[es] - ssh auth

misk0
.: Lugano :. _.: CH :.

SuperModerator
Član broj: 634
Poruke: 2824
*.dialup.blic.net

ICQ: 46802502

+49 Profil

ssh auth

^{26.04.2002. u 23:41 - pre 272 meseci}

Postji (treci po redu, tako kaze man) nacin autentifikacije
preko public / private keyeva
Znaci sa ssh-keygen definisem keyeve , lupim enter za blank
passwd, zatim identiti.pub prekopiram na masinu na koju
zelim da se logujem u .ssh/authorized_keys
I onda bi trebalo kad se logujem sa ove masine na drugu
da prodjem bez passa ..
ali nece.

??grjiesim negdje ?

:: Nemoj se svadjati sa budalom, ljudi cesto nece primjetiti razliku ::

Odgovor na temu

B o j a n
eCTRL
EU

Član broj: 1178
Poruke: 2925
*.verat.net

Jabber: bc@default.co.yu
Sajt: default.co.yu/~bc

+1 Profil

Re: ssh auth

^{27.04.2002. u 06:14 - pre 272 meseci}

Mora da oce ... sta kaze log ???

"It's okay, I'm just admiring to the shape of your skull!" -- Dr. Gonzo

Odgovor na temu

papak

Član broj: 2139
Poruke: 61
*.sbo.ma.webcache.rcn.net

Profil

Re: ssh auth

^{05.05.2002. u 03:35 - pre 272 meseci}

Citat:

misk0:
Postji (treci po redu, tako kaze man) nacin autentifikacije
preko public / private keyeva
Znaci sa ssh-keygen definisem keyeve , lupim enter za blank
passwd, zatim identiti.pub prekopiram na masinu na koju
zelim da se logujem u .ssh/authorized_keys
I onda bi trebalo kad se logujem sa ove masine na drugu
da prodjem bez passa ..
ali nece.

??grjiesim negdje ?

Kada kopiras novi key na drugi stroj, provjeri da ti je cijeli key u jednoj liniji (bez \n ili CR. New Line je dozvoljen samo na kraju keya)

--br

papak

Odgovor na temu

misk0
.: Lugano :. _.: CH :.

SuperModerator
Član broj: 634
Poruke: 2824
*.dialup.blic.net

ICQ: 46802502

+49 Profil

Re: ssh auth

^{09.05.2002. u 00:27 - pre 272 meseci}

ftpovao sam citav fajl i reimenovao ga
naravno BIN I transfer

:: Nemoj se svadjati sa budalom, ljudi cesto nece primjetiti razliku ::

Odgovor na temu

popeye
Branko Ivanović
Beograd

Član broj: 3846
Poruke: 960
*.rcub.bg.ac.yu

Jabber: popeye@elitesecurity.org
ICQ: 18038966
Sajt: popeye.linuxo.org

Profil

Re: ssh auth

^{14.05.2002. u 18:57 - pre 272 meseci}

Proveri konfiguraciju za sshd.

Odgovor na temu

misk0
.: Lugano :. _.: CH :.

SuperModerator
Član broj: 634
Poruke: 2824
*.dialup.blic.net

ICQ: 46802502

+49 Profil

Re: ssh auth

^{15.05.2002. u 23:47 - pre 271 meseci}

Code:

ns2 src/openssl-0.9.6c> ssh -v ns1
OpenSSH_3.0p1, SSH protocols 1.5/2.0, OpenSSL 0x0090602f
debug1: Reading configuration data /usr/local/etc/ssh_config
debug1: Seeding random number generator
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: restore_uid
debug1: ssh_connect: getuid 502 geteuid 0 anon 1
debug1: Connecting to ns1 [212.39.100.137] port 22.
debug1: temporarily_use_uid: 502/100 (e=0)
debug1: restore_uid
debug1: temporarily_use_uid: 502/100 (e=0)
debug1: restore_uid
debug1: Connection established.
debug1: read PEM private key done: type DSA
debug1: read PEM private key done: type RSA
debug1: identity file /home/misko/.ssh/identity type 0
debug1: identity file /home/misko/.ssh/id_rsa type -1
debug1: identity file /home/misko/.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_3.1p1
debug1: match: OpenSSH_3.1p1 pat ^OpenSSH
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.0p1
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: dh_gen_key: priv key bits set: 129/256
debug1: bits set: 1606/3191
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'ns1' is known and matches the RSA host key.
debug1: Found key in /home/misko/.ssh/known_hosts:6
debug1: bits set: 1548/3191
debug1: ssh_rsa_verify: signature correct
debug1: kex_derive_keys
debug1: newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: waiting for SSH2_MSG_NEWKEYS
debug1: newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: done: ssh_kex2.
debug1: send SSH2_MSG_SERVICE_REQUEST
debug1: service_accept: ssh-userauth
debug1: got SSH2_MSG_SERVICE_ACCEPT
debug1: authentications that can continue: publickey,password,keyboard-interactive
debug1: next auth method to try is publickey
debug1: try privkey: /home/misko/.ssh/id_rsa
debug1: try privkey: /home/misko/.ssh/id_dsa
debug1: next auth method to try is keyboard-interactive
debug1: authentications that can continue: publickey,password,keyboard-interactive
debug1: next auth method to try is password
misko@ns1's password:

eto to kaze log

:: Nemoj se svadjati sa budalom, ljudi cesto nece primjetiti razliku ::

Odgovor na temu

BORG
Aleksandar (Sasa) U.
*NIX System/Network Administrator
BL-RS

Član broj: 200
Poruke: 916
*.dialup.blic.net

ICQ: 46124351
Sajt: bitches.kicks-ass.net

Profil

Re: ssh auth

^{15.05.2002. u 23:58 - pre 271 meseci}

Evo sta trebas uraditi:

ssh-kegent -t dsa
[enter onda dok ne dodjes do command prompta]
ssh -C -l root server -v
server] mkdir .ssh
server] chmod 700 .ssh
serevr] exit
scp ~user/.ssh/id.dsa.pub user@server:.ssh/authorized_keys2

sad bi trebalo da radi.
Nemoj da zaboravis chmod 700 na .ssh dir !

With a PC, I always felt limited
by the software available.
On Unix, I am limited only by my knowledge.

--Peter J. Schoenster

Odgovor na temu