Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
SSH and SFTP
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
Double Click
Tux's lil' helper
Tux's lil' helper


Joined: 21 May 2004
Posts: 148

PostPosted: Sun Jul 25, 2004 4:36 pm    Post subject: SSH and SFTP Reply with quote

Hi all,

Just got around installing my home 'server' from a stage 2 with putty. Kind of new to Linux and espcially Gentoo and as such am very concerned not to pick up any bad habits. One of them at the moment is that I need to get files from my gentoo box to my windows xp box as quickly and easily ( both on the same network segment) i started ssh up already cause i use this for my putty sessions. I also looked into SFTP and found it actually worked first time! :wink:
I want to apply this model later on with my production servers, (beats running to the datacenter and copying whatever on/off disks or cd !!), but all this out of the box configuration makes me feel a little bit naked. I looked around on this forum for any decent advice on SSH based communication to make it fairly secure and were to actually start customizing.
On another note, where is the ACTUALL apache2 config file?

Adios
Back to top
View user's profile Send private message
Insanity5902
Veteran
Veteran


Joined: 23 Jan 2004
Posts: 1228
Location: Fort Worth, Texas

PostPosted: Sun Jul 25, 2004 5:59 pm    Post subject: Reply with quote

for ssh, look at /etc/ssh/sshd_config.

Set your protocal to 2, as it is more secure. For added security you can change the port, and set PermitRootLogin to NO. That will give you some added security, but that is what is nice about ssh it is pretty much secure out of the box.

the apache conf for Apache 2 is at /etc/apache2/conf
_________________
Join the adopt an unanswered post initiative today
Back to top
View user's profile Send private message
davidblewett
Apprentice
Apprentice


Joined: 15 Feb 2004
Posts: 274
Location: Indiana

PostPosted: Mon Jul 26, 2004 1:45 am    Post subject: Reply with quote

My favorite articles about SSH were written by Daniel Robbins, Gentoo's founder. Here is a link to the first one:
http://www-106.ibm.com/developerworks/library/l-keyc.html

There are 2 others, they are all definitely worth the read.
_________________
No guilt in life, no fear in death
this is the power of Christ in me
From life’s first cry to final breath
Jesus commands my destiny
-- Newsboys, "In Christ Alone", "Adoration: The Worship Album"
Back to top
View user's profile Send private message
Double Click
Tux's lil' helper
Tux's lil' helper


Joined: 21 May 2004
Posts: 148

PostPosted: Mon Jul 26, 2004 8:20 pm    Post subject: Reply with quote

Thanks a lot guys!

My /etc/ssh/sshd_config file is already set on protocol 2. I read the article, http://www-106.ibm.com/developerworks/library/l-keyc.html
, and had a little problem with copying my public key onto my workstation. I use putty for Windows and as such I copied the public key file over to my Windows PC so i can use it but when i log in it gives me an error that the public key file is not a public key file. So i guess i copied the wrong key file. Anyway ... I should be able to figure this one out quickly and HOPEFULLY not forget to post my results, unless of course this is a totall new newbie issue :oops:
Back to top
View user's profile Send private message
davidblewett
Apprentice
Apprentice


Joined: 15 Feb 2004
Posts: 274
Location: Indiana

PostPosted: Tue Jul 27, 2004 11:22 pm    Post subject: Reply with quote

The key files generated by OpenSSH cannot be directly used by Putty. You have to use Putty's keygen program to convert it the Putty format. There is documentation for that at the Putty site.
_________________
No guilt in life, no fear in death
this is the power of Christ in me
From life’s first cry to final breath
Jesus commands my destiny
-- Newsboys, "In Christ Alone", "Adoration: The Worship Album"
Back to top
View user's profile Send private message
Double Click
Tux's lil' helper
Tux's lil' helper


Joined: 21 May 2004
Posts: 148

PostPosted: Wed Jul 28, 2004 11:29 am    Post subject: Reply with quote

Oh ... I figure so as well cause they talked a lot about PuttyGen ... going to have a look at what they mean on their site later on.
So i guess there is no way to use something else for Windows XP that can use the public keys copied directly from Gentoo?
Back to top
View user's profile Send private message
think4urs11
Bodhisattva
Bodhisattva


Joined: 25 Jun 2003
Posts: 6659
Location: above the cloud

PostPosted: Wed Jul 28, 2004 11:34 am    Post subject: Reply with quote

you could try this one: OpenSSH
_________________
Nothing is secure / Security is always a trade-off with usability / Do not assume anything / Trust no-one, nothing / Paranoia is your friend / Think for yourself
Back to top
View user's profile Send private message
davidblewett
Apprentice
Apprentice


Joined: 15 Feb 2004
Posts: 274
Location: Indiana

PostPosted: Thu Jul 29, 2004 1:17 am    Post subject: Reply with quote

Yes, all you'll need to do is have PuttyGen process the key generated by OpenSSH. I suggest using their other app, Pageant as well. This allows you to only type in your passphrase once, and connect as many times as you want by keeping the key in memory. Obviously, you would only want to use this on a machine you trust. Another tool, WinSCP is a great windows SCP client. It can also use Pageant.
_________________
No guilt in life, no fear in death
this is the power of Christ in me
From life’s first cry to final breath
Jesus commands my destiny
-- Newsboys, "In Christ Alone", "Adoration: The Worship Album"
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum