topic Re: ssh configuration in Operating System - Linux

ssh configuration

R.O. — Mon, 15 Sep 2003 13:51:17 GMT

I posted this messages in HPUX administration although this question is about two Red Hat linux:

Hi all,

I have a server and a workstation wich connect with the server using ssh. I want to use scp to copy files from the server to the workstation even if I have to use rhost. I don??t know how to configure the sshd_config of the workstation to allow scp from the server.
Any help will be useful,

Thanks and regards,

R.O.

Re: ssh configuration

Steven E. Protter — Mon, 15 Sep 2003 14:38:27 GMT

As noted in your HP-UX thread(which is where I'd prefer points handed if any), the way to go is exchanging public keys.

Attaching the cookbook, for your convenience.

SEP

Re: ssh configuration

Alexander Chuzhoy — Mon, 15 Sep 2003 14:39:59 GMT

I hope I understood right-By default you don't have to configure this.

Simply issue this command from the server:
scp filename targetIP:/path

then you'll be prompted for password- just give one.If it's root's directory-then it's suppose to be root's password, and if it's some user's then the password respectively should be the user's.
regards.

Re: ssh configuration

Steven E. Protter — Mon, 15 Sep 2003 14:51:44 GMT

Yes Alexander, you need not configure public keys. It is however secure, so long as permissions on the two .ssh folders is tight.

It provides a nice, secure way to copy files between systems via an automated metodology, as in a script. Taking humans out of the equation cuts down on mistakes.

SEP

Re: ssh configuration

R.O. — Mon, 15 Sep 2003 15:04:16 GMT

Hi,

Thanks for your responses. The problem I have is that I don??t want to be prompted for a passwd. I want to do an script to automatically spc??s files from a system to other .

Regards

Re: ssh configuration

R.O. — Mon, 15 Sep 2003 15:04:38 GMT

Hi,

Thanks for your responses. The problem I have is that I don??t want to be prompted for a passwd. I want to do an script to automatically spc??s files from a system to other .

Regards

Re: ssh configuration

Dave Falloon — Mon, 15 Sep 2003 17:32:21 GMT

You still need to enter a passphrase if you use public keys. The difference is that you can use ssh agent to hold your keys so that you only need to enter the passphrase once per boot as long as ssh agent is the parent process to your login.

ie. in your .xsession file you would have something like:

ssh-agent wmaker

so that the agent will handle ssh keys for all ssh connections started under your wmaker session.

It has been my experience that passwordless and single passphrase sshing is still a pain in the butt, because if the server/workstation is rebooted you have to login and restart the agent and load your keys into it again.

But its better than opening the huge rtools hole.

I hope that helps,

Dave

Re: ssh configuration

Steven E. Protter — Mon, 15 Sep 2003 23:55:42 GMT

If you follow the document I attached and hit when prompted for a passphrase during key generation, you will not be prompted for a passphrase when you use scp.

Its a good document, written by Chris Vail and its worked for me dozens of times. It works for Linux, HP-UX, Solaris, any platform that can run openssh.

SEP

Re: ssh configuration

Huc_1 — Tue, 16 Sep 2003 08:28:00 GMT

I use sftp and dont get prompted for the paraphrase, and wish i had know about the document SEP has attached before i attempt to set it up the first time, would have saved me lot's of trouble , use/follow this document you should be fine.

J-P

Re: ssh configuration

R.O. — Tue, 16 Sep 2003 10:15:36 GMT

Hi Steven,

Your document is what I want. I have followed these steps and works fine.

Thanks to all for your help,

Regards

R.O.

Re: ssh configuration

Jerome Henry — Tue, 16 Sep 2003 11:46:37 GMT

Hi,

So maybe could you assign Steven a rabbit, as he solved your problem... it helps people browsing the forum to know that the question asked in the thread title has an answer in the posts.
Just assign 10 points to one of his replies...

Tks

J