From owner-freebsd-questions Thu Sep 14 0:46:21 2000 Delivered-To: freebsd-questions@freebsd.org Received: from mailhost01.reflexnet.net (mailhost01.reflexnet.net [64.6.192.82]) by hub.freebsd.org (Postfix) with ESMTP id BCA9737B422 for ; Thu, 14 Sep 2000 00:46:19 -0700 (PDT) Received: from 149.211.6.64.reflexcom.com ([64.6.211.149]) by mailhost01.reflexnet.net with Microsoft SMTPSVC(5.5.1877.197.19); Thu, 14 Sep 2000 00:45:11 -0700 Received: (from cjc@localhost) by 149.211.6.64.reflexcom.com (8.11.0/8.11.0) id e8E7kDb84763; Thu, 14 Sep 2000 00:46:13 -0700 (PDT) (envelope-from cjc) Date: Thu, 14 Sep 2000 00:46:12 -0700 From: "Crist J . Clark" To: Zhiui Zhang Cc: freebsd-questions@FreeBSD.ORG Subject: Re: ssh configuration question Message-ID: <20000914004612.U69158@149.211.6.64.reflexcom.com> Reply-To: cjclark@alum.mit.edu References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: ; from zzhang@cs.binghamton.edu on Wed, Sep 13, 2000 at 05:17:51PM -0400 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, Sep 13, 2000 at 05:17:51PM -0400, Zhiui Zhang wrote: > > I am trying to setup RSA key log in for users with 4.1-release and > TeraTerm client: > > (1) Run ssh-keygen, copy $HOME/.ssh/identity.pub to > /etc/ssh/authorized_keys ITYM, $HOME/.ssh/authorized_keys. System-wide authorized keys do not make a whole lot of sense. > (If I have setup up more users, I will add each > identity.pub file to authorized_keys instead of copying). > > (2) Ftp $HOME/.ssh/identity to Windows using binary mode. FTP? Your encrypted secret key is no longer all that secret. > (3) Startup Tera Term, choose "Use RSA key to log in" and use the file I > got in step (2) as the private key file. > > It says "authentication fails". What is wrong with these steps? BTW, how > to add the FreeBSD host as a known host - which file to copy over from > FreeBSD to Windows? Put that same identity.pub in your authorized_key file. I believe you can set the file to use in TeraTerm. -- Crist J. Clark cjclark@alum.mit.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message