To: cygwin@cygwin.com
From: Andrew DeFaria <Andrew@DeFaria.com>
Subject: Re: Passwordless authentication between two domains.
Date: Tue, 20 Nov 2012 10:16:12 -0800
Lines: 36
Message-ID: <k8ghdb$kps$1@ger.gmane.org>
References: <1353433612060-94427.post@n5.nabble.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:16.0) Gecko/20121026 Thunderbird/16.0.2
In-Reply-To: <1353433612060-94427.post@n5.nabble.com>
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Precedence: bulk
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com

On 11/20/2012 9:46 AM, anulav2 wrote:
> Hello,
>
> I am unable to use passwordless authentication between two 2008 windows
> servers in two different domains.
> Account name is same in both domains.
> I can authenticate using password but not otherwise.
> I have setup RSA keys and authorized_keys file. Permissons on .ssh are 700
> and .ssh/authorized_keys are 600.
> I have tried uninstall and re-install twice.
> and following is part of what i get when i increase verbosity.
Is your home directory, oddly named /home/pal.rsync, set to 755? How 
about ~/.ssh? Also 755. No. 700. That may be the problem. My 
~/.ssh/authorized_keys is set to 644. My ~/.ssh/id_rsa is 600 but 
~/.ssh/id_rsa.pub is 644.

But I don't use any RSA anymore, I use DSA instead. I believe it is more 
secure.

Additionally is ~/.ssh/id_rsa.pub the same on both machines? (Does diff 
return no differences?). I believe, since these are two different 
domains, that the generated keys will not be the same. If they are the 
same then regenerate them on both machines and compare them again.

Also, ~/.ssh/id_rsa.pub from Domain A should be added to the 
~/.ssh/authorized_keys on Domain B and visa versa from Domain B -> Domain A.

Finally make sure that the key is contained in one long line. Often, 
depending on the user's editor and it's setting, when you paste into the 
editor the editor may insert new lines.

These are the usual problems I see when people are attempting to set up 
passwordless authentication with ssh.
-- 
Andrew DeFaria <http://defaria.com>
I went to a general store, but they wouldn't let me buy anything specific.


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple