Package talk:OpenSSH

From Funtoo
Revision as of 22:35, December 27, 2014 by Threesixes (talk | contribs) (Threesixes moved page Talk:SSH to Package talk:OpenSSH: because heretics)
Jump to navigation Jump to search
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

keys

Passwordless Authentication

Client

on your client run

root # ssh-keygen -t rsa

then hit enter like 5 times to generate your key move the client ~/.ssh/id_rsa.pub to the server user your logging in as ~/.ssh/authorized_keys

Server

useradd a user

then place clients id_rsa.pub file into the new users ~/.ssh/authorized_keys

Single Machine Testing

root # ssh-keygen -t rsa

enter 5 times

root # mv ~/.ssh/id_rsa.pub ~/.ssh/authorized_keys
root # ssh localhost


Intrusion Prevention

ssh is a commonly attacked service. sshguard & fail2ban monitor logs and black list remote users who have repeatedly failed to login.