View previous topic :: View next topic |
Author |
Message |
Double Click Tux's lil' helper
![Tux's lil' helper Tux's lil' helper](/images/ranks/rank_rect_1.gif)
Joined: 21 May 2004 Posts: 148
|
Posted: Sun Jul 25, 2004 4:36 pm Post subject: SSH and SFTP |
|
|
Hi all,
Just got around installing my home 'server' from a stage 2 with putty. Kind of new to Linux and espcially Gentoo and as such am very concerned not to pick up any bad habits. One of them at the moment is that I need to get files from my gentoo box to my windows xp box as quickly and easily ( both on the same network segment) i started ssh up already cause i use this for my putty sessions. I also looked into SFTP and found it actually worked first time!
I want to apply this model later on with my production servers, (beats running to the datacenter and copying whatever on/off disks or cd !!), but all this out of the box configuration makes me feel a little bit naked. I looked around on this forum for any decent advice on SSH based communication to make it fairly secure and were to actually start customizing.
On another note, where is the ACTUALL apache2 config file?
Adios |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
Insanity5902 Veteran
![Veteran Veteran](/images/ranks/rank_rect_5_vet.gif)
![](images/avatars/4683424045e25e50d50534.png)
Joined: 23 Jan 2004 Posts: 1228 Location: Fort Worth, Texas
|
Posted: Sun Jul 25, 2004 5:59 pm Post subject: |
|
|
for ssh, look at /etc/ssh/sshd_config.
Set your protocal to 2, as it is more secure. For added security you can change the port, and set PermitRootLogin to NO. That will give you some added security, but that is what is nice about ssh it is pretty much secure out of the box.
the apache conf for Apache 2 is at /etc/apache2/conf _________________ Join the adopt an unanswered post initiative today |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
davidblewett Apprentice
![Apprentice Apprentice](/images/ranks/rank_rect_2.gif)
![](images/avatars/222714518404f80b262763.jpg)
Joined: 15 Feb 2004 Posts: 274 Location: Indiana
|
Posted: Mon Jul 26, 2004 1:45 am Post subject: |
|
|
My favorite articles about SSH were written by Daniel Robbins, Gentoo's founder. Here is a link to the first one:
http://www-106.ibm.com/developerworks/library/l-keyc.html
There are 2 others, they are all definitely worth the read. _________________ No guilt in life, no fear in death
this is the power of Christ in me
From lifes first cry to final breath
Jesus commands my destiny
-- Newsboys, "In Christ Alone", "Adoration: The Worship Album" |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
Double Click Tux's lil' helper
![Tux's lil' helper Tux's lil' helper](/images/ranks/rank_rect_1.gif)
Joined: 21 May 2004 Posts: 148
|
Posted: Mon Jul 26, 2004 8:20 pm Post subject: |
|
|
Thanks a lot guys!
My /etc/ssh/sshd_config file is already set on protocol 2. I read the article, http://www-106.ibm.com/developerworks/library/l-keyc.html
, and had a little problem with copying my public key onto my workstation. I use putty for Windows and as such I copied the public key file over to my Windows PC so i can use it but when i log in it gives me an error that the public key file is not a public key file. So i guess i copied the wrong key file. Anyway ... I should be able to figure this one out quickly and HOPEFULLY not forget to post my results, unless of course this is a totall new newbie issue ![Embarassed :oops:](images/smiles/icon_redface.gif) |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
davidblewett Apprentice
![Apprentice Apprentice](/images/ranks/rank_rect_2.gif)
![](images/avatars/222714518404f80b262763.jpg)
Joined: 15 Feb 2004 Posts: 274 Location: Indiana
|
Posted: Tue Jul 27, 2004 11:22 pm Post subject: |
|
|
The key files generated by OpenSSH cannot be directly used by Putty. You have to use Putty's keygen program to convert it the Putty format. There is documentation for that at the Putty site. _________________ No guilt in life, no fear in death
this is the power of Christ in me
From lifes first cry to final breath
Jesus commands my destiny
-- Newsboys, "In Christ Alone", "Adoration: The Worship Album" |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
Double Click Tux's lil' helper
![Tux's lil' helper Tux's lil' helper](/images/ranks/rank_rect_1.gif)
Joined: 21 May 2004 Posts: 148
|
Posted: Wed Jul 28, 2004 11:29 am Post subject: |
|
|
Oh ... I figure so as well cause they talked a lot about PuttyGen ... going to have a look at what they mean on their site later on.
So i guess there is no way to use something else for Windows XP that can use the public keys copied directly from Gentoo? |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
think4urs11 Bodhisattva
![Bodhisattva Bodhisattva](/images/ranks/rank-bodhisattva.gif)
![](images/avatars/8534934054bad29b51e5fa.jpg)
Joined: 25 Jun 2003 Posts: 6659 Location: above the cloud
|
Posted: Wed Jul 28, 2004 11:34 am Post subject: |
|
|
you could try this one: OpenSSH _________________ Nothing is secure / Security is always a trade-off with usability / Do not assume anything / Trust no-one, nothing / Paranoia is your friend / Think for yourself |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
davidblewett Apprentice
![Apprentice Apprentice](/images/ranks/rank_rect_2.gif)
![](images/avatars/222714518404f80b262763.jpg)
Joined: 15 Feb 2004 Posts: 274 Location: Indiana
|
Posted: Thu Jul 29, 2004 1:17 am Post subject: |
|
|
Yes, all you'll need to do is have PuttyGen process the key generated by OpenSSH. I suggest using their other app, Pageant as well. This allows you to only type in your passphrase once, and connect as many times as you want by keeping the key in memory. Obviously, you would only want to use this on a machine you trust. Another tool, WinSCP is a great windows SCP client. It can also use Pageant. _________________ No guilt in life, no fear in death
this is the power of Christ in me
From lifes first cry to final breath
Jesus commands my destiny
-- Newsboys, "In Christ Alone", "Adoration: The Worship Album" |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
|