I setup SFTP between *nix servers as follows:
Generate the Public key on the sending server by running the below command:
[user1@server1] $ /usr/local/bin/ssh-keygen -t rsa -b 1024
Then copy "id_dsa.pub" file into the
/home/remote_user1/.ssh/authorized_keysfile on the remote machine server2.
Connect to server2:
$ sftp remote_user1@server2
I am then prompted to enter the password once to complete the handshake and then for all following SFTP connections it directly connects..
But recently another team was able to directly connect to our server without the initial handshake, generally I need to provide the remote_user1's password for handshaking..
So what configuration changes (if any) may have allowed for the handshake to be done without the password..? Any links that could help me better understand the SFTP handshaking process would be very helpful too, as I couldn't find much on this subject.