[Solved] passwordless SSH not working in one direction

Hi,

I am trying to remove the password requirement when connecting with SSH.

I have 1 server with Solaris 10 and 1 server with Solaris 9.

I have created both keys on both servers, copied public key to the other server and created a file auithorixed_keys on both.

I can successfully connect from the Solaris 9 server to the Solaris 10 server without password but I CANNOT connect to the Solairs 9 from the 10........

Desperately need this, anyone got any thoughts?

I have checked permissions on all files and I did exactly the same process on both servers

the .ssh directory must be 700, the login (or home directory) must be 755 or more restrictive.

1 Like

Solairs 9 Home directory is 777 and I can't change that

Solaris 10 home directory is more restrcited but I can't change that either

Both SSH directories are at 700

I am using "authorized_keys2" files - should these be "authorized_keys", i am wondering if solaris 10 is using the new er protocol...!??!?!

---------- Post updated at 07:39 AM ---------- Previous update was at 06:54 AM ----------

one question...

should I create the keys etc as the user I normally use, or as root?!

I haven't tried it as root.

I did noticed RSAAuthentication is set to Yes in sshd_config, i tried adding DSAAuthentication as that is what I am using (i tried rsa without any success)...it didn't make a different so I deleted it.

really stuck here, need to submit commands automatically by tonight or i am scuppered.

To be honest i can't believe a home directory would be world-writable. If really so: have your sysadmin tarred, feathered, dismembered, hanged, fired and then really hurt. Still, i do not think that this is the key problem here.

This might very well be the case. As ssh is downwards compatible, but not upwards, it would explain why you can initiate communication from on side and not from the other.

An output of ssh -vvvvv <youruser@yourhost> might help to analyze the problem. An output of cat /etc/sshd_config might help too.

Definitely as the user in question.

I hope this helps.

bakunin

1 Like

right i got it working, permissions on home folder after all.

i didn't want to change it as officially it isn't my server. however i didnt have a choice.

Home folder permissions set to 755 and I can connect with password...