Arch wiki ssh-keygen

Pudge Arch Linux f@h Team Member Registered: 2006-01-23 Posts: 298. Re: [SOLVED] ssh keygen: UsePAM no still asks for password. If you can ssh into the server but a password is required, then the key negotiations are not working. Step 1 In the server machine, run ssh-keygen -t rsa -b 2048 for every user that will be involved in the ssh connections. For example, the server has users root, bill, and guest. I wouldn t ssh into the server as the root user. That s a bad idea. So, if you want to be able to ssh into the guest account and not bill s account, then logged in as guest in the server, generate the ssh keys for only guest.. If you later want to ssh into bill s account, then logged in as bill, generate ssh keys for bill. Step 2 In your client machine, run ssh-keygen -t rsa -b 2048 for every user that will want to ssh into the server. For example, the only user (besides root) in the client machine is clem. Log in as clem and generate the ssh keys for clem. It should generate the following files. [clem@hostname ls -l total 32 -rw------- 1 don users 1743 2009-02-17 21:08 id_rsa -rw-r--r-- 1 don users 390 2009-01-31 21:53 -rw-r--r-- 1 don users 9282 2009-09-04 22:33 known_hosts [clem@hostname. In order for clem to ssh into the server as guest without using a password, the content s of clem s file must be contained in the server s file. You may want more than one user to be able to ssh into the guest account. So, if the authorized_keys file already exists, you must append the contents of clem s (client machine) into (Server). The authorized_keys file ends up being a list of everyone wanting to use key authorization to log into that account (guest on server. If you want clem to ssh into the server without a password of any type, when you generate the keys for clem you have to enter an empty passphrase when ssh-keygen prompts for a passphrase by just hitting enter. If you enter a passphrase for clem, the server will prompt you for the passphrase when you ssh in. I won t go into the security issues of using or not using a passphrase. However, you can set up a ssh key management program on the client (Gnome comes with one) where you only enter the passphrase one time for each time you log in. That still doesn t help you if you want a script to access the server without human intervention of entering a password or passphrase. Now for clem to ssh into the server on the guest account. ssh guest@servername or to ssh into bill s account ssh bill@servername. If clem on the client machine has an account on the server machine that s also clem ssh servername will work. However, I recommend getting into the habit of using ssh username@servername. If you need root access in the server, then ssh into it as a user then su to root or use sudo. Make sure that the ssh daemon in the server is configured to PermitRootLogin no in the /etc/ssh/sshd_config file. In a nutshell, to ssh into a remote server account without a password, both the server account and the client account have to have public and private keys generated. The server being ssh ed into must have the client side user s public key contained in the server account s authorized_keys file. Also the client s key must be generated without a passphrase. All this should work with all versions of Arch. ssh doesn t care about what version of Arch you re using. Last edited by Pudge (2009-09-18 19:23:38.