Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Configuring SSH

Status
Not open for further replies.

hornet77

MIS
Oct 14, 2003
27
US
I'm trying to configure OpenSSH from scratch on some RH Linux boxes (at least to begin with). I've never done this before and I'm not sure of all of the steps involved.

Obviously, I need to install OpenSSH. Once I do that, I need to start the sshd service. Here's where I get a little confused. I know there's keys I need to generate for connections, but I'm not sure how to do this. Also, there's a configuration file in /etc/ssh, but I'm not sure what to do to it (if anything).

Just playing with it so far, I was able to get the service started on two machines (at first, for testing purposes) and