[SunHELP] F-Secure client talking to OpenSSH server

[Marek Grinberg]

Hello again,

The following steps were needed to make sftp work keyless from F-Secure 
SSH to OpenSSH:
1. Generate SSH keys in the F-Secure client:
   ssh-keygen2 -t rsa -b 1024   (or -t dsa or -b 2048)
2. In the F-Secure client create file identification in $HOME/.ssh2, and 
let this file contains:
   Idkey   id_rsa_1024_a   (this the file generated in step 1)
3. Copy the public key to the OpenSSH server into $HOME/.ssh
4. Convert the public key to OpenSSH format:
   ssh-keygen -i -f id_rsa_1024_a.pub > $HOME/.ssh/authorized_keys2
5. Change access rights for $HOME/.ssh:
   chmod 700 $HOME/.ssh
   chmod 600 $HOME/.ssh/*

Regards,

Marek

velociraptor skrev:
> On 5/30/06, Marek Grinberg <marek.grinberg at tele2.se> wrote:
>   
>> Hello,
>>
>> I need to let one server running Solaris 5.6 and F-Secure SSH 3.0.1
>> transfer files to another server running OpenSSH 4.3p1 using sftp.
>> I have put the public key from the client into the server's $HOME/.ssh
>> directory, but OpenSSH does not recognize it:
>> debug: server offers auth methods
>> 'publickey,password,keyboard-interactive'.
>> debug: Ssh2AuthClient/sshauthc.c:316/ssh_authc_completion_proc: Method
>> 'publickey' disabled.
>> debug: server offers auth methods
>> 'publickey,password,keyboard-interactive'.
>> debug: Ssh2AuthPasswdClient/authc-passwd.c:113/ssh_client_auth_passwd:
>> In Batchmode, so we're not asking the user for password.
>> debug: Ssh2AuthClient/sshauthc.c:316/ssh_authc_completion_proc: Method
>> 'password' disabled.
>> debug: server offers auth methods
>> 'publickey,password,keyboard-interactive'.
>> debug: Ssh2Common/sshcommon.c:137/ssh_common_disconnect: DISCONNECT
>> received: No further authentication methods available.
>>
>> Any hints ?
>>     
>
> With sftp you have to use the "-o" option to pass ssh the path to the
> public key; sftp itself doesn't implement public key login.  Check
> your sftp's client options.  (Just resolved a similar issue with
> compatriots in my own workplace who are using an sftp client for
> Windows.)
>
> =Nadine=
> _______________________________________________
> SunHELP maillist  -  SunHELP at sunhelp.org
> http://www.sunhelp.org/mailman/listinfo/sunhelp