[gentoo-user] Problem with keychain

[gentoo-user] Problem with keychain

[Marc Blumentritt]

Hi list,

I have a problem with keychain. It is set up following the wiki. I start
keychain:

hive ~ # keychain id_dsa

KeyChain 2.6.6; http://www.gentoo.org/proj/en/keychain/
Copyright 2002-2004 Gentoo Foundation; Distributed under the GPL

 * Initializing /root/.keychain/hive-sh file...
 * Initializing /root/.keychain/hive-csh file...
 * Initializing /root/.keychain/hive-fish file...
 * Starting ssh-agent
 * Initializing /root/.keychain/hive-sh-gpg file...
 * Initializing /root/.keychain/hive-csh-gpg file...
 * Initializing /root/.keychain/hive-fish-gpg file...
 * Starting gpg-agent
 * Adding 1 ssh key(s)...
Identity added: /root/.ssh/id_dsa (/root/.ssh/id_dsa)

and source it:

hive ~ # . ~/.keychain/$HOSTNAME-sh

but when I start ssh, it still asks me for my passphrase:

hive ~ # ssh 192.168.1.3
Password:


Looking with ssh-add, I see my key:
hive ~ # ssh-add -l
1024 dd:f2:12:2a:bc:8a:55:7e:18:43:03:dd:e9:dd:27:4d /root/.ssh/id_dsa (DSA)


So what's wrong? Any ideas?

Regards,
Marc

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Problem with keychain

[Mike Mazur]

Hi,

On 7/28/07, Marc Blumentritt <marc.blumentritt@arcor.de> wrote:
> I have a problem with keychain. It is set up following the wiki. I start
> keychain:
>
> <snip>
>
> Looking with ssh-add, I see my key:
> hive ~ # ssh-add -l
> 1024 dd:f2:12:2a:bc:8a:55:7e:18:43:03:dd:e9:dd:27:4d /root/.ssh/id_dsa (DSA)
>
>
> So what's wrong? Any ideas?

There are a few things you might want to check first:
-the permissions of the ~/.ssh folder on the remote system should be
700 (chmod 700 ~/.ssh)
-the public key id_dsa.pub should be appended to ~/.ssh/authorized_hosts
-permissions of ~/.ssh/authorized_hosts should be 600

If you're using a different flavor of SSH than OpenSSH, the keys might
go into a different file; have a look at the man page in that case :)

Hope that helps!
Mike
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Problem with keychain

[Mike Mazur]

Hi,

On 7/28/07, Mike Mazur <mmazur@gmail.com> wrote:
> -the public key id_dsa.pub should be appended to ~/.ssh/authorized_hosts
> -permissions of ~/.ssh/authorized_hosts should be 600

My mistake, that should be authorized_keys instead of authorized_hosts.
Mike
-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] Re: Problem with keychain

[Marc Blumentritt]

Mike Mazur schrieb:
> Hi,
> 
> On 7/28/07, Marc Blumentritt <marc.blumentritt@arcor.de> wrote:
>> I have a problem with keychain. It is set up following the wiki. I start
>> keychain:
>>
>> <snip>
>>
>> Looking with ssh-add, I see my key:
>> hive ~ # ssh-add -l
>> 1024 dd:f2:12:2a:bc:8a:55:7e:18:43:03:dd:e9:dd:27:4d /root/.ssh/id_dsa (DSA)
>>
>>
>> So what's wrong? Any ideas?
> 
> There are a few things you might want to check first:
> -the permissions of the ~/.ssh folder on the remote system should be
> 700 (chmod 700 ~/.ssh)
> -the public key id_dsa.pub should be appended to ~/.ssh/authorized_hosts
> -permissions of ~/.ssh/authorized_hosts should be 600

This brought me in the right directionen. I created a authorized_keys
file, but by mistake I placed it in ~ and not in ~/.ssh/ !

After putting it in the right place, everything works like a charm!

Thanks
Marc

-- 
gentoo-user@gentoo.org mailing list