[FC5] how to use public key login for ssh?

[Todd Zullinger]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Man-Chi,

> sorry that I am a newbie to fedora FC5, I used to be in Solaris
> environment.

No need to be sorry. :)

> i could not configure correctly for public key ssh login as I used
> to do in Solaris.
> 
> my step:
> 
> 1) cat my public key and put in my $fedora_user/.ssh/authorized_keys

What are the permissions on ~/.ssh and on ~/.ssh/authorized_keys?
OpenSSH is particular about them and won't use the key if the
permissions on the file or directory are too lax.  I set ~/.ssh to 700
and authorized_keys to 600 and ssh is happy.

> 2) configure fedora's /etc/ssh/sshd_config, uncomment the following
> 2 lines
>
> PubkeyAuthentication yes
> AuthorizedKeysFile      .ssh/authorized_keys

It doesn't hurt, but you don't need to do this because the values
specified in sshd_config are the defaults.

> However, ssh login still prompts me for password.....

What is the prompt?  It may be a prompt for the password of your key,
unless the key has no password (which is bad) or you are using the
ssh-agent and have already added your key to the agent.

- -- 
Todd        OpenPGP -> KeyID: 0xD654075A | URL: www.pobox.com/~tmz/pgp
======================================================================
If a government were put in charge of the Sahara Desert, within five
years they'd have a shortage of sand.
    -- Dr. Milton Friedman

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)
Comment: When crypto is outlawed bayl bhgynjf jvyy unir cevinpl.

iG0EARECAC0FAkSt5YcmGGh0dHA6Ly93d3cucG9ib3guY29tL350bXovcGdwL3Rt
ei5hc2MACgkQuv+09NZUB1p9IQCgxcTJic1bPJv5p3Yf5WJc+ssKhc8AoLHG8HOy
utheLHkzDr2ntPpB0SyA
=2d51
-----END PGP SIGNATURE-----