SEO

#1 (**permalink**) 01-05-2008, 07:03 AM

I am attempting to ssh from/to AIX hosts (5100-02) using OpenSSH
(3.9p1).

If I use password authentication, it works just fine - I get a fully
authenticated session (ie, with a DCE ticket).

But if I use certificate-based authentication, I don't get a DCE
ticket. I am able to connect to the AIX host and I get a session, but I
have no DCE credentials (though I can dce_logon or su to myself and
gain credentials).

But I'm trying to do ssh stuff in batch, and I need to be able to
authenticate with a certificate.

Does anyone have any idea what is wrong, or how to fix it?

Thanks!!!

#2 (**permalink**) 01-05-2008, 07:03 AM

Hi ,
How did u generated the Certificate. Is it a Self Signed certificate.
Where is it stored. ?

Rgrds
RC

#3 (**permalink**) 01-05-2008, 07:04 AM

rcee wrote:
> How did u generated the Certificate. Is it a Self Signed certificate.
> Where is it stored. ?

It's a plain (nothing fancy) SSH2 DSA keypair created with OpenSSL's
"ssh_keygen". The public key is stored in the default
$HOME/.ssh/authroized_keys file ($HOME is a DFS home directory), and
the private key is stored in the user's default $HOME/.ssh/id_dsa.pub
file (it's the same userid and same $HOME).

The keypair does not use a passphrase.

#4 (**permalink**) 01-05-2008, 07:05 AM

Sorry, should have said $HOME/.ssh/authorized_keys (typo)

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

SEO

Cannot get DCE ticket using certificate SSH, but OK with interactive???