TomatoUSB

I would like to set up public key authentication with a user other than root. I have created a public/private key pair, which works just fine with root. However after I copied .ssh/authorized_keys to another user's home folder and tried to login with the same private key, login fails. Any pointers on what might be wrong?

Some things I have tried so far
- Set permissions of .ssh/authorized_keys to 0600 and chown to the target user
- Mounted home directory both on /tmp/home/user and /opt/home/user. In the former case flushed authorized_keys to nvram
- Rebooted the router inbetween

Cheers,
Roman

http://www.linksysinfo.org/index.php?threads/google-two-factor-authentication-on-tomato.68831/

This thread will be of some help. It talks about setting up google two factor authentication using openssh. You can however glean the relevant parts. Specifically, the startup script that appears at the end of post #9. The two commands that start with 'echo' specifically you need to modify for your needs. As-is, they setup a new user called 'user' with password 'password' and with home directory in /opt.

Post back if you need more help. I sometimes miss things on this forum, but the linksysinfo.org forum is more active, and has better support.

Actually, the second 'echo' command is formatted for openssh. Take a look at /etc/passwd for the format is needs to be for tomato. Specifically, all the numbers after the ':' after the long password string.

Thanks for your help. Correct me if I am wrong, but your script sets up a new user with a predefined password.
However, I already have a non-root user that I can use with a password. What I am trying to achieve, is to set up a key-based authentication for this user.
Also this script seems to use OpenSSH, when Tomato uses Dropbear. Are there any implications in replacing Dropbear with OpenSSH?

Thanks again :)

Ok, managed to solve the issue. Turned out that checking syslog (/tmp/var/log/messages) provided clues for all my problems. First invalid shell and then invalid permissions for .ssh. :)

Thanks again for your help.