SSH Keys for password less ssh sessions
Ben Kevan
ben.kevan at gmail.com
Tue Jul 22 21:59:56 UTC 2008
I know this may sound silly, but I have done this quite a few times (I come
from a SUSE background), but this wouldn't work for me from a RHEL4 to a
RHEL4 box).
Here is what I am doing:
for i in `cat filename`; do ssh-copy-id -i .ssh/id_dsa.pub username@$i; done
I have copied over ssh-copy-id from another server (suse box) and it contains:
#!/bin/sh
# Shell script to install your identity.pub on a remote machine
# Takes the remote machine name as an argument.
# Obviously, the remote machine must accept password authentication,
# or one of the other keys in your ssh-agent, for this to work.
ID_FILE="${HOME}/.ssh/identity.pub"
if [ "-i" = "$1" ]; then
shift
# check if we have 2 parameters left, if so the first is the new ID file
if [ -n "$2" ]; then
if expr "$1" : ".*\.pub" > /dev/null ; then
ID_FILE="$1"
else
ID_FILE="$1.pub"
fi
shift # and this should leave $1 as the target name
fi
else
if [ x$SSH_AUTH_SOCK != x ] ; then
GET_ID="$GET_ID ssh-add -L"
fi
fi
if [ -z "`eval $GET_ID`" ] && [ -r "${ID_FILE}" ] ; then
GET_ID="cat ${ID_FILE}"
fi
if [ -z "`eval $GET_ID`" ]; then
echo "$0: ERROR: No identities found" >&2
exit 1
fi
if [ "$#" -lt 1 ] || [ "$1" = "-h" ] || [ "$1" = "--help" ]; then
echo "Usage: $0 [-i [identity_file]] [user@]machine" >&2
exit 1
fi
{ eval "$GET_ID" ; } | ssh $1 "umask 077; test -d .ssh || mkdir .ssh ; cat
>> .ssh/authorized_keys" || exit 1
cat <<EOF
Now try logging into the machine, with "ssh '$1'", and check in:
.ssh/authorized_keys
to make sure we haven't added extra keys that you weren't expecting.
EOF
-------------------------
>From my suse box, I run this and authorized_keys is updated and I can now log
into those from my suse box without the need for the password, HOWEVER from a
RHEL4 box, I run that, and it runs through everything, but when I ssh to the
other box, I am still prompted for my password. I see the matching key in
authorized_keys, so I am kind of at a loss of what the issue is.
More information about the redhat-list
mailing list