Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here. |
| Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
 |
GNU/Linux Basic Guide
This 255-page guide will provide you with the keys to understand the philosophy of free software, teach you how to use and handle it, and give you the tools required to move easily in the world of GNU/Linux. Many users and administrators will be taking their first steps with this GNU/Linux Basic guide and it will show you how to approach and solve the problems you encounter.
Click Here to receive this Complete Guide absolutely free. |
|
 |
10-26-2004, 06:50 PM
|
#1
|
|
Member
Registered: Mar 2004
Location: Boston, MA
Distribution: SuSE Linux Open/Enterprise, Red Hat, Ubuntu
Posts: 146
Rep:
|
public/private key authentication with PuTTY
Since finding out about the automated scripts for SSH logins I decided i wanted to only allow only one user/computer to login remotely. I've successfully run a test configuration with a linux client-computer using the ssh-keygen and all and i was able to access the server with the generated public and private keys.
I'm having trouble doing the same with PuTTY. I dont know how to generate keys with PuTTy. I am using Windows and it obviously does not have the SSH daemon.
Any ideas?
|
|
|
|
10-26-2004, 08:13 PM
|
#2
|
|
Member
Registered: Aug 2003
Location: Edinburgh, Scotland
Distribution: Gentoo
Posts: 246
Rep:
|
With PuTTY use the puttygen.exe program to generate a new public/private key pair. The authorized_keys compatible line will be shown in the window. You will have to copy/paste this into a text file which you will have to append to the authorized_keys file on the server. The private key can be saved in it's .ppk file (which looks similar to an ssh private key but which didn't work properly if memory serves). You then set PuTTY to use the .ppk file as the private key and if the server has the public key appended then you should be able to connect fine. plink.exe is a better program to use if you wish to drive PuTTY from the command line or a batch file as it's command line syntax is richer. If I'm not mistaken then the -i option is used to specify a file to use when authenticating.
|
|
|
|
10-27-2004, 01:41 PM
|
#3
|
|
Member
Registered: Mar 2004
Location: Boston, MA
Distribution: SuSE Linux Open/Enterprise, Red Hat, Ubuntu
Posts: 146
Original Poster
Rep:
|
thanks for the reply nhs, i dont have the puttygen.exe program. I probably have to go download it from wherever i downloaded putty.
|
|
|
|
10-27-2004, 01:48 PM
|
#4
|
|
Member
Registered: Aug 2003
Location: Edinburgh, Scotland
Distribution: Gentoo
Posts: 246
Rep:
|
Google PuTTY turns up the site as the first link. There is a zip file you can download which contains all the programs (putty.exe, pscp.exe, psftp.exe, etc).
|
|
|
|
10-27-2004, 04:26 PM
|
#5
|
|
Member
Registered: Mar 2004
Location: Boston, MA
Distribution: SuSE Linux Open/Enterprise, Red Hat, Ubuntu
Posts: 146
Original Poster
Rep:
|
I was able to do the key generation successfully. I denied logins with the root username. Is there any way i can deny other users?
|
|
|
|
10-27-2004, 06:00 PM
|
#6
|
|
Member
Registered: Aug 2003
Location: Edinburgh, Scotland
Distribution: Gentoo
Posts: 246
Rep:
|
Not in itself however if you restrict yourself to public/private key authentication then it's (to my knowledge) impossible to login to an account without an authorized_keys file. They will just reject any key.
|
|
|
|
| Thread Tools |
Search this Thread |
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT -5. The time now is 04:47 AM.
|
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|