Package talk:OpenSSH

From Funtoo
Revision as of 22:35, December 27, 2014 by Threesixes (talk | contribs) (Threesixes moved page Talk:SSH to Package talk:OpenSSH: because heretics)
Jump to navigation Jump to search

keys

Passwordless Authentication

Client

on your client run

root # ssh-keygen -t rsa

then hit enter like 5 times to generate your key move the client ~/.ssh/id_rsa.pub to the server user your logging in as ~/.ssh/authorized_keys

Server

useradd a user

then place clients id_rsa.pub file into the new users ~/.ssh/authorized_keys

Single Machine Testing

root # ssh-keygen -t rsa

enter 5 times

root # mv ~/.ssh/id_rsa.pub ~/.ssh/authorized_keys
root # ssh localhost


Intrusion Prevention

ssh is a commonly attacked service. sshguard & fail2ban monitor logs and black list remote users who have repeatedly failed to login.