beautypg.com

HP Integrity NonStop H-Series User Manual

Page 154

background image

% alter user swdev.doon, publickey key1 fingerprint f7:7a:7e:4b:e9:39:c4:85:9c:e5:22:e9:a0:75:07:08
% exit

If the alter user command complains that it doesn't know your user ID, then you need to
use the add user command. Here's an example:

% alter user swdev.doon, publickey key1 fingerprint f7:7a:7e:4b:e9:39:c4:85:9c:e5:22:e9:a0:75:07:08
alter user swdev.doon, publickey key1 fingerprint f7:7a:7e:4b:e9:39:c4:85:9c:e5:22:e9:a0:75:07:08
Error, user swdev.doon not found
% add user swdev.doon
add user swdev.doon
OK, user swdev.doon added
% alter user swdev.doon, publickey key1 fingerprint f7:7a:7e:4b:e9:39:c4:85:9c:e5:22:e9:a0:75:07:08
alter user swdev.doon, publickey key1 fingerprint f7:7a:7e:4b:e9:39:c4:85:9c:e5:22:e9:a0:75:07:08
OK, user swdev.doon altered
% exit

3.

Try connecting to the NonStop server from a Cywin shell as in this example:

$ ssh [email protected]
Enter passphrase for key '/home/doon/.ssh/id_dsa':
.
.
.

You should be prompted for your passphrase, but not for your password.

4.

Now try a password free login from a Cygwin shell. First, start ssh-agent:

$ ssh-agent
SSH_AUTH_SOCK=/tmp/ssh-fuLUopQ796/agent.796; export SSH_AUTH_SOCK;
SSH_AGENT_PID=7864; export SSH_AGENT_PID;
echo Agent pid 7864;
$

Export SSH_AUTH_SOCK and SSH_AGENT_PID, then run ssh-add, which will prompt you
for your passphrase and will communicate success to ssh-agent:

$ export SSH_AUTH_SOCK=/tmp/ssh-fuLUopQ796/agent.796; export SSH_AUTH_SOCK;
$ export SSH_AGENT_PID=7864; export SSH_AGENT_PID;
$ ssh-add
Enter passphrase for /home/doon/.ssh/id_dsa:
Identity added: /home/doon/.ssh/id_dsa (/home/doon/.ssh/id_dsa)
$

Now try logging on from the same Cygwin shell. You should not be prompted for a passphrase
nor a password. Any local processes started as descendents of your current shell will be able
to do password free logins to the remote system since ssh-agent will handle the authentication
for you.
NSDEE does not interact with ssh-agent, but sftp invoked by a make deploy project does,
allowing sftp to run in batch mode without the need for a password. For this to work, you
must launch NSDEE from a Cygwin shell (or a descendant shell or xterm). You may want to
create an alias for this purpose, such as:

$ alias eclipse='/cygdrive/c/e3.7.2/eclipse/eclipse -vm \
"C:\Program Files\Java\jdk1.5.0_22\bin\javaw.exe"'

Then you can simply enter eclipse at the Cygwin prompt.

5.

If you want NSDEE to use passphrase authentication using the information you set up in
Cygwin, use the Settings dialog for Network Configurations preferences for SSH to configure
NSDEE to use your Cygwin Open SSH settings as in

Figure 91 (page 155)

.

154 Tips on setting up password free logins with Open SSH

This manual is related to the following products: