Unable to do password-less login using openssh 5.5p1 in CentOS 5.5

[Andre Patton]

Hello everyone, I am trying to an experiment on my server, for this reason I need your help. I have installed openssh 5.5p1 on CentOS5.5 server edition. I did this because I wanted to use new utilities with matching functionality and also I wanted to use password-less login via users. First I have restricted users in the sftponly group to their homedirectoriy and internal-sftp. So that the user can automatically copy files and do password-less login. So can anyone help me out here, I have tried this but I am not getting perfect success in it? Thanks you!

[teena_pansare]

Hello, the thing which you are trying to is not that easy, the password-less loging is quite difficult to do. Then too as per my knowledge you must check the following settings to complete your task.

• .ssh 700 user:root; .ssh/authorized_keys 600 user:root
• .ssh 700 root:root; .ssh/authorized_keys 600 root:root
• .ssh 760 user:root; .ssh/authorized_keys 660 user:root

The above mentioned setting might help you to get through this. All the Best!

[Ekpah]

Hey if above mentioned setting doesn’t help you then I have one solution for you. I am also having some of the setting, I am writing below and just try to apply it on your system and check it is working or not. go to the /etc/ssh/sshd_cofig configuration setting:

RSAAuthentication yes
PubkeyAuthentication yes
AuthorizedKeysFile .ssh/authorized_keys
PasswordAuthentication yes
ChallengeResponseAuthentication no
GSSAPIAuthentication yes
GSSAPICleanupCredentials yes
UsePAM yes
AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE
AcceptEnv XMODIFIERS
Subsystem sftp internal-sftp
Match Group sftponly
ChrootDirectory /var/sftp/%u
X11Forwarding no
AllowTcpForwarding no
ForceCommand internal-sftp

[windows_user]

Hey also have an altrernative solution for you, which will help you fix your error. What you need to do is just verify the permission for the file “/var/sftp/DUMMY/.ssh/authorized_keys (0600) and directory /var/sftp/DUMMY/.ssh (0700)”. These both files is owned by the UID of 503 as per your question. Once you verify the above file, also keep in mind that UID is able to get through to /var/sftp/dummy. Because you migh be having the issue of SElinux file. Just check it and solve your problem. All the Best.

[Andre Patton]

Hey thanks lot friends; I have solved my problem with kind help of you all. I have lost the hope of doing such thing but you solution made it simple and I came out of it. I have tried above all method, but don’t know why nothing was working for me. But when I seen the above mentioned method, with the var/sftp/dummy directories, I took chance and I gave another attempt to it and I did it. Thanks to you all again friends, without you it was not possible.