topic Re: ssh implementation-------putty on client pc in Operating System - HP-UX

ssh implementation-------putty on client pc

sheevm — Thu, 14 Apr 2005 14:33:10 GMT

Hi!

I am implementing SSH on HP-UX running 11.0

I am using PUTTY to connect from my PC using SSH.

Will someone out there give some tip how to generate key in putty?

I was told that I need to generate key for each user in putty and transfer over to HP-UX boxes.

I appreciate your help.

Raji

Re: ssh implementation-------putty on client pc

RAC_1 — Thu, 14 Apr 2005 14:43:11 GMT

Get putty keygen. Generate the key and put on hp-ux server. You need to put it in $HOME/.ssh/authorized_keys file.

Anil

Re: ssh implementation-------putty on client pc

Rick Garland — Thu, 14 Apr 2005 14:45:28 GMT

The putty keygen works in similar fashion to the ssh keygen.

You do need the putty keygen executable though.

Re: ssh implementation-------putty on client pc

sheevm — Thu, 14 Apr 2005 14:52:12 GMT

Anil,

Is putty keygen a different tool? If so how can I get it? is it free?

Thanks.

Re: ssh implementation-------putty on client pc

RAC_1 — Thu, 14 Apr 2005 15:00:56 GMT

IT is free. Didn't you get where you got putty. Power of google. Search it.

Re: ssh implementation-------putty on client pc

Rick Garland — Thu, 14 Apr 2005 15:05:33 GMT

Hop on google. Do a search for 'download putty'

The 1st entry will will have the resources you need.

Re: ssh implementation-------putty on client pc

Emil Velez — Fri, 15 Apr 2005 06:50:21 GMT

When you goto the putty download there is a option to download putty and download the zip file with all of the ssh utilities. Download the .zip file and the key generator will be one of the utilities.

good luck

Re: ssh implementation-------putty on client pc

sheevm — Mon, 18 Apr 2005 16:12:42 GMT

Hi Folks,

I was side tracked for few days. I downloaded puttygen. It has two option "Generate Public Key" "Generate Private Key" Which one I should do? Also is there a specific client directory this file must reside?

Thanks.

Re: ssh implementation-------putty on client pc

Florian Heigl (new acc) — Mon, 18 Apr 2005 16:23:36 GMT

You need to generate both a public and a private key. the public key will go to ~user/.ssh/authorized_keys on Your hp9000 system, and the private keys should be stored somewhere safe.
networked-user homedir is *not* safe, best option would be a smartcard or an usb-stick with read-only switch (available and cheap).

Re: ssh implementation-------putty on client pc

sheevm — Tue, 19 Apr 2005 12:55:16 GMT

I am still having issues with this.

Steps I have done so far:

1. Generated public key using puttykeygen
2. FTPd to HP-UX SERVER /home/murthy/.ssh/authorized_keys/rajikey
3. Generated private key using puttykeygen and saved into a filename in my PC

4. In puttyclinet SSH-AUTH I am trying to assign private key file. It does not take it.

I am following PUTTY documentation:
------------------------------

4.20.5 â Private key file for authenticationâ
This box is where you enter the name of your private key file if you are using public key authentication. See chapter 8 for information about public key authentication in SSH.
This key must be in PuTTY's native format (*.PPK). If you have a private key in another format that you want to use with PuTTY, see section 8.2.12.
----------------------------
In this window in PUTTY It asks for a private key . But It only has two buttons "Open" "Cancel" I assume Open is the button saves the file authentication. But it just beeps and does not work.
--------------------------------------------------------------------------------------------------------
The work I have done at the server side is:
I FTP'd the public key I generated from PUTYKEYGEN to /home/murthy/.ssh/authorized_keys/rajikey
----------------------------

SSHD-_CONFIG file in HP server. (I am not sure if I need to do anything here)
# $OpenBSD: sshd_config,v 1.68 2003/12/29 16:39:50 millert Exp $

# This is the sshd server system-wide configuration file. See
# sshd_config(5) for more information.

# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin

# The strategy used for options in the default sshd_config shipped with
# OpenSSH is to specify options with their default value where
# possible, but leave them commented. Uncommented options change a
# default value.

#Port 22
Protocol 2
#ListenAddress 0.0.0.0
#ListenAddress ::

# HostKey for protocol version 1
HostKey /opt/ssh/etc/ssh_host_key
# HostKeys for protocol version 2
HostKey /opt/ssh/etc/ssh_host_rsa_key
HostKey /opt/ssh/etc/ssh_host_dsa_key

# Lifetime and size of ephemeral version 1 server key
#KeyRegenerationInterval 1h
#ServerKeyBits 768

# Logging
#obsoletes QuietMode and FascistLogging
#SyslogFacility AUTH
#LogLevel INFO

# Authentication:

#LoginGraceTime 2m
PermitRootLogin no
#StrictModes yes

#RSAAuthentication yes
#PubkeyAuthentication yes
#AuthorizedKeysFile .ssh/authorized_keys

# For this to work you will also need host keys in /opt/ssh/etc/ssh_known_hosts
#RhostsRSAAuthentication no
# similar for protocol version 2
#HostbasedAuthentication no
# Change to yes if you don't trust ~/.ssh/known_hosts for
# RhostsRSAAuthentication and HostbasedAuthentication
#IgnoreUserKnownHosts no
# Don't read the user's ~/.rhosts and ~/.shosts files
#IgnoreRhosts yes

# To disable tunneled clear text passwords, change to no here!
#PasswordAuthentication yes
#PermitEmptyPasswords no

# Change to no to disable s/key passwords
#ChallengeResponseAuthentication yes

# Kerberos options
KerberosAuthentication yes
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
#KerberosGetAFSToken no

# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes

# Set this to 'yes' to enable PAM authentication (via challenge-response)
# and session processing. Depending on your PAM configuration, this may
# bypass the setting of 'PasswordAuthentication' and 'PermitEmptyPasswords'
UsePAM yes

#AllowTcpForwarding yes
#GatewayPorts no
X11Forwarding yes
#X11DisplayOffset 10
X11UseLocalhost no
#PrintMotd yes
#PrintLastLog yes
#TCPKeepAlive yes
#UseLogin no
#UsePrivilegeSeparation yes
#PermitUserEnvironment no
#Compression yes
#ClientAliveInterval 0
#ClientAliveCountMax 3
#UseDNS yes
#PidFile /var/run/sshd.pid
#MaxStartups 10

# no default banner path
Banner /etc/issue

# override default of no subsystems
Subsystem sftp /opt/ssh/libexec/sftp-server

Appreciate your help.