You need to create a proper directory structure in your filers' /etc first to access it via ssh without a password:
Create /etc/sshd/<username>/.ssh/authorized_keys and paste the public key of the accessing host in that file. <username> has to be the user on the remote host that is used to transmit the ssh command. I did not find a way to make SecureAdmin or ONTAP create that file automatically yet...
With the option "ssh.pubkey_auth.enable" activated, the user now authenticates without a password.
Thorsten
Brian Parent bparent@calvin.ucsd.edu@mathworks.com on 28.10.2004 01:07:57
Sent by: owner-toasters@mathworks.com
To: Netapp toasters@mathworks.com cc: Subject: Re: ssh scripts
--------------------------------------------------------------------------
Can anyone on this list confirm whether ssh can be used in place of rsh (after purchasing SecureAdmin ofcourse), without requiring the use of a password? It appears to be the case, based on the existence of the options "ssh.pubkey_auth.enable" as well as "ssh.passwd_auth.enable" on my DOT 6.4.5 systems. I'd just like to make sure before buying the SecureAdmin software because I'd rather not bother if I have to stuff the password into an expect script somewhere.
Re:
Date: Wed, 27 Oct 2004 21:07:52 +0200 From: Stefan Funke bundy@arcor-ip.de To: Robert Borowicz rbaus@swbell.net Cc: Netapp toasters@mathworks.com Subject: Re: ssh scripts
Quoting message received from Robert Borowicz:
I want to work with our DBA's to put our Oracle instances in Hot Standby to grab snapshots. Anybody got a script they use that utilizes SSH to run the snap command on a filer?
http://www.netapp.com/tech_library/3130.html
show it to your dba's and replace rsh with ssh.
COMPUTACENTER (UK) LTD
The contents of this e-mail are intended for the named addressee only. It contains information which may be confidential and which may also be privileged. Unless you are the named addressee (or authorised to receive for the addressee) you may not copy or use it, or disclose it to anyone else. If you received it in error please notify us immediately and then destroy it.
Computacenter information is available from http://www.computacenter.com
This footnote also confirms that this email message has been swept for the presence of computer viruses.
***************************************************************************************************************************