User Tools

Site Tools


computing:ssh

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
computing:ssh [2018/05/18 07:59] oemb1905computing:ssh [2021/10/15 17:53] (current) oemb1905
Line 1: Line 1:
 ------------------------------------------- -------------------------------------------
-#**ssh**+  * **ssh**  
 +  * **Jonathan Haack** 
 +  * **Haack's Networking** 
 +  * **netcmnd@jonathanhaack.com**  
 ------------------------------------------- -------------------------------------------
 +
 +Generate keys
 +
 +  ssh-keygen
 +  
 +Send your public key to trusted parties by copying the output below.  Code Talkers should email them to [[mailto:netcmnd@jonathanhaack.com|netcmnd]]
 +
 +  cd ~/.ssh/
 +  cat id_rsa.pub
 +  
 +If you emailed me your key, I can add you to the Code Talkers Hacking Club Git Lab.  Now, you should enable your digital ocean vps for ssh as follows
 +
 +  ssh-copy-id username@xxx.xxx.xxx.xxx
 +  
 +That's it - you should now no longer need to enter your password.  If this is not working, check your configuration using the commands below and try again.  You might need to enable public key authentication.
 +
 +  cd /etc/ssh/
 +  sudo nano sshd_config
 +  sudo systemctl restart sshd.service
 +  sudo systemctl restart ssh.service
 +
 +Keep those public and private key pairs protected.  If you did not change anything, they have the permissions below.  But we all make mistakes!
  
   chmod 700 ~/.ssh    chmod 700 ~/.ssh 
Line 8: Line 34:
   chmod 755 ~/   chmod 755 ~/
  
-Using with screen+Using with screen ... more later
  
   ssh -t xx.xx.xx.xx screen -DRO   ssh -t xx.xx.xx.xx screen -DRO
 +  
 +config options for /etc/ssh/sshd_config
 +  
 +  Port 53535
 +  PubkeyAuthentication yes
 +  PasswordAuthentication no
 +  PermitRootLogin prohibit-password
 +  Protocol 2
 +  AllowUsers sally
 +  AllowUsers johnny
 +  PermitEmptyPasswords no
 +  X11Forwarding yes
 +  PrintMotd yes
 +  ChallengeResponseAuthentication no
 +  UsePAM yes
 +  
 +Then, always restart the service
 +  
 +  sudo systemctl restart sshd.service
 +  
 +
 +
 +
 + --- //[[jonathan@haacksnetworking.com|oemb1905]] 2021/10/15 11:53//
  
computing/ssh.1526630367.txt.gz · Last modified: 2018/11/25 01:33 (external edit)