Mailing List Archive

-----BEGIN PGP SIGNED MESSAGE-----

Anne,

we have it working with OpenSSH3.1p1 on Solaris 2.x.
Here you can find good instructions
http://www.snailbook.com/faq/trusted-host-howto.auto.html.

It is important to configure the client AND the server to use hostbased
authentication.
.../etc/sshd_config
"HostbasedAuthentication yes"
.../etc/ssh_config
"AllowedAuthentications hostbased"

Best regards / Gruesse
Carsten Melberg

- --
Carsten Melberg
Siemens AG
SBS ITS ORS CWS 41
Tel +49 911 978 3822
Fax +49 911 978 103822
mailto:carsten.melberg@siemens.com

> -----Ursprüngliche Nachricht-----
> Von: Anne Carasik [mailto:gator@cacr.caltech.edu]
> Gesendet: Freitag, 22. März 2002 19:34
> An: secureshell@securityfocus.com
> Betreff: OpenSSH hostbased authentication problems
>
>
> Hello all,
>
> I haven't found this noted anywhere, so I wanted to ask if anyone
> has been able to get hostbased authentication with protocol 2 in
> OpenSSH working.
>
> We have clusters we'd like to use OpenSSH instead of rsh, and if
> you tell OpenSSH to use Protocol 1, then hostbased authentication
> works. If you tell OpenSSH Protocol 2, then hostbased authentication
> breaks.
>
> This is with OpenSSH 3.1p1, so it's the latest version. If you've
> gotten OpenSSH protocol 2 to work on hostbased, please let me know
> what you did.
>
> Thanks!
>
> -Anne
> --
>
> .-"".__."``". Anne Carasik, System Administrator
> .-.--. _...' (/) (/) ``' gator@cacr.caltech.edu
> (O/ O) \-' ` -="""=. ', Center for Advanced
> Computing Research
> ~`~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> ~~~~~~~~~~
>

-----BEGIN PGP SIGNATURE-----
Version: Biodata SecureDesk OpenPGP CryptoEngine Version 2.1
Comment: Use Encryption for Confidential Communication !

iQCVAwUBPKAqhPCp9ogVY/ZVAQFlCgP8C5kd3/Qm3PUbyZxIGHnaoIzhZ9P13Dox
b2nt8UobIMc/Qw71CrYQjpowoNPTMpBXpFh/b7eLVQv7XnI9nPlJxEpQQOBcSc+T
6v5h2vhBd1ci9FASUaecNHWUYPCMkvT0kWq+XnTo8OG5fpepe1VfsbUdzWzJ94Eb
leGC4Y/0aMA=
=Ezke
-----END PGP SIGNATURE-----