Re: Debian default ssh configuration problem with public/private key checking

On Fri, Jun 22, 2007 at 07:14:15PM +0000, - Tong - wrote:
> Hi,
>
> I'm trying to setup Debian to accept my remote ssh
> login. No problem with that, but I'm facing a
> configuration problem:
>
> It doesn't seem to be able to handle/accept the public/private key
> checking, i.e.,what sourceforge.net is doing [1], but insists on checking
> login password [2], which is not a recommended practice.
>
> This is a vanilla sshd configuration. I.e., everything from Debian default.
> What changes should I make to enable the public/private key Authentication?

from /etc/ssh/sshd_config:

RSAAuthentication yes
PubkeyAuthentication yes

[....]

# To enable empty passwords, change to yes (NOT RECOMMENDED) PermitEmptyPasswords no

# Change to no to disable s/key passwords ChallengeResponseAuthentication no

# Change to yes to enable tunnelled clear text passwords PasswordAuthentication no

and before you do that (i.e., while passwords is still on) do

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.debian.org Links debian-announce debian-apache debian-arm-changes debian-beowulf debian-boot debian-cd debian-cd-vendors debian-changes debian-changes-digest debian-isp debian-kde debian-laptop debian-mirrors-announce debian-news debian-security debian-security-announce debian-testing debian-user debian-user-digest Request more information about Pantek

ssh-copy-id -i ~/.ssh/id_rsa.pub you@your-box

it will prompt you for the password, copy up the key and tweak a couple permissions if needed. Then you can test it using public-key before you turn off the passwords...

A

-- 
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org


application/pgp-signature attachment: Digital signature