[Trinux-talk] ssh and remote control - a review

[Damiano G. P. <pr...@un...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Hi, listers
after several days of sifting through webpages and mailing lists, I event=
ually=20
succeeded in having a working ssh connection.

Here's the receipt:
Hardwqre: I'm using an old P75 as a trinux box, and since the machine is =
quite=20
old I have to boot from floppy.

Software:
I used a network boot image (090602-snap.net) from trinux site on sourcef=
orge.

Configuration:
A) on the Trinux box:

1) be sure to use openssh first and opensshd second

/tux/config/pkglist:
openssh.tgz
opensshd.tgz
baselib.tgz
bash.tgz
term.tgz
tcpdump.tgz
vim.tgz
mc.tgz

2) generate keys
# ssh-keygen
- -do not enter any passphrase
- -keep the default names for public and private keyfiles

#ssh-keygen -t dsa
- -do not enter any passphrase
- -keep the default names for public and private keyfiles

3) copy the public keys
cp /.ssh/identity.pub /.ssh/authorized_keys
cp /.ssh/id_dsa.pub /.ssh/authorized_keys2

4) set up permissions in /.ssh
chmod -R 700 ./ssh

4) copy the _private_ keys elsewhere so you can use them to connect to th=
e=20
Trinux box.
I ftp'ed them to my laptop from the Trinux box, if you're a bit more para=
noid,=20
copy them to a floppy. The files you need are:
/.ssh/identity
/.ssh/id_dsa
(remember that the *.pub are the _public_ keys and you instead need the=20
private ones client-side)

B) client-side operations (Mandrake 8.2, i.e. any UNIX with openssh)
1) copied the two files on my laptop, in ~/.ssh, calling them according t=
o=20
this:
mv  ~/identity ~/.ssh/identity.trinuxbox
mv ~/id_dsa ~/.ssh/id_dsa.trinuxbox

2)connect
using SSH 1:
ssh -1 -i .ssh/identity.trinux -l root <IP address of the trinuxbox>

using SSH 2:
ssh -i .ssh/id_rsa.trinux -l root <IP address of the trinuxbox>

I also tried it with TeraTerm Pro, using TTSSH.EXE:
- -Connect using SSH
- -Add the machine and its key to the known hosts list
- -user name is root
- -leave blank the passphrase
- -use RSA key to login, load "identity.trinux" (i.e. the SSH 1 private k=
ey)

Hope this helps!





- --=20
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D
Damiano G. Preatoni, PhD

Dept. of Structural and Functional Biology
Faculty of Sciences - University of Insubria
Via J. H. Dunant, 3 - 21100 Varese - Italy
ph. +39 0332 421 538; fax +39 0332 421554
http://biocenosi.dipbsf.uninsubria.it/
ICQ   #78690321
Odigo #2645129
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D
"Advice is a dangerous gift.
 Even from the wise to the wise.
 For all courses may run ill."
                   J.R.R. Tolkien,
                   The Lord of the Rings
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iQEVAwUBPb16sqtVCCo5e/wbAQOW5Qf7BgNtbDWMQUYwKwwHNrbOo/1+XSPMygxt
SLoGkWnEZNUV+9/f6Ilt2r8vRWYu7weq9IwEHSjyvANbvaEbCY2rhO0szw5totJh
9NUOXEcdyh4y/DQtiGjCxetrV88MYpfPwD9fvuxqHCR+8cKMOfQVrtmxMuAZ466j
sHw2pnGFNTav0stppsJWsdh/N88pBcB+MyrkKxmJSfIggu+iXYZkFEgAYn0WNGTO
P0KO+b7GzhE6v62SbInPSY57SeiUOnKkKBeXSSRFCOf0Z9aMWEqHKMhWzD0buctl
aqmT1IDSqbKmo8GVWAcy3240XoywNn1L0CUk/vC3H/xIFSZ9VSfxcQ=3D=3D
=3DZ4lK
-----END PGP SIGNATURE-----