Ssh a autentizace pomoci RSA

[Pavel Kankovsky]

On Thu, 7 Jun 2001, Bob wrote:

> Problem cislo 1> ac mam v souboru /etc/ssh/ssh_config cestu ke klici
> (/root/.ssh/test) hlasi, ze ho nenajde - musim za parametrem -i napsat
> celou cestu

Klic patrici konkretnimu uzivateli urcite nepatri do globalniho
konfiguraku!!! Kdyz uz, tak napsat IdentityFile do /root/.ssh/config, ale
mozna je vubec nejlepsi ho proste prejmenovat na /root/.ssh/identity.

> Problem cislo 2> spojeni probehne v poradku az po: Waiting for server
> public key. a dal to pise uz do zblbnuti nasledujici :
[...]
> The authenticity of host 'xxx.xxx.xxx.xxx' can't be established.
> RSA key fingerprint is 26:47:14:30:5d:c5:b2:6a:92:ca:d5:04:5e:c5:bf:30.
> Are you sure you want to continue connecting (yes/no)?

To znamena, ze klient neni schopen overit, ze se pripojuje opravdu
k tomu serveru, ke kteremu jste se chtel pripojit, protoze nema jeho
verejny "host key" ulozeny v $HOME/.ssh/known_hosts resp.
/etc/ssh/ssh_known_hosts. Spravny postup je takovy, 1. prenesete bezpecnou
cestou (napr. po diskete nebo na papiru) /etc/ssh/ssh_host_key.pub ze
serveru na klienta a ulozite ho do jmenovanych souboru, 2. na serveru
spustite ssh-keygen -l -f /etc/ssh/ssh_host_key.pub, vysledek porovnate
s tim, co vypisuje klient (RSA key fingerprint is...) a zadate "yes",
pokud to sedi.

--Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."