ssh public key frustration

[Bruce Marshall]

On Saturday 13 September 2003 15:27 pm, Net Llama! wrote:
> On 09/13/03 10:09, Bruce Marshall wrote:
> > On Saturday 13 September 2003 12:38 pm, Net Llama! wrote:
> >>I've setup & used ssh public keys many times before.  All of a
> >> sudden, i can't get it to work at all.  It works on the boxes where
> >> i've set it up in the past, but new ones just fail to work.
> >>
> >>The servers are all RH-7.3.  I thought that all that was required
> >> was: 0) on the client box, run "ssh-keygen -t dsa", hit enter at
> >> all the prompts, and i'll end up with ~/.ssh/id_dsa.pub.
> >>1) I then need to place the contents of that file on the server in
> >>~/.ssh/authorized_keys.
> >>2) ssh to the server, and i shouldn't be prompted for a password.
> >>
> >>this isn't happening.  i'm still prompted for a password.  am i
> >>missing something obvious?
> >
> > That's all I've ever done but two things to think about:
> >
> > 1) It seems the filename of the auth file changes from time to time.
> >  But it probably has to do with the release of openssh.  Right now
> > in my ~/.ssh I have both an authorized_keys file and an
> > authorized_keys2 file.
>
> Tried that, no change.
>
> > 2) Edit your dsa file and look at the very end of the record.  You
> > might have a  <userid at hostname>  at the end.  You can remove the
> > whole thing I think or at least the @hostname part.
>
> Tried that too, no change.  urgl

How about this in your /etc/sshd_conf ?

# Change to no to disable s/key passwords
ChallengeResponseAuthentication no

-- 
+----------------------------------------------------------------------------+
+ Bruce S. Marshall  bmarsh at bmarsh.com  Bellaire, MI         09/13/03 
15:52  +
+----------------------------------------------------------------------------+
"Consciousness: that annoying time between naps."