diff options
| author | ivan <ivan> | 2002-06-30 01:18:37 +0000 |
|---|---|---|
| committer | ivan <ivan> | 2002-06-30 01:18:37 +0000 |
| commit | 078d8e27e079bb9568d632a33ef5a369d49c9c1d (patch) | |
| tree | df7fa2fddbca0d62b461c6e3392567b54bf3678f /httemplate/docs | |
| parent | 87efb86d904887f9ee48dcf77fb1470d4c23a87f (diff) | |
adding
Diffstat (limited to 'httemplate/docs')
| -rwxr-xr-x | httemplate/docs/ssh.html | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/httemplate/docs/ssh.html b/httemplate/docs/ssh.html new file mode 100755 index 000000000..5503a242e --- /dev/null +++ b/httemplate/docs/ssh.html @@ -0,0 +1,15 @@ +<head> + <title>Unattended SSH</title> +</head> +<body> + <h1>Unattended SSH</h1> + <br><a name=ssh>Unattended remote login</a> - Freeside can login to remote machines unattended using SSH. This can pose a security risk if not configured correctly, and will allow an intruder who breaks into your freeside machine full access to your remote machines. <b>Do not use this feature unless you understand what you are doing!</b> + <ul> + <li>As the freeside user (on your freeside machine), generate an authentication key using <a href="http://www.tac.eu.org/cgi-bin/man-cgi?ssh-keygen+1">ssh-keygen</a>. Since this is for unattended operation, use a blank passphrase. + <li>Append the newly-created <code>identity.pub</code> file to <code>~root/.ssh/authorized_keys</code> on the remote machine(s). + <li>Some new SSH v2 implementation accept v2 style keys only. Use the <code>-t</code> option to <a href="http://www.tac.eu.org/cgi-bin/man-cgi?ssh-keygen+1">ssh-keygen</a>, and append the created <code>id_dsa.pub</code> or <code>id_rsa.pub</code> to <code>~root/.ssh/authorized_keys2</code> on the remote machine(s). + <li>You may need to set <code>PermitRootLogin without-password</code> (meaning with keys only) in your <code>sshd_config</code> file on the remote machine(s). + </ul> + +</body> + |