RE: ssh allowing root login with no password (Solved)

-----Original Message-----
From: redhat-list-bounces@xxxxxxxxxx [mailto:redhat-list-
bounces@xxxxxxxxxx] On Behalf Of Steven Buehler
Sent: 10 May 2011 19:59 PM
To: 'General Red Hat Linux discussion list'
Subject: RE: ssh allowing root login with no password (Solved)



-----Original Message-----
From: redhat-list-bounces@xxxxxxxxxx [mailto:redhat-list-
bounces@xxxxxxxxxx] On Behalf Of m.roth@xxxxxxxxx
Sent: Tuesday, May 10, 2011 10:28 AM
To: General Red Hat Linux discussion list
Subject: RE: ssh allowing root login with no password (Solved)

Steven Buehler wrote:
<snip>
Strangest thing I ever saw. The problem is solved. The private
key
is the key that I installed into my SecureCRT. If I log into the
server with that key from SecureCRT, then login to my private
server
and try to ssh
to the
server where the public key is installed from my private server
that
is in a different tab in SecureCRT, it uses the private key on my
local Windows7 laptop. I have never seen this before.

Question: how do the other machines do authentication? Could it be
that
you go to log in, and it authenticates you from a root server?

mark


No, this is the first time I have ever run across this. After some
testing,
the only thing I can come up with is that once I log in with SecureCRT
to
the server, I can open other tabs in SecureCRT to other servers and it
will
use the private key that I have saved in my SecureCRT. This issue does
not
happen if I use putty.


What you are talking about is called SSH agent/key forwarding which SecureCRT
supports and makes use of by default (See Connecton -> SSH2 -> Advanced ->
Enable OpenSSH Agent Forwarding in your session properties). Have a look at
the (-A -a) options in man ssh and the ForwardAgent option in man ssh_config.
Putty has a similar feature but it is not enabled by default (see pagent)

Regards,

--
Andre Dill


DISCLAIMER: This email and any files transmitted with it are confidential to DataCash Group plc and its group companies. It is intended only for the person to whom it is addressed. If you have received this email in error, please forward it to info@xxxxxxxxxxxx with the subject line.If you are not the intended recipient you must not use, disclose, copy, print, distribute or rely on this email or any transmitted files. DataCash Ltd is registered in England and Wales no. 3430157. DataCash Ltd is part of the DataCash Group plc. DataCash Group plc is registered in England and Wales no. 3168091. DataCash Ltd and DataCash Group plc registered address is Descartes House, 8 Gate Street, London, WC2A 3HP, United Kingdom.

Save a tree...Please only print this page if essential
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

Relevant Pages

  • RE: ssh allowing root login with no password (Solved)
    ... ssh allowing root login with no password ... is the key that I installed into my SecureCRT. ... server with that key from SecureCRT, then login to my private server ...
    (RedHat)
  • RE: ssh allowing root login with no password (Solved)
    ... ssh allowing root login with no password ... is the key that I installed into my SecureCRT. ... server with that key from SecureCRT, then login to my private server ...
    (RedHat)
  • RE: ssh allowing root login with no password (Solved)
    ... ssh allowing root login with no password ... I was able to get to these servers from my own ... file would allow a login with no private key or password. ...
    (RedHat)
  • openssh, solaris8 and root login
    ... Question on OpenSSH and password less root login ... Meanwhile I need to disable all direct root login to "server1" using ssh ... from any other client/server except from server2 (as said above, ... Currently PermitRootLogin is set yes in sshd_config. ...
    (SunManagers)
  • Re: [SLE] rkhunter-1.1.7-1.ps.noarch.rpm available
    ... Gave me a bunch of stuff to look at. ... > is obvious, don't run Apache, or ssh, etc. ... No formal training or experience whatsoever. ... Watch out Root login possible. ...
    (SuSE)