[K12OSN] how to set up passwordless ssh access

[James P. Kinney III]

On Sat, 2007-06-16 at 16:11 +0200, Nils Breunese wrote:
> James P. Kinney III wrote:
> 
> > On Fri, 2007-06-15 at 23:06 -0400, Jim McQuillan wrote:
> >> check the permissions on the .ssh directory, and the  
> >> authorized_keys file.
> >>
> >> .ssh should be 0700  ('drwx------') and owner/group must be  
> >> correct for
> >> that user.
> >>
> >> authorized_keys should be 0644 ('-rw-r--r--'), and again owner/group
> >> must be for that user.
> >
> > And the /etc/ssh/sshd.conf must be edited to allow use of RSA keys.
> >
> > find these lines:
> >
> > #RSAAuthentication yes
> > #PubkeyAuthentication yes
> > #AuthorizedKeysFile     .ssh/authorized_keys
> >
> > and uncomment them and restart sshd
> 
> That's not really necessary as the commented out values are the  
> defaults. But it doesn't hurt either.

You are correct. Those should be the defaults. I'm a stickler on conf
file editing (that should have been sshd_config NOT sshd.conf BTW) and
much prefer to have explicit setting noted with defaults left intact for
posterity use.

That said, I had an incident a while back where the conf file was a
recycled one and it did NOT match the compiled reality. That took me
several hours to puzzle through and I developed the explicit method
instead as a result.
> 
> Nils Breunese.
> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>
-- 
James P. Kinney III          
CEO & Director of Engineering 
Local Net Solutions,LLC        
770-493-8244                    
http://www.localnetsolutions.com

GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
<jkinney at localnetsolutions.com>
Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/k12osn/attachments/20070616/0d08fd39/attachment.sig>