castanyes blaves

# Create a file in the user's home directory named .shosts with at least one entry:

clienthostname.clientdomain.com username

This file must be read/write for this user only:

# chown username:username ~username/.shosts

# chmod 600 ~username/.shosts

# Edit the /etc/ssh/sshd_config file and add the following options:

HostbasedAuthentication yes

IgnoreRhosts no

# Run the command:

# ssh-keyscan -t dsa clienthostname >> /etc/ssh/ssh_known_hosts

(for dsa encryption)

Restart the SSH server:

# service sshd restart

On the client:

# Edit the /etc/ssh/ssh_config file and under Host *, add the following options:

HostbasedAuthentication yes

EnableSSHKeysign yes

posted by avilella  # 9:40 AM