| |
SSH host based authentication
Exercise
Start clmaster VM and login to its console as user hostadm:
On clmaster VM, in the /etc/ssh/ssh_config file set, add the following two lines on the bottom:
HostbasedAuthentication yes
EnableSSHKeysign yes
|
Start clnode01 in the other command window on your desktop and
login to its console as user hostadm:
On clnode01 VM, add the same two lines into /etc/ssh/ssh_config:
HostbasedAuthentication yes
EnableSSHKeysign yes
|
On clnode01 VM, make the following changes in config file
/etc/ssh/sshd_config:
HostbasedAuthentication yes
IgnoreRhosts no
|
Make sure the above lines are uncommented.
On clnode01, create file /etc/hosts.equiv, containing the
following lines:
clmaster
clnode01
clnode02
|
On clnode01, create file /etc/ssh/ssh_known_hosts containing clmaster's public key:
Edit /etc/ssh/ssh_known_hosts file and type "clmaster" in the beginning of the line as shown below:
clmaster ssh-rsa AAAAB3Nza ...
|
Restart SSH service on clnode01
On clmaster,
try to SSH to clnode01 as user hostadm.
clnode01 should allow SSH login without password if all the steps above were done correctly.
|
|