Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Problem with SSH between Aix to Aix 1

Status
Not open for further replies.

biondo68

Technical User
Jul 4, 2003
103
IT

Hi guy,
I can not really get the ssh protocol between 2 ssh server Aix . I create the id_rsa.pub and authorized_keys with 644, directory .ssh 600 . But I always asks me the password . I don't modified sshd_config and ssh_config

and the ssh-keygen with the parameter -t rsa and -b 1024

OpenSSH_4.1p1, OpenSSL 0.9.7d 17 Mar 2004


Any Ideas ?


debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'it0001aix01' is known and matches the RSA host key.
debug1: Found key in /.ssh/known_hosts:1
debug1: ssh_rsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,password,keyboard-interacti
ve
debug1: Next authentication method: publickey
debug1: Trying private key: /.ssh/identity
debug1: Offering public key: /.ssh/id_rsa
debug1: Authentications that can continue: publickey,password,keyboard-interacti
ve
debug1: Trying private key: /.ssh/id_dsa
debug1: Next authentication method: keyboard-interactive
debug1: Authentications that can continue: publickey,password,keyboard-interacti
ve
debug1: Next authentication method: password
gmauri@it0001aix01's password:


Thanks

Biondo68
 
In your home dir make sure you have each servers keys in .ssh/known_hosts in the following format

IP ssh-dss key

So on server A you would have Server B's key and visa-versa

Mike

"Whenever I dwell for any length of time on my own shortcomings, they gradually begin to seem mild, harmless, rather engaging little things, not at all like the staring defects in other people's characters."
 
the known_hosts file is present but is blank.

Biondo68
 
That's most likely your problem then....

Mike

"Whenever I dwell for any length of time on my own shortcomings, they gradually begin to seem mild, harmless, rather engaging little things, not at all like the staring defects in other people's characters."
 
A point that broke my ssh and took ages to track down is that the home dir must have restricted permissions (770 or tighter? - maybe start with 700 and loosen up until it breaks).


On the internet no one knows you're a dog

Columb Healy
 
Thanks All

Now work fine

Best regards


Biondo68
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top