cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1213
Views
0
Helpful
3
Replies
Highlighted

Cisco SSH Authentication using RSA sig

Hi all,

Can the cisco router authenticate to a server using its RSA sig this will allow password-less login to remote servers?

Thanks,

Sotiris

3 REPLIES 3
Highlighted
Enthusiast

Re:Cisco SSH Authentication using RSA sig

Check out the command "ssh pubkey-chain"


Sent from Cisco Technical Support Android App

-- CCNP, CCIP, CCDP, CCNA: Security/Wireless Blog: http://ccie-or-null.net/
Highlighted

Re:Cisco SSH Authentication using RSA sig

I tried that method I have exchanged the pub keys between the two clients, I issue the command

ssh -l user x.x.x.x and the debug shows the following:

%SSH-3-AUTH_METH_ERR: Server does not support password or keyboard-interactive authentication

SSH CLIENT0: user authentication failure(code = 0)

SSH CLIENT0: Session disconnected - error 0x00#

This looks like that the cisco ssh client cannot authenticate using RSA it always expects that a username and password will be sent.

Sotiris

Highlighted
Beginner

Re: Re:Cisco SSH Authentication using RSA sig

looking at your ssh-server

* using "DEBUG"-LogLevel

 

admin@ubuntu:~/.ssh$ cat /etc/ssh/sshd_config | egrep "Level"
#LogLevel VERBOSE
LogLevel DEBUG

you'll notice:

 

admin@ubuntu:~/.ssh$ tail -f /var/log/auth.log
Aug 28 17:63:92 ubuntu sshd[3218]: Connection closed by authenticating user admin <router-ip> port #nnn [preauth]

so the router (ssh-client) drops the session as the server wants to see some authentication-credentials.