Re: Certificate placement in OpenSSH for Windows

Al Sparks <[email protected]> Thu, 14 Dec 2006 20:25:30 -0800 (PST)
Newsgroups gmane.network.ssh.windows
Message-ID <[email protected]>
> Al Sparks wrote:
>> I'm trying to use scp to copy files from a SCO box to a Windows
>> 2003 box running OpenSSH.
>> 
>> I generated a key on the SCO box and transferred the id_rsa.pub
>> file over to the OpenSSH box.  I created a directory ".ssh" on
>> what I think is the home directory of the userid I'm sending to.
> 
> OpenSSH for Windows is old.
> 
> Generally, the home directory is "." when ssh'ing in.
> 
> So, "scp id_rsa.pub server:.ssh/authorized_keys" will work
> (assuming id_rsa.pub is in your current directory and ".ssh"
> exists on the remote server and you're not worried about
> overwriting an existing .ssh/authorized_keys).
> 
> 
> Simply:
> # ssh server "mkdir .ssh"
> # cat id_rsa.pub | ssh server "cat - >> .ssh/authorized_keys"
> 
> should do what you want.
> 
> -ME


I figured out how to turn on DEBUG3 logging by going into
sshd_config, and I realized that I needed to go to the server's
Event Viewer to view the entries.  As I suspected, the
permissions aren't correct for the file and perhaps the
directories.

Specifically, the error I'm getting is 
   Authentication refused; bad ownership or modes for file
       /cygdrive/umpty/scratch/.ssh/authorized_keys.

If I was working with LUnix, it would be pretty straightforward.  But
when I look at the properties of the file, it tells me what groups are
associated with it, but not who owns it.  "Everyone" is not one of
those groups.  SYSTEM and domain\ADMINISTRATORS do have write access.
Do I need to remove domain\ADMINISTRATORS group from the
file/directory tree?
    === Al




--
List Info:      http://erdelynet.com/ssh-l/
List Archives:  http://erdelynet.com/archive/ssh-l/
To Unsubscribe: Mail mailto:[email protected]