UGN Security Forums
My ProfileMember DirectoryLogin
Search our ForumsView our FAQView our Site Rules
View our CalendarView our Active TopicsGo to our Main Page

UGN Security Store
 

Network Sites UGN Security, The GoNix Initiative, Elite Web Gamers, Back of the Web, EveryDay Helper, VNC Web Design & Development
August
Su M Tu W Th F Sa
1 2
3 4 5 6 7 8 9
10 11 12 13 14 15 16
17 18 19 20 21 22 23
24 25 26 27 28 29 30
31
Sponsored Links
Latest Postings
Amazon Gift Card Generator/KeyGen?te
by Gecko666
08/22/14 09:21 AM
Latest Reviews
Topic Options
Rate This Topic
#4487 - 10/22/04 11:17 PM SSH Keys
Ghost Offline


Registered: 06/16/03
Posts: 807
Loc: Wisconsin
I figured i'd post on this just incase not everyone knew about this already. All my knowledge on this topic can be credited to Gizmo as he first introduced me to it.

SSH Keys allow you to login to a remote machine via SSH by authenticating with a key instead of a username and password combination. You can still setup password authentication on your end if you wish, but it is not required. In my opinion this is WAY more secure, how are you going to guess someone's 3072 bit RSA key to login with? Yeah, exactly. Anyways, here is how you set it up:

Go to http://www.ssh.com and download the offical SSH client. Extract and compile, or install it, whichever your platform requires. After you have done that, start it up. Now, having never done this with *nix, the steps might be a little different, but here is how you go about generating a key. Edit>Preferences> +Global Settings>+User Authentication>+Keys>Generate New. Select the size and type of key, Might i suggest RSA 3072. After you've done that, you need to create an authorized keys file, and upload it to the server you wish to login to. After you've generated your key, open the key file (Edit>Preferences> +Global Settings>+User Authentication>+Keys>View). Get the key, the actual key starts with an 'A' and ends in a '='. If you're using windows, open this with wordpad, not notepad (you'll need to find the file, should be in C:\Documents and Settings\[Your User Name]\Application Data\SSH\UserKeys\). After you have the key, open your text editor, and paste the key to the file. Make sure your text editor is not wrapping the text. After this, add "ssh-rsa" (or "ssh-dsa" if you used DSA, which you shouldn't do) to the front of the key. It should look like...
Code:
ssh-rsa AAAAA=
of course, "AAAAA=" should acctually be your key. After you have done that, you need to upload your authorized keys file. Save the file as "authorized_keys2". Login to your account on the machine you want to connect to, create ".ssh" in the home directory, change to this directory, and upload the authorized_keys2 file. After you have done that, chmod .ssh and authorized_keys2 700. After that, go back to your SSH window, Click "Quick Connect" enter your information, and select public key to the authentication method. Click Connect, and wait for the password prompt (if you set a password for your key). Now, i'm not going to go into many other details about the SSH client, but there is a bunch of other fun stuff you can do. If you have any trouble doing the above, please feel free to post a question.
_________________________
[[ GamerSupport ] [ UGN Security ] [ Evil Hosting ] [ Comic Relief ]
~[Ghost]

Top
Sponsored Links
      
#4488 - 10/22/04 11:20 PM Re: SSH Keys
Gremelin Offline

Community Owner
*****

Registered: 02/28/02
Posts: 7192
Loc: Portland, OR; USA
Don't forget, you can have a 1 word comment after the key, so it would look like:
Code:
ssh-rsa [key] [comment]
Make sure it's all on one line also... If you do it wrong you'll lock SSH for your account and you won't be able to login at all ...
_________________________
Donate to UGN Security here.
UGN Security, Back of the Web, Elite Web Gamers & VNC Web Design Owner

Top
#4489 - 10/23/04 12:48 AM Re: SSH Keys
Spyrios Offline
UGN Member

Registered: 03/15/04
Posts: 419
Loc: VA
The new Navy Marine Corps Intranet system uses a system to log on that sounds similar but it uses what they call PKI certificates is this what it basically is? They place the certificates on a CAC card (an id card with an embeded microchip which contains all my medical, dental, and emeergency info on it, along with the certificates) I stick the card into a card reader on the keyboard and then i am free to view a lot of websites and info i would not be allowed to if i didn't have the certificate.
_________________________
D, world destruction
Over and overture
N, do I need
Apostrophe T, need this torture?-They Might Be Giants

Top
#4490 - 10/23/04 11:53 AM Re: SSH Keys
§intå× Offline


*****

Registered: 12/03/02
Posts: 3255
Loc: Maryland
Wow they have come a long way... I rember viewing porn from my Commo office in the army. They have moved to the smart chip cards as well. They were just starting to "BLOCK" access to certain sites and places when I left. I remember getting into places I shouldn't have on the network because they had almost zero security.
_________________________
My New site OpenEyes

Top
#4491 - 10/24/04 04:10 AM Re: SSH Keys
Gremelin Offline

Community Owner
*****

Registered: 02/28/02
Posts: 7192
Loc: Portland, OR; USA
The SSH keys use RSA; I like using 3072 bit but you can use lesser if you want (don't know why you'd want to but you can)
_________________________
Donate to UGN Security here.
UGN Security, Back of the Web, Elite Web Gamers & VNC Web Design Owner

Top
#4492 - 10/24/04 12:20 PM Re: SSH Keys
§intå× Offline


*****

Registered: 12/03/02
Posts: 3255
Loc: Maryland
less bandwidth...
_________________________
My New site OpenEyes

Top
#4493 - 10/25/04 12:50 AM Re: SSH Keys
Gremelin Offline

Community Owner
*****

Registered: 02/28/02
Posts: 7192
Loc: Portland, OR; USA
I haven't had any isssues connecting at 28.8KBPS lol...
_________________________
Donate to UGN Security here.
UGN Security, Back of the Web, Elite Web Gamers & VNC Web Design Owner

Top

Moderator:  Infinite 
Featured Member
Registered: 08/20/13
Posts: 1
Forum Stats
2148 Members
46 Forums
34017 Topics
69184 Posts

Max Online: 1567 @ 04/25/10 02:20 AM
Top Posters
UGN Security 27179
Gremelin 7192
§intå× 3255
SilentRage 1273
Ice 1146
pergesu 1136
Infinite 1041
jonconley 955
Girlie 908
unreal 860
Newest Members
Gecko666, defghi795767, Devo60, ali, lavos
2147 Registered Users
Who's Online
1 registered (Tim050), 278 Guests and 290 Spiders online.
Key: Admin, Global Mod, Mod
Latest News


Donate
  Get Firefox!
Get FireFox!