Cisco SSH Authentication using RSA sig

[sotiris.ioannou]

Hi all,

Can the cisco router authenticate to a server using its RSA sig this will allow password-less login to remote servers?

Thanks,

Sotiris

[SOcchiogrosso]

Check out the command "ssh pubkey-chain"


Sent from Cisco Technical Support Android App

[sotiris.ioannou]

I tried that method I have exchanged the pub keys between the two clients, I issue the command

ssh -l user x.x.x.x and the debug shows the following:

%SSH-3-AUTH_METH_ERR: Server does not support password or keyboard-interactive authentication

SSH CLIENT0: user authentication failure(code = 0)

SSH CLIENT0: Session disconnected - error 0x00#

This looks like that the cisco ssh client cannot authenticate using RSA it always expects that a username and password will be sent.

Sotiris

[r.heitmann]

looking at your ssh-server

* using "DEBUG"-LogLevel

admin@ubuntu:~/.ssh$ cat /etc/ssh/sshd_config | egrep "Level"
#LogLevel VERBOSE
LogLevel DEBUG

you'll notice:

admin@ubuntu:~/.ssh$ tail -f /var/log/auth.log
Aug 28 17:63:92 ubuntu sshd[3218]: Connection closed by authenticating user admin <router-ip> port #nnn [preauth]

so the router (ssh-client) drops the session as the server wants to see some authentication-credentials.