Everyone has probably seen this question a 1,000 times by now, but here goes.
I need to get a trusted host arrangement between a number of machines.
Configurations for several machines went find, but one is giving me trouble.
I copied the ssh_config; sshd_config from a successful implementation to the
problem box.
MACHINE - Redhat 7.2 - openssh-2.9p2-9
client's /etc/ssh/ssh_config includes:
<commented lines>
Host statamatic
ForwardAgent yes
ForwardX11 yes
FallBackToRsh no
Protocol 2,1
RhostsAuthentication yes
RhostsRSAAuthentication yes
DSAAuthentication yes
IdentityFile ~/.ssh/identity
# Be paranoid by default
Host *
ForwardAgent no
ForwardX11 yes
FallBackToRsh no
Protocol 2,1
RhostsAuthentication yes
RhostsRSAAuthentication yes
DSAAuthentication yes
PERMISSIONS:
-rw-r--r-- 1 root root 1261 Nov 30 08:35 ssh_config
-rw------- 1 root root 1195 Nov 27 10:53 sshd_config
When I: ssh -v -v -v statamatic I get:
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for statamatic
debug1: Applying options for *
debug1: Seeding random number generator
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: restore_uid
MACHINE - Redhat 7.2 - openssh-2.9p2-9
Okay...so what is leading to "Rhosts Authentication disabled." It will
authenticate on passphrase/password. Is there another config file somewhere
or what?
Thanks in advance.
Host machine sshd_config --- probably not important since problem seems to
occur before this, nevertheless, greps of the more important lines:
RhostsAuthentication yes
RhostsRSAAuthentication yes
DSAAuthentication yes
RSAAuthentication yes
PasswordAuthentication yes
#SkeyAuthentication no
#KerberosAuthentication no
HostKey /etc/ssh/ssh_host_key
#IgnoreUserKnownHosts yes
IgnoreRhosts no
# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
RhostsAuthentication yes
# For this to work you will also need host keys in /etc/ssh_known_hosts
RhostsRSAAuthentication yes
=========================================
Michaell Taylor, PhD
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
