Using ssh without being asked for a password.

Hey all,

I need to access a new network which is now protected by firewalls. These firewalls will disconnect sessions that are idle for over an hour, this is a problem for a lot of Sun protocols that don't use keepalives (another Sun only idea!!!) such as 'rlogin', 'rsh', 'telnet' etc.

I need to use a protocol such as 'ssh' or equivalent which uses keepalives to remote login to systems inside the protected network to overcome the firewall dropping the sessions. The systems inside this network are all on Solaris 8.

The thing is that I need to overcome 'ssh' requirement for password authentication, as the users are clicking on a menu application that automatically does a rsh and starts the application without prompting the user for any information (I know you should use ssh with authentication, but in this case I cannot use it). Has anyone been able to configure 'ssh' on a system wide basis for all users to not ask for a password, and use standard NIS authentication with the hosts.equiv instead.

I have found plenty of example of how to do this in Linux, but since Sun have decided not to implement ssh in the standard way like every other UNIX vendor and to use wrappers, none of those examples will work on Solaris.

If someone has found a way of overcoming the keepalive issue with rlogin, rsh etc. I'd be really interested in knowing the hack done to get it working, as I would prefer to avoid installing anything on those systems in the new network.

Thanks for reading,

Mick.

[1562 byte] By [MickKelleher] at [2007-11-25 22:50:57]
# 1

You could probably try re-installing SSH using the standard OpenSSH source, not the ones provided by sun.

More of a pain, as you have to install on all the machines, but it would allow you to do as you said.

It might also be possible to use a midleman linux machine to do it, but not sure how you would go about doing it that way.

Not a solution, but some pointers. Hopefully, it helps.

MadChaz at 2007-7-5 17:06:24 > top of Java-index,General,Sun Networking Services and Protocols...
# 2

I compiled OpenSSH on my Solaris 8 boxes then mounted it off through NFS. It saved me from having to install it on every machine. I then setup public keys to allow access without a password but goes off NIS usernames. Each client needs to have a SSH key and the user's public key has to be in their home directory in the authorized__keys file.

SteveC at 2007-7-5 17:06:24 > top of Java-index,General,Sun Networking Services and Protocols...