.::Polaris's personal blog::.

Below are step by steps guide that solved that problem.

Senario :

User johndoe on machine pluto is accessing user foo on server mercury, without entering any password..

The Guide:

1. on pluto, johndoe need to generate his own private/public key pairs (i'am using dsa)

pluto# ssh-keygen -t dsa

- when asked for a password, leave it blank, just press "Enter" twice.

the key pairs will be saved in $HOME/.ssh/ (id_dsa and id_dsa_pub)

2. copy over id_dsa_pub to foo at mercury, then add the content of id_dsa_pub to foo's $HOME/.ssh/authorized_keys

mercury# cat id_dsa_pub >>authorized_keys

3. make sure foo's $HOME/.ssh directory permission is set to 700.

mercury# chmod 700 $HOME/.ssh

4. Now the important part: make sure to enable these settings on mercury's /etc/ssh/sshd_config

ForwardAgent yes
PubkeyAuthentication yes
StrictModes no

most people forgot to sets these settings that make them unable to ssh with different user, without a password.

5. restart sshd deamon.

mercury# /etc/inti.d/sshd restart

6. ok you're done, try ssh from pluto

pluto# ssh foo@mercury

By now you already should logon to foo on mercury without the need to key-in foo's password...

ok good luck....

.::Polaris::.

Happy Birthday to myself, gee.. i'm getting older.. already pass the 30th mark.. i guess it time for me to take thing seriously, no more "play-play" aaa.. , cerish the life i had, my wife and daugthers.

There's a lot in life that i had gone through, the paint, the joy , the sadness, the frustration, the laughter such a great memories.. may the future would be brighter for me, my family, and Malaysia..

Happy birthday to me... Happy birthday.. to me..

Below are step by step guide to use orca on linux servers, please bear in mind that this is for my personal reference only, please use it at your own risk. I written this guide since i haven't find it anywhere on google/internet.

What you need to have (read the procalator README for details) :

1. procalator (included in your source distribution of orca (mine is 0.27): contrib/procalator)

2. a running orca server (not covered here).

3. perl 5 installed on all target servers

installation:

Client site..

You can use procalator without compiling the source distribution, provided that you have a running orca server as no. 2 above.

1. unpack the source distribution;

# tar xvfz orca-0.27.tar.gz

2. go to orca-0.27/contrib/procalator

# cd orca-0.27/contrib/