do you get any error messages? Have you checked the log files?

 

[AvayaTier3]

rsa or dsa keys

paste your key here

A great teacher, does not provide answers, but methods to teach others "How and where to find the answers"

bsh

35 years Bell, AT&T, Lucent, Avaya
Tier 3 for 25 years and counting

http://bshtele.com

 

[PeteBull]

DSA key. It's probably not smart to actually paste or post my key on a public message forum.

When I say it doesn't work, I mean that I am not able to ssh into the CMS server using my private key. I am using secureCRT to perform the ssh, the error message is: "public-key authentication with the server for user {userid} failed. please verify the username and public/private key pair."

using this key and this method works with SES, the 2 S8730 servers, and 2 AES servers so I know the key works and secureCRT works. The only thing different is that CMS is running on solaris instead of linux.

 

[PeteBull]

BIS - which log files should I be looking at? /var/log/secure doesn't seem to exist, and /var/adm/messages doesn't contain anything related to ssh that I can see.

 

[AvayaTier3]

dsa key goes in authorized_keys2
rsa key goes in authorized_keys

Make sure if you cut and paste into these files, that your key is on one continuous string on one line. Sometimes cut and paste will put on different lines and that will break the authentication.

A great teacher, does not provide answers, but methods to teach others "How and where to find the answers"

bsh

35 years Bell, AT&T, Lucent, Avaya
Tier 3 for 25 years and counting

http://bshtele.com

 

[PeteBull]

AvayaTier3 - good advice about placing the key in the correct file and ensuring that the key is not broken up by line feeds. Unfortunately for me, I have already verified both.

 

[AvayaTier3]

I have used both types between linux and solaris of many versions and never had issues with ssh or scp.


A great teacher, does not provide answers, but methods to teach others "How and where to find the answers"

bsh

35 years Bell, AT&T, Lucent, Avaya
Tier 3 for 25 years and counting

http://bshtele.com

 

[BIS]

PeteBull,
(seems there is a timezone difference between the two of us)

I am not quite sure what you are doing wrong..
Perhaps have a good read through 'man ssh' - you may have missed a file? id_dsa maybe?

 

[PeteBull]

Well, I figured it out...

it was a permissions problem on /export/home/{userid}

I chmod 700 that directory and it works fine now.

Thanks for all your help guys!