topic Re: Open SSH in Operating System - Linux

Open SSH

hari prasad_4 — Tue, 31 Oct 2006 00:14:03 GMT

Hi,

I have installed open ssh package in our server and i have started open-ssh's sshd service and i am able to login through ssh.

But i want to know how to enable sftp, what port it is running on, and how to do sftp from windows.

Thanks in Advance,
Hari

Re: Open SSH

Senthil Prabu.S_1 — Tue, 31 Oct 2006 01:10:22 GMT

Hi,
The complete details about using sftp is given below in this link;

http://www.cae.wisc.edu/site/public/?title=linux-sftp

Also, it talks about sending files to windows machine aswell as.

HTH,
Prabu.S

Re: Open SSH

Vipulinux — Tue, 31 Oct 2006 05:58:28 GMT

Hi
Once u install ssh you get sftp as well no need to install anything else. Also sftp uses ssh port so no need to make any changes to port as well.

Cheers

Re: Open SSH

hari prasad_4 — Tue, 31 Oct 2006 07:11:33 GMT

thanks for replying

can anyone tell me how to generate RSA and DSA key generation proceedure and where to keep keep that file.

thanks in advance,

hari

Re: Open SSH

Alexander Chuzhoy — Tue, 31 Oct 2006 14:36:09 GMT

In order to generate keys:
ssh-keygen -t dsa or
ssh-keygen -t rsa

Hope I remembered the command keys right.

Anyway the keys are saved under ~/.ssh directory.

Re: Open SSH

Matti_Kurkela — Wed, 01 Nov 2006 09:31:10 GMT

If you're connecting from Windows to a Linux server running sshd, you'd better create the keys on the Windows client, using whatever method it offers for key generation.

A SSH key consists of two parts, known as "private key" and "public key". When you create a SSH key, both parts are created at the same time.

When you want to use SSH key authentication, you have to copy the public key to the server you're connecting to. The key must be placed in the .ssh subdirectory of the user account you wish to use on the server, into file named "authorized_keys".

The permissions to the home directory of the user account, the .ssh subdirectory and the authorized_keys file *must* be such that nobody other than the user can change the .ssh directory and/or the authorized_keys file. If the permissions are not strict enough, sshd won't trust the key.
No error message will be displayed to the user, as the user's identity is still unconfirmed at that point and sshd is designed to minimize the number of clues given to a possible intruder.

An added complication is that the SSH public keys can exist in two different formats: the OpenSSH format is different from the format used by ssh.com commercial SSH product. Luckily, the formats are easy to convert in both directions.

The easiest way to identify the key format is to check the number of lines: the commercial SSH key is nicely wrapped into multiple lines, each less than 80 characters long. There are also very clear delimiters:
---- BEGIN SSH2 PUBLIC KEY ----

---- END SSH2 PUBLIC KEY ----

The OpenSSH style public key is one *long* line of text.

If your Windows-based SSH client produces the public key in "commercial SSH" format, you can convert it to OpenSSH format on the server using the import option of the ssh-keygen tool:

ssh-keygen -i -f commercial-SSH-key.pub > OpenSSH-key.pub

Re: Open SSH

John Collier — Wed, 01 Nov 2006 10:27:33 GMT

Wow Matti,

All a person ever wanted to know about SSH vs. OpenSSH + a bowl of soup AND a sandwich!

I would give that explanation 20 points if it were in my power to do so.

This one is going into my list of bookmarks.

Re: Open SSH

hari prasad_4 — Tue, 07 Nov 2006 06:46:44 GMT

Hi All,

Thanks Matti for replying.

I have done everything whatever you have told, but when i connect from putty [using rsa/dsa key], i am getting the below error.

Server refused our key

I am running AIX 5.2 os.

Thanks in advance,
Hari

Re: Open SSH

Matti_Kurkela — Tue, 07 Nov 2006 10:05:36 GMT

Check the logs at the server side, if there is any more information, it will be in there. The client will not know why the server refused the key: the server will not tell it to the client, but may tell the reason in a syslog message.

(I don't remember how syslog is usually configured on AIX, it's been too long since I had a chance to do anything on an AIX server).

Re: Open SSH

hari prasad_4 — Wed, 08 Nov 2006 03:57:16 GMT

hi,

i tried ssh is working from windows and also unix system,
but still i am not able connect sftp.

regards
hari

Re: Open SSH

Silju — Fri, 10 Nov 2006 01:46:29 GMT

Hi,

To access a sftp server the windows CLI client is PSFTP which is the part of putty tools. In Unix if open ssh is installed sftp client is the part of it. The syntx is give below

sftp hostname/IP

most of the ftp commands will work on sft too.

Regards
Silju

Re: Open SSH

hari prasad_4 — Fri, 10 Nov 2006 01:59:08 GMT

Hi,

If i connect through sftp i am getting error as connection refused by server.
I guess i have problem in starting sftp service.
regards
hari

Re: Open SSH

Al Licause — Fri, 10 Nov 2006 07:20:09 GMT

See if you can sftp localhost on the AIX system. If you can't try sftp -v user@host.

This will yield some debug information that might help you determine just where the connection attempt or login is failing.

If you're using putty, then enable logging.

If it works from localhost then you know the server is working as well as it's own client so look to the PC for some configuration error.

Re: Open SSH

hari prasad_4 — Sun, 12 Nov 2006 22:04:43 GMT

Hi,

when i executed the command i am getting this kind of error.

# sftp -v root@localhost
exec(): 0509-036 Cannot load program sftp because of the following errors:
0509-150 Dependent module /usr/local/lib/libcrypto.a(libcrypto.so.0) could not be loaded.
0509-152 Member libcrypto.so.0 is not found in archive
#

thanks
hari