ssh between 2 machine without password

Michael Velez mikev777 at hotmail.com
Sat Mar 5 13:27:27 UTC 2005


> -----Original Message-----
> From: redhat-list-bounces at redhat.com 
> [mailto:redhat-list-bounces at redhat.com] On Behalf Of Rushan Sobar
> Sent: Saturday, March 05, 2005 7:35 AM
> To: General Red Hat Linux discussion list
> Subject: ssh between 2 machine without password
> 
> Hi,
> on the following steps
> 
> to generate a public/private DSA key pair on Ooga. 
>   ooga% ssh-keygen -t dsa -f ~/.ssh/id_dsa 
> 
> When you are asked for a passphrase, leave it empty. Now send 
> the public key to Booga. 
> 
>   ooga% cd .ssh
>   ooga% scp id_dsa.pub user at booga:~/.ssh 
> 
> Next, log in to Booga and add the public key to the list of 
> authorized keys. 
> 
>   ooga% ssh user at booga 
> 
>   booga% cd .ssh
>   booga% cat id_dsa.pub >> authorized_keys2
>   booga% chmod 640 authorized_keys2
>   booga% rm -f id_dsa.pub 
> 
> the filename is authorized_keys2, not authorized_keys. That's 
> it; now ready to ssh from Ooga to Booga without having to 
> enter a password. 
> 
> what if i want to be able to ssh from Booga to Oooga without 
> having to enter a password?
> 
> i mean the steps up enable to connect from Ooga to Booga 
> without pass but from Booga to Ooga it ask for pass, i want 2 
> way without pass!!
> 
> Anyhelp?
> 
> --
> This message has been scanned for viruses and dangerous 
> content by MEC E-Mail Scanner, and is believed to be clean.
> --
> www.mec.com.jo
> 
> --
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request at redhat.com?subject=subscribe
> https://www.redhat.com/mailman/listinfo/redhat-list
> 

You need to do the same process you did before by inverting the commands you
do on ooga and booga.  That is, generate a dsa key on booga then take the
new id_dsa.pub that has been generated on booga and put it into the
authorized_keys (or authorized_keys2 depending on your config file) on ooga.
Same process but mirrored.

It's best to generate one key per direction, as opposed to just using the
previously generated key.

Michael




More information about the redhat-list mailing list