>>>>>>>>>>>>>>>>>> Ursprungligt meddelande <<<<<<<<<<<<<<<<<<
Markus Friedl <[EMAIL PROTECTED]> skrev 2001-07-15,
kl. 12.11.26 ang�ende �mnet Re: OpenSSH usage question- I'm completely
lost:
> please read the documentation carefully.
> On Sun, Jul 15, 2001 at 09:04:41PM +0000, Tommy Svensson wrote:
> > I'm new to this list. I tried to search the archives, but wasn't sure
> > what to search for so I didn't find anything relevant.
> > I have been using openssh with password authentication for a while, and
> > that is simple. The password authentication doesn't however seem secure
> > enough,
> why does it not "seem secure enough"?
I've read that the passwords are passed as �plaintext� over the net.
> > so I've been trying to setup public key authentication. In this I
> > have failed completely, and have come to the conclusion that I haven't
> > got a single clue as to what I'm doing!
> > I have read all the man pages over and over and over ..., I have
> > generated rsa keys and put then under $HOME/.ssh/ as identity and
> > identity.pub. I have generated dsa keys and put them in the same place as
> > id_dsa and id_dsa.pub. I have put �PubkeyAuthentication yes� and
> > �Protocol 2� in /etc/ssh/sshd_config and restarted sshd. I have added
> > both private keys to $HOME/.ssh/authorized_keys2.
> you have to add the PUBLIC keys to $HOME/.ssh/authorized_keys2
Yes, I just figured that one out! I got it backwards ;-) When I put the
public keys in authorized_keys2 and used the private for login it
actually
worked!
Thanks for your quick answer though.
Regards, Tommy Svensson
> > When I try to login with �ssh -i ~/.ssh/identity.pub localhost� or �ssh
> > -i ~/.ssh/id_dsa.pub localhost� I only get the �Permission denied
> you have to use the PRIVATE keys for login, e.g.
> ssh -i ~/.ssh/identity
> > (publickey).� response. I can't say that I have any understanding of
> > cryptography at all. I thought it made sense to use the public keys in
> > the ssh call, but I also tried the private with the same result.
> > Any help is appreciated. I think I need a step by step instruction ;-)
> > Best Regards, Tommy Svensson
> >