[Gllug] rssh with public key authentication?

[John Edwards]

On Wed, Dec 08, 2010 at 08:52:36AM +0000, David Damerell wrote:
<snip> 
> Also, if you can, you can shut down sshd at the remote end and run an
> sshd -d to watch your connection come in. This is a surefire way to
> pick up on authentication problems but often not very feasible since
> other people use the remote machine.

You could run that debugging SSH daemon on a different port.


> The usual problem I expect is this;
> A is to ssh to B, but B doesn't know A's key fingerprint.

I don't think that is needed.

For automated jobs the SSH client on A does need to know B's SSH
daemon key fingerprint. This is fixed either by contacting manually
first (to store in ~/.ssh/known_hosts) or storing all the server keys
in /etc/ssh/known_hosts (using ssh-keyscan for example).


-- 
#---------------------------------------------------------#
|    John Edwards   Email: john at cornerstonelinux.co.uk    |
#---------------------------------------------------------#
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 204 bytes
Desc: Digital signature
URL: <http://mailman.lug.org.uk/pipermail/gllug/attachments/20101208/297552a0/attachment.pgp>
-------------- next part --------------
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug