Re: [Hampshire] SSH pain

Paul Stimpson <paul@???> wrote:
> I've been using SSH2 to log into my home server
> for so long I can't remember exactly what I did
> to set it up. Yesterday I added a new user to
> the server and I want then to be able to use
> SFTP.
>
> I created a new user and generated new new
> id_rsa and id_rsa.pub files (tried several
> variants of ssh-keygen -t rsa). I added the
> username to the AllowUsers directive in
> /etc/ssh/sshdconfig and copied the id_rsa file
> over to my laptop and put it in a new user's
> .ssh directory.

Couple of immediate notes...

- You need to copy the ssh_host_[rd]sa.pub key to
the client, not the user's key. You probably
have already done this.
- You'll need to create keys for the new user on
the laptop, then copy the id_[rd]sa.pub to the
server, and put them in ~/.ssh/authorized_keys

In the SSH protocol, the client checks the
authenticity of the server with the
ssh_host_[rd]sa keys, then the server checks the
user's authenticity with the id_[rd]sa keys.

Beyond that, looking at the server's sshd_config
and the client's ssh_config would be useful.

Nick.

--
Nick Chalk ................. once a Radio Designer
Confidence is failing to understand the problem.