D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Key-based SSH login for non-interactive user?

 

On Tue, 9 Jun 2009 12:34:46 +0100
Alan Pope wrote:

> 2009/6/9 Grant Sewell <dcglug@xxxxxxxxxxxx>:
> > We're trying to setup key-based SSH logins for the Nagios service
> > so it can monitor some of our other servers remotely via SSH.  I've
> > setup key-based SSH logins on my home server, but that was for
> > me... an interactive user account.  As I said, I'm having a bit of
> > a dead-brain week (see me previous posts on other topics for
> > confirmation of this) and I can't for the life of me think how to
> > generate the RSA keys for the Nagios user account on the SSH client
> > machine.
> >
> 
> su to the nagios user and use ssh-keygen to generate the key, then
> ssh-copy-id to copy it to the remote machines.
> 
> Cheers,
> Al.

The nagios account is a non-interactive account ("service account").
SUing to it doesn't work.  Running the following fails also:
# su -c "ssh-keygen -t rsa" nagios

I suppose I could make the nagios account interactive
(editing /etc/passwd appropriately), run the commands and then set
nagios as non-interactive again... but I don't know if this would
actually work.  I'll give it a go in a minute.

Grant.

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html