SSH: Difference between revisions
Jump to navigation
Jump to search
Anthoanthop (talk | contribs) No edit summary |
Anthoanthop (talk | contribs) No edit summary |
||
Line 40: | Line 40: | ||
= Enter SSH Passphrase only once = | = Enter SSH Passphrase only once = | ||
If you want to prevent to be asked for your passphrase everytime you try a SSH connection with this message: | If you want to prevent to be asked for your passphrase everytime you try a SSH connection with this message: | ||
Enter passphrase for key '/home/username/.ssh/id_rsa' | Enter passphrase for key '/home/username/.ssh/id_rsa' | ||
< | </nowiki>Add in your .ssh/config one line at the beginning: | ||
Add in your .ssh/config one line at the beginning: | AddKeysToAgent yes</nowiki> | ||
AddKeysToAgent yes | |||
</ |
Revision as of 16:01, 1 December 2016
Display key fingerprints informations in /var/log/auth.log
If you have multiple users connecting to a single SSH account (ie: root) and you want to identify clearly who's connecting:
Ensure this value in /etc/ssh/sshd_config:
LogLevel VERBOSE
/etc/init.d/ssh restart
Everytime a new SSH connexion is completed you could list the fingerprint used: tail -f /var/log/auth.log
To identify a fingerprint's owner by listing all entries in /root/.ssh/authorized_keys
while read l; do
[[ -n $l && ${l###} = $l ]] && ssh-keygen -l -f /dev/stdin <<<$l;
done < /root/.ssh/authorized_keys
To disable SSH host key checking
for i in 172.16.1.{1..12} 172.17.1.{1..10} 172.18.1.{1..3}; do scp -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no /etc/scribe/scribe.conf root@$i:/etc/scribe/scribe.conf; done
Improve copy performance by changing Cipher
scp -o Cipher=arcfour local-file user@remote.example.com:/path/
Convert OpenSSH keys to .ppk (Putty) on Linux with puttygen
(Adapt rsa / dsa)
apt-get install putty-tools
cd ~/.ssh/
puttygen id_dsa -o id_dsa.ppk
Enter SSH Passphrase only once
If you want to prevent to be asked for your passphrase everytime you try a SSH connection with this message:
Enter passphrase for key '/home/username/.ssh/id_rsa'
</nowiki>Add in your .ssh/config one line at the beginning:
AddKeysToAgent yes</nowiki>