0

What is the difference between RhostsAuthentication and RSAAuthintication?

Can anyone give a small example on both of them?

If we want to use ssh without password? Which method is more prefer and advanced?

Improve this question

1 Answer 1

Reset to default
0

Rhosts (rsh) is insecure and easy to spoof (just because of the authentication method), I haven't seen many cases when it makes sense to use it. It pairs a hostname and username. So if it was Kit Ho on alphaPC the .rhosts would read something like:

alphaPC Kit Ho

RSA is a public/private key pair to authenticate, so the server must have the public key in its authorized_keys{,2} file and the client must use the private key locally. Depending on the strength used, cracking would be very difficult.

Rather than me retyping an old answer of how to setup the RSA method, see my old answer here.

Hope that is somewhat helpful.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .