CentOS 5 Networking :: Comfortable User Managment With Passwordless Ssh?
Jan 27, 2011
we are running a small cluster (CentOS 5.5) for research in fluid dynamics, using OpenFOAM and Fluent togehter with Sun Grid Engine. For these programs, ssh without password prompt in console is required. So far, I did the method described here: [URL]... with keys distributed at each node. However, imagine a new users needs to be created:
1. Creating user at every node.
2. Create key at every node
3. Distribute key to every node
Makes password prompt threetimes, for 50 nodes - quite a lot. The students dont like that really much, me neither. What I am asking for is any help to make this more comfortable. I am not really a system admin, but more a researcher with some knowledge in admin tasks. Actually, I would like to use a ldap authetication, were passwords are stored centrally. When the user first logs in to a machine, the home directory should be created. I think I can manage it to work.
[Code]...
View 7 Replies
ADVERTISEMENT
May 11, 2011
I have key-based authentication working for one user on a cluster--
Code:
user@thisnode > ssh user@othernode
last login blah blah blah..
user@othernode >
but if I switch to that user and try it, I get an error--
[Code]...
View 2 Replies
View Related
Feb 12, 2010
I have been trying to establish a connection between two pcs via the ssh channel. I successfully made the connection as a root user, but when i tried as a non root user i had to type in the password the make contact with the other pc. how exactly does this passwordless login actually work?
View 3 Replies
View Related
Aug 13, 2010
I can ssh with password ok but after doing the whole key generation procedure at [URL].. section 7, it still prompts for a password. Here is the output:
[root@apvdbs03 log]# ssh -v root@aapxen01
OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to aapxen01 [10.0.1.20] port 22.
debug1: Connection established.
[Code]..
View 5 Replies
View Related
Jul 10, 2010
I have 3 servers with Oracle 10g installed. In order for rsync to work for log shipping I need to have passwordless SSH configured.*Note: I did not configure these servers, 2 DBA's got canned and I'm left to fix this and I am not a DBA.I have done passwordless SSH in the past and it is easy.Here is my problem: (-> = passwordless ssh works)ServerA -> ServerCServerB -> ServerCBut I need all 3 to be able to do passwordless SSH to each other.I deleted all the files in /home/oracle/.ssh on all 3 servers and this is what I did for all 3 servers:
ssh-keygen -t rsa
ssh-keygen -t dsa
cat id_rsa.pub >> authorized_keys
[code]....
View 13 Replies
View Related
Aug 22, 2009
I have an rsync server and am now setting up cwrsync on my windows machine. I want to be able to run cwrsync over ssh with public private keys. I followed a tutorial over here to set this up. It, however, still prompts me for server password and works only if I provide the password. For some reason the public/private key process is not working.
- I generated a key using the command: ssh-keygen -t rsa -N '' (I verified the key gets generated on my Windows machine)
- I uploaded the generated file id_rsa.pub to server /root/.ssh/authorized_keys
I am also prompted for a password if from command prompt I run this command to log into server: ssh -i c:docume~1user.sshid_rsa root@<server_ip_address> On server I have changed the configuration file (/etc/ssh/ssh_config) to say:
RSAAuthentication yes
PubkeyAuthentication yes
I then restarted the sshd service, however, to no avail.
View 4 Replies
View Related
Feb 18, 2011
I want use two computer to run OpenFOAM or Fluent software.These two computers are connected via a cross cable. I have access to another by "ssh maysam@192.168.1.1" OR "ssh 192.168.1.1" The problem is i should have access to another PC by "ssh maysam-desktop" command which can run parallel. maysam-desktop is name of anothe PC and maysam is name of its user.
View 1 Replies
View Related
Mar 29, 2010
I have to establish password SFTP between one Unix box and Windows in which certain files will be pushed from unix to windows server. Our client is insisting on using TurboFTP on Windows for ssh daemon to run. There are two components in TurboFTO- client and server.
1. I need help if I need to install both. As far as my knowledge with this software is considered, I dont think TurboFTP client to be running as the server componoent will itself run sshd.
2. Also, when I try to add server in TurboFTP server console, it provides me two options - local and remote server types. Local uses 3830 port by default and uses ip 127.0.0.1. If I use Remote server type which uses 3839 and I dont know what ip address to provide. I need help whether I shud go ahead with local server or remote server.
My doubt is if I consider local server type then whether my Unix box will be able to recognize if thie windows machine (which is also naving network specific ip address) has sshd running because windows has local server type enabled which uses 127.0.0.1.
View 3 Replies
View Related
Oct 27, 2009
I windows xp. I install vmware on it and install centos 5. Now how to use internet in centos 5 using user name and password. Our internet provider give us user name and password.
View 1 Replies
View Related
Nov 28, 2009
I just upgraded to Fedora 12 and I am now having some sound issues. On Fedora 11 if I set my volume below about 45% I couldn't hear anything. However 45% gave me a comfortable listening level. Now if I set my volume below about 20% I cannot hear anything, however 20% is very loud. And by loud I mean approximately equivalent to 80% under Fedora 11.
View 9 Replies
View Related
Oct 6, 2009
I downloaded the KDE version, now I'd like the gnome version. And does fedora have a package management similar to ubuntu like 'sudo apt-get install firefox'? I'd like to know.
View 3 Replies
View Related
Apr 19, 2010
I've have major problems installing cinelerra.
So, I tried to uninstall it.
I messed up at some point. Now, most apt operations result in errors.
At the moment, this is what I get when I try apt-get -f install:
Code:
Is there any way to fix this, or is my package managment permanently broken?
I just want to get to the point where apt isn't returning errors, because at some point I will want to upgrade to 10.04. This is just too risky with broken apt.
View 3 Replies
View Related
May 21, 2011
Why is this going on? I use this machine to watch media like heck I would remove these files and break 50%+ of my functionality. There is a whole pile of "red" entries in this repo and it's all multimedia stuff mostly.
View 9 Replies
View Related
Jun 28, 2009
im using vsftp with : chroot_local_user=YES. I would like to have a commune directory for every user.
View 2 Replies
View Related
Jun 25, 2009
I'm running a server with CentOS 5 where the software that needs to run on the server uses ifconfig to verify the system IPv4.The problem is that /sbin isn't set for the user that is supposed to run the software (sadmin) which means the software can't execute ifconfig and thus terminates.now the workaround I've been using is simply to input.
View 10 Replies
View Related
Sep 25, 2009
i want to authenticate user (client) via switch to the radius server(CentOS)Can anyone tell me the authentication/authorization configuration that should be made in the switch (huawei) and the radius server(centos).Esp. the main files under /etc/raddb/ in the Server& the configuration to be made under the radius server template "test"( as of my case)...
View 1 Replies
View Related
Sep 2, 2010
How can I configure ssh to do the passwordless logins between the users in a Linux server?I am using RHEL4.6 version. I have created some users in this server and I would like to login from one user to the other users in the same server without a password prompt by using SSH. I was using rsh for this purpose before, but since it is against our security policy , I have to switch to SSH.I have done the ssh configuration by creating the keys and copying the public keys to the file .ssh/authorized_keys of the other users in the same server.But unfortunately still I am not able to login to other users in the same system WITHOUT a Password.I did the following settings.From user1:
mkdir ~/.ssh
chmod 755 ~/.ssh
/usr/bin/ssh-keygen -t rsa
[code]...
View 1 Replies
View Related
Apr 27, 2011
I'm in my terminal and do git pull, git push alot in a work day. On the server I'm pulling and pushing I can't do password less ssh the usual way by generating rsa keys.Is it still possible perhaps for me to enter my password once for a session and do all the git pulls/pushes I want?
View 1 Replies
View Related
Jun 12, 2011
I am trying to run OpenNebula on a set of 2 machines. One of the machines(called host1) must be able to access the others(including itself) with passwordless ssh.Both machines have the same user and use mounted folder from host1 for home directory(exported with NFS). So single key generation should be enough for this configuration - all the machines have access to the same .ssh folder.What I am getting at the end is passwordless ssh from host1 to host2 which is great, but no success from host1 to host1. Host2 to host2 is also OK, host2 to host1 wants password like host1 to host1.Both machines have the same sshd_config and ssh_config files.File permissions required by ssh should be correct since it works for host1 to host2.The only difference(I see) between the machines is that host1 runs nfs service, so host2 has access to the exported folders.
The ssh-keygen is executed on host1authorized_keys has the same public key two times(to authorize access for host1 on host1 and host2).The distro is Scientific Linux 6.0 aand I also use rsa.Something else - no pass ssh with another user from host1 to host1 works, so I suppose the problem comes from this mounted folder.
View 4 Replies
View Related
Aug 19, 2011
I'm working on some code from my computer at home and would like to do CVS updates to a remote server. When I'm at work I don't need to type in a password, but at home each time I need to type in my password each time I do a CVS update. I've followed the instructions here on how to set up a passwordless public/private ssh key pair: [URL].. However, after that I still need to type in my ssh password each time I do CVS update (or anything CVS related) from my local computer.
View 1 Replies
View Related
Feb 3, 2010
I followed the steps here: [URL]
It works fine, except every time I try to do something that requires authentication of the key, I have to type in the password in a prompt that looks like this:
Code:
$ git pull
Enter passphrase for key '/home/<user>/.ssh/id_rsa':
remote: Counting objects: 16, done.
remote: Compressing objects: 100% (9/9), done.
remote: Total 9 (delta 7), reused 0 (delta 0)
...
This is very annoying. How can I have it so I don't have to enter my password each time?
On my local machine I followed the same instructions and don't have to enter the password every time...
View 4 Replies
View Related
Feb 24, 2010
I have for a while been trying to setup ssh so hadoop can ssh without a password to all it's nodes. (Currenly 2 nodes)But i can not get the ssh to login without either asking for a password or just getting access denied (public key)I have been following two guidesFirst:Setting up SingleNode ClusterThen after:Setting up Multinode ClusterI have also done various ssh tutorials on setting up ssh.I got to the point where i do the command bin/start-dfs.shThen it begins asking for passwords. Which it should'nt.The problem is that ssh is not setup correcly.And whatever i try i get problems with logging in.the computers are called.
hadoop1.utoft.be (Namenode and JobTracker)
hadoop2.utoft.be
hadoop3.utoft.be
[code]....
