ssh_keygen as different user?

Post #328,279 by drook 6/19/10 11:40:23 PM Reply	ssh_keygen as different user? I'm trying to set up password-less login to several clients' servers. Problem is, the username on their servers isn't the same as the username on my local box. So the public key from this box doesn't work. Do I need to actually create all those users here to generate the keys? And if I do, will I need to logged in as that user for the key to work? -- Drew
Post #328,280 by crazy 6/20/10 12:15:33 AM Reply	What's wrong with dropping your auth file in the ~/.ssh dir and logging in as that user?
Post #328,283 by drook 6/20/10 11:06:52 AM Reply	Tried that, didn't work I was still prompted to log in. If it's supposed to work that way, I'll go try again, maybe I typoed something. -- Drew
Post #328,291 by mvitale 6/20/10 1:24:51 PM Reply	ssh no-password login is very sensitive to... ...file and directory permissions. chmod 700 for the .ssh/ dir in your homedir, and 600 for the authorized_keys2 file inside that directory. If not, it doesn't work, as it assumes they're compromised, or something to that effect. -Mike "They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety." - Benjamin Franklin, 1759 Historical Review of Pennsylvania
Post #328,310 by folkert 6/20/10 8:23:10 PM Reply	DING DING DING ^^^ what he said.
Post #328,313 by static 6/20/10 9:51:01 PM Reply	+5 Informative. I've found it also looks for `~/.ssh/authorized_keys` not `~/.ssh/authorised_keys` :-/ Not that you'd have that problem, I imagine. Wade. Q:Is it proper to eat cheeseburgers with your fingers? A:No, the fingers should be eaten separately.
Post #328,333 by jake123 6/21/10 9:32:26 AM Reply	Never really notice that anymore living right next door to the "z for s" guys... you just get really used to it.
Post #328,315 by crazy 6/20/10 10:33:25 PM Reply	Turn on debugging lots and lots of info available from the ssh client by turning up the verbosity. If you are able to run the sshd daemon on the server, you can have it listen on a different port (so the system daemon can still be running), and you can up the the debugging/verbosity level on the server process. Don't run it in the background. You watch the debugging on both processes and usually determine the problem.
Post #328,328 by drook 6/21/10 7:59:42 AM Reply	Can't do it on the server If I had that kind of control over the server, I'd just set up the username I want. Will try more verbosity, though, see what I see. -- Drew

Welcome to IWETHEY!