topic Re: passwordless ssh to filer in Network and Storage Protocols

passwordless ssh to filer

TDUBB1234 — Thu, 05 Jun 2025 06:36:22 GMT

I am trying to ssh without password to my filers but after i generated my ssh keys, I tried to create a folder

\\filer\C$\etc$\sshd\root

it will not allow me to create a root directory

I am trying to copy this authorized_keys file to

\\filer\c$\etc\sshd\root\.ssh

help

Re: passwordless ssh to filer

aborzenkov — Sat, 28 Jan 2012 05:47:01 GMT

It is
filer\C$\etc\sshd\root not
filer\C$\etc$\sshd\root.

Re: passwordless ssh to filer

TDUBB1234 — Sat, 28 Jan 2012 06:17:04 GMT

yes its that directory but I cannot create the root directory

Re: passwordless ssh to filer

aborzenkov — Sat, 28 Jan 2012 11:54:40 GMT

Are you able to create any directory under /etc at all? Do you have CIFS license? What is security style of root volume?

Re: passwordless ssh to filer

RAFAEL_GUEDES — Sat, 28 Jan 2012 15:11:36 GMT

If you do not have neither CIFS nor NFS licenses, you could create this directory using diag account.

Note: take care using this account.

First, enter in advanced mode:

filer> priv set advanced

Now, unlock and set a password to diag account:

filer*> useradmin diaguser unlock

filer*> useradmin diaguser password

Enter in the systemshell, create the directory you need and put the pubkey generated in the authorized_keys file:

filer*> systemshell

login: diag

Password: the same you set in the previous step

filer% mkdir -p /mroot/etc/sshd/root/.ssh

filer% vi /mroot/etc/sshd/root/.ssh/authorized_keys

filer% sudo chown -R root:wheel /mroot/etc/sshd/root

filer% sudo chmod -R 0600 /mroot/etc/sshd/root

Then, exit systemshell, lock diag account and exit advanced mode:

filer% exit

filer*> useradmin diaguser lock

filer*> priv set admin

Re: passwordless ssh to filer

aborzenkov — Sat, 28 Jan 2012 16:32:42 GMT

You should have added that it applies to Data ONTAP 8.x only.

Re: passwordless ssh to filer

RAFAEL_GUEDES — Sat, 28 Jan 2012 17:46:46 GMT

Hi aborzenkov, you are right!

But even Data ONTAP is previous than 8.x , it is possible to accomplish this task only through CLI.

filer> wrfile /etc/authorized_keys

filer> ndmpd status

filer> ndmpd on (if is off)

filer> ndmpcopy /etc/authorized_keys /etc/sshd/root/.ssh

filer> ndmp off (if it was off in the previous step)

filer> priv set diag

filer> rm /etc/authorized_keys

filer> priv set admin

Re: passwordless ssh to filer

TDUBB1234 — Sat, 28 Jan 2012 18:04:44 GMT

ok i created the dir and put in the authorized_keys file under

filer\c$\etc\sshd\root

but still ssh from my management workstation asking for password

Re: passwordless ssh to filer

RAFAEL_GUEDES — Sat, 28 Jan 2012 18:08:27 GMT

The right path is:

filer\c$\etc\sshd\root\.ssh

Also make sure the option bellow is set to 'on':

options ssh.pubkey_auth.enable

Re: passwordless ssh to filer

TDUBB1234 — Sat, 28 Jan 2012 18:19:45 GMT

still not working. strange.

options ssh

ssh.access *

ssh.enable on

ssh.idle.timeout 0

ssh.passwd_auth.enable on

ssh.port 22

ssh.pubkey_auth.enable on

ssh1.enable on

ssh2.enable on

authorized_keys is under

filer\c$\etc\root\.ssh\authorized_keys

authorized keys was generated from my mgmt workstation

Re: passwordless ssh to filer

RAFAEL_GUEDES — Sat, 28 Jan 2012 18:22:36 GMT

Could you show how you generate your keys?

Re: passwordless ssh to filer

RAFAEL_GUEDES — Sat, 28 Jan 2012 18:24:36 GMT

In time: the path you put is not right yet.

It is the right:

filer\c$\etc\sshd\root\.ssh

Note: best practice is to disable ssh1 because it is not secure.

Re: passwordless ssh to filer

TDUBB1234 — Sat, 28 Jan 2012 18:28:46 GMT

ssh-keygen -t rsa -b 1024

ssh-keygen -t dsa -b 1024

cat id_dsa.pub > authorized_keys

cat id_rsa.pub >> authorized_keys

Re: passwordless ssh to filer

TDUBB1234 — Sat, 28 Jan 2012 18:30:34 GMT

this path is not right?

filer\c$\etc\sshd\root\.ssh\authorized_keys

i have no cifs license

Re: passwordless ssh to filer

TDUBB1234 — Sat, 28 Jan 2012 18:32:22 GMT

directory permission is correct?

xxxx% ls -la /root/.ssh

lrwxrwxrwx 1 root wheel 19 Mar 16 2011 /root/.ssh -> /var/home/root/.ssh

xxxxx% cd /var/home/root

xxxxx% ls -la

total 8

drwxr-xr-x 3 root wheel 512 May 3 2007 .

drwxr-xr-x 5 root wheel 512 May 3 2007 ..

drwx

Re: passwordless ssh to filer

RAFAEL_GUEDES — Sat, 28 Jan 2012 18:34:29 GMT

This is the output from filer in systemshell?

Re: passwordless ssh to filer

RAFAEL_GUEDES — Sat, 28 Jan 2012 18:37:26 GMT

Yes, this is the right path.

If you would have CIFS license, you would access through:

\\filer\C$\etc\sshd\root\.ssh\

If you have NFS license, you can access through:

mount filer_IP:/vol/vol0/etc/sshd/root/.ssh /mount_point

Re: passwordless ssh to filer

TDUBB1234 — Sat, 28 Jan 2012 18:44:23 GMT

yes it is

Re: passwordless ssh to filer

TDUBB1234 — Sat, 28 Jan 2012 18:44:59 GMT

i have no nfs or cifs license.

Re: passwordless ssh to filer

RAFAEL_GUEDES — Sat, 28 Jan 2012 18:51:22 GMT

You are lsing /root/.ssh , but in my comment at 8:55 AM I said to put authorized_keys under:

/mroot/etc/sshd/root/.ssh

Please review my comment and make sure you did all the steps.

In time: Data ONTAP accepts only one SSH session each time, so make sure you closed any session before try to open a new session through public key.