View 2 Replies
View Related
Feb 9, 2011
I am running Ubuntu 10.04 (OpenSSH_5.3p1 Debian-3ubuntu3, OpenSSL 0.9.8k 25 Mar 2009) I am trying to setup passwordless ssh/scp for some servers on a LAN I am running the following commands:
Code:
ssh-keygen
ssh-copy-id user@<ipaddress>
ssh-add
I added the last step as the following error prevented logins:
Code:
agent admitted to failure to sign using the key After running ssh-add, i still get the error(agent admitted to failure to sign using the key) but passwordless ssh/scp works. The following is the output of user@localmachine:~$ ssh -vvv remote@10.0.7.112
[Code]...
View 1 Replies
View Related
Aug 18, 2011
There are a few threads about this but none seem to me.I have 3 machines setup with a nfs home directory on machine 1.I have created keys using ssh-keygen -t rsa (and left everything blank), then as user on machine 1 run
Code:
cat id_rsa.pub >> authorized_keys2
chmod 644 ~/.ssh/*
this used to work until I upgraded to ubuntu 11.04 (from 9.04), and now it requires a password to ssh. I have tried several times deleting ~/.ssh/* and recreating, to no luck Below is the results when I try to ssh into -2 from -1:
[Code]...
(dumb question, but shouldn't the offered RSA public key be id_rsa.pub rather than id_rsa?)
View 5 Replies
View Related
Jul 29, 2011
I have two load balancing boxes... One primary (box1) and one backup/failover (box2). I want to make sure the heartbeat is running on both boxes via a script. While I'm on box1, I want to run as any user: ssh box2 service pulse status and not have box2 ask for a password.
View 1 Replies
View Related
Jun 14, 2010
What's the easiest way to have a system script (running as root) execute remote commands over ssh? I've written some scripts that execute commands remotely via ssh, and they work great when I run them as myself, as I've set up ssh-agent and keys for passwordless login. I'd like to call these when my laptop docks and undocks. I've been successful at running arbitrary scripts when docking/undocking, but since the ACPI event scripts run as root, trying to run my ssh script fails during authentication.
I tried using sudo with the -u and -i flags to simulate running the script as my user, e.g.: sudo -u redmoskito -i /home/redmoskito/bin/remote_command which successfully finds my private key and tries to use it, but the ssh-agent credentials are still missing, so it still needs my passphrase.
View 2 Replies
View Related
Jun 14, 2011
I am trying to set up passworldess login - I am trying to automate ssh to use send commands from a Red Hat el5.2 server to a solaris 9 server (I did get it working from solaris 10-9).I have ran ssh-keygen -t rsa and then the ssh-copy-id and i can login passwordless via ssh. N HURRAH
Unfortunately when I use my scripts to automate the commands I ALWAYS receive an "Error Code - 255" - the command is successfully sent.
View 3 Replies
View Related
Feb 23, 2009
I'm researching about symbolic links been used with samba / CIFS:I'd like that the user that uses a MS-Windows OS could see my shared folder on CentOS 5 and the symbolic links that are inside this folder. Well, it works but, the user will see that the size of the file is bigger than the real file. Apparently, CIFS gets the size of the symbolic link (aproxim.32K) and add it to the size of the file.Example 1: 100KB file, used with shared folder, MS-Windows's user will see 100KBExample 2: 100KB file, used with symbolic link inside a shared folder, MS-Windows's user will see 132KB. (Sym link + size of file)Is there a way to allow the user only see the size of the file, and not the file + symbolic links ?
View 1 Replies
View Related
Sep 8, 2009
I installed CentOS 5.2 and then run yum update. I configured this server as LDAP/Samba primary domain controller. LDAP seems to be OK and for testing I am able to create users with:smbldap-tools useradd -am usernameI can ssh into the server as root and also as a Linux user which was locally created in the server. But ssh into the server as LDAP user fails (from a Fedora 11 machine) with "Permission denied, please try again", prompting again for password.Some data:
# rpm -qa | grep ldap
python-ldap-2.2.0-2.1
php-ldap-5.1.6-23.2.el5_3
[code]....
View 1 Replies
View Related
Jun 9, 2009
i am using openssh 5.2-p1, i want to restrict user "admin" to login to the server from a specific IP address, for this purpose i have tried the following blocks in sshd_config file.Following is the part of the sshd_config file which i have modified
#The following commands will only allow specific IP to login to ssh.
#AllowUsers admin user1 user2
#AllowGroups
# override default of no subsystems.Subsystem sftp internal-sftp
Match Group sftpgroup
ChrootDirectory /home
AllowTCPForwarding no[code].....
i want to restrict admin user to login to the server only from 172.16.100.221 IP which can be done by using AllowUser line, but i dont want to use AllowUser line,
View 1 Replies
View Related
