Hi all,
I have a client that wants to set up an automated process to get and retrieve files from our ssh server without being prompted for passwords. So I got their ssh key and set it up. At first they weren't using the option argument on the command line, such as:
sftp -o "IdentityFile=/path/to/fil
so it would always prompt for password, which they don't want. The user on the host side is the same as is in the key, but not the same as the user they are logging into on the server. We've been able to do it when I make them put that option arg in, but they said they don't need the 'IdentityFile' option with other vendors and are whinning. I've looked all over and re-re-re-read the manual pages, but I can't see how, or at least don't understand how.
Does anyone know how to setup up an sftp transaction without that pointer and without passwd? It sounds really unsecure to me, so I don't think I'd like it, hehe.
Any tips appreciated
M
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
It sound like one of the following:
a) They're using a different key than they use for everyone else, and the key they use for everyone else is in the default location that sftp expects it in.
b) They're lying to you and it doesn't work for any other vendors either.
c) They don't actually use sftp with any other vendors, so they're not technically lying about not having problems with any other vendors.
Copy the public portion of the key they are using to the server, it should already be there
but I am making sure.
In thier ~/.ssh do this
cat <public key> >> authorized_keys
That should appent that key to thier list of authorised keys and allow them in with
no options or passowrds on the command line.
--Bob
Typically this sort of thing would be configured in the SSH client config file. E.g. in ~/.ssh/config:
Host host.com
Protocol 2
User username
IdentityFile /path/to/file
They could also create an alias for the sftp command, e.g.: alias sftp="sftp -o \\"IdentityFile=/path/to/f
This is assuming they're running a command-line client locally that uses these sorts of syntax.
It's possible that they normally have the key in one of the identity files, but not the right one for the particular key/protocol being used.
Protocol v1: ~/.ssh/identity
Protocol v2 DSA: ~/.ssh/id_dsa
Protocol v2 RSA: ~/.ssh/id_rsa
Sorry I forgot to come back and answer this.
It had nothing to do with the IdentityFile at all, system related, or so it seems. FTP server is a linux box, as is my workstation. Testing between the two requires the IdentityFile pointer, as noted in my question. But between HP servers, or HP client to my FTP server, that is not required apparently. If I remember right, the clients host is HP. Putting the key in the servers authorized_keys is enough. So I was racking my brain, when out of the blue I had them try it and it worked :D .
I gave points above because of the wait and for the attempt. Sorry for the grade, I did that accidently.
M
Business Accounts
Answer for Membership
by: ahoffmannPosted on 2005-02-16 at 10:12:36ID: 13326885
does ssh work this way?
if not check with ssh -v
it's most likely a permission problem