ADSM-L

Re: [ADSM-L] Need info on how to SCP on AIX without being prompted for password

2010-06-26 03:58:17
Subject: Re: [ADSM-L] Need info on how to SCP on AIX without being prompted for password
From: Grigori Solonovitch <Grigori.Solonovitch AT AHLIUNITED DOT COM>
To: ADSM-L AT VM.MARIST DOT EDU
Date: Sat, 26 Jun 2010 10:30:19 +0300
Hello Jim,
You can debug ssh connectin by command:
ssh -vvv user@destination_server
At the same time, please check, if:
1) be sure you have the latest packages for SSL and SSH (it is important fot 
not root users);
2) you have configured $HOME/.shosts on target server;
3) directory $HOME of target user should not have write permission for group 
and others (it has to be 755 or 750).
Any other reasoms of prompting password you can identify by debugging 
connection.
I am using /etc/ssh/sshd_config for SSH server configiration, 
/etc/ssh/ssh_config for SSH client configuration and /etc/ssh/ssh_known_hosts 
for public keys from other hosts instead of generating keys for specific users. 
File $HOST/.shosts is used to control access for specific users on hosts.
It is working perfectly for:
ssh <user>@<host>  - to connect to remote host without password;
ssh <user>@<host> <command>   - to run command on host remotly without password;
scp <user>@<host>:<source file> <user>@<host>:<target directory>   - to copy 
files between hosts without password;
rsync <options>  <user>@<host>:<source> <user>@<host>:<target>   - to 
synchronize files/directories between hosts without password (much better and 
faster than scp).
Kindest regards,
Grigori

tor Manager [ADSM-L AT VM.MARIST DOT EDU] On Behalf Of Jim Neal [jrneal AT 
BERKELEY DOT EDU]
Sent: Saturday, June 26, 2010 12:50 AM
To: ADSM-L AT VM.MARIST DOT EDU
Subject: [ADSM-L] Need info on how to SCP on AIX without being prompted for 
password

Hi All,

        I am running TSM 5.5.4 on AIX 5.3.7.  I am trying to use 'ssh-keygen
-t rsa' to create a public/private keypair so that I can create a script
that will automatically scp specific files to a remote site.  Obviously, I
do not wish to send the password in the clear, nor do I wish to incorporate
the password into the script itself.

        I created the key pair on the server I want to send the file from
and then copied the public key to the /home/(accountname)/.ssh directory of
the account I am using on the destination server but I am still getting
prompted for the password when using scp.

        The command I am using is:

scp -i identity_file file-to-be-copied
user@destination_server:/destinatation_directory


        Any help or alternative solutions that anyone can provide will be
immensely appreciated!  Thanks much!


Jim Neal
Sr. TSM Admin
UC Berkeley Storage and Backup Group
jrneal AT berkeley DOT edu



Please consider the environment before printing this Email.

CONFIDENTIALITY AND WAIVER: The information contained in this electronic mail 
message and any attachments hereto may be legally privileged and confidential. 
The information is intended only for the recipient(s) named in this message. If 
you are not the intended recipient you are notified that any use, disclosure, 
copying or distribution is prohibited. If you have received this in error 
please contact the sender and delete this message and any attachments from your 
computer system. We do not guarantee that this message or any attachment to it 
is secure or free from errors, computer viruses or other conditions that may 
damage or interfere with data, hardware or software.