From owner-ssh@clinet.fi Sat Nov 21 13:48:46 1998 Received: from lohi.clinet.fi (majordom@lohi.clinet.fi [194.100.0.7]) by hutcs.cs.hut.fi (8.8.8/8.8.8) with ESMTP id NAA25143; Sat, 21 Nov 1998 13:48:46 +0200 (EET) Received: (from majordom@localhost) by lohi.clinet.fi (8.9.1/8.9.0) id NAA18913 for ssh-outgoing; Sat, 21 Nov 1998 13:30:48 +0200 (EET) X-Authentication-Warning: lohi.clinet.fi: majordom set sender to owner-ssh@clinet.fi using -f Received: from nukkekoti.cs.hut.fi (nukkekoti.cs.hut.fi [130.233.40.128]) by lohi.clinet.fi (8.9.1/8.9.0) with ESMTP id NAA18901 for ; Sat, 21 Nov 1998 13:30:42 +0200 (EET) Received: from news.cs.hut.fi (twilight.cs.hut.fi [130.233.40.179]) by nukkekoti.cs.hut.fi (8.8.8/8.8.8/1.19) with ESMTP id NAA11211 for ; Sat, 21 Nov 1998 13:30:33 +0200 (EET) Received: (from news@localhost) by news.cs.hut.fi (980427.SGI.8.8.8/8.8.8/1.9) id NAA20639 for ssh-mailgate@niksula.hut.fi; Sat, 21 Nov 1998 13:22:04 +0200 (EET) Received: from GATEWAY by news.cs.hut.fi with netnews for ssh-mailgate@niksula.hut.fi (ssh@clinet.fi) To: ssh@clinet.fi Date: Fri, 20 Nov 1998 23:12:55 GMT From: Dean Neumann Message-ID: <3655F75B.4B08BCD@neumann-associates.com> Organization: Neumann & Associates MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Subject: RhostsRSAAuthentication configuration? Sender: owner-ssh@clinet.fi Precedence: bulk Pardon the newbie question, but I.m trying to set up ssh-1.2.26 on a Solaris-2.6 box, and I can't seem to understand the intent of RhostsRSAAuthentication. Here's what I want: I've added a CDE dtaction to my desktop that allows my wife to click on an icon and have it run netscape with her personal configuration, from my desktop: xhost +localhost; rsh localhost -l wife netscape -display localhost:0; This works fine using rsh and .rhosts, and lets her fire up a netscape (from localhost only) without asking for a password. Now I've installed and configured ssh as follows: RhostsAuthentication no RhostsRSAAuthentication yes RSAAuthentication yes I can login via ssh if I correctly resond to the challenge, but it doesn't allow passwordless login via RhostsRSAAuthentication; it always prompts for the password. According to ssh(1), "if the login would be permitted by .rhosts, .shosts, /etc/hosts.equiv, or /etc/shosts.equiv, and additionally it can verify the client's host key (see $HOME/.ssh/known_hosts and /etc/ssh_known_hosts in the FILES section), only then login is permitted." The wife's account *does* have a .shosts file with my username@domain in it, and "ssh -v" confirms that the host "is known and matches the host key", so shouldn't the command be executed without a pasword prompt? I believe I have a configuration error, because, as a test, I tried RSAAuthentication, as specified in ssh(1): "The user creates his/her RSA key pair by running ssh-keygen(1). This stores the private key in .ssh/identity and the public key in .ssh/identity.pub in the user's home directory. The user should then copy the identity.pub to .ssh/authorized_keys in his/her home directory on the remote machine (the authorized_keys file corresponds to the conven- tional .rhosts file, and has one key per line, though the lines can be very long). After this, the user can log in without giving the password." Although I did all this, again, as with RhostsRSAAuthentication, I'm still challenged with a password. Could someone please explain to me "like I'm a 4 year old" how to configure ssh as desired. Thanks in advance for all responses. -- Dean Neumann (dneumann@neumann-associates.com) Neumann & Associates Information Systems Inc. Note: Remember to delete the ".delete-this-part" portion of the return address before replying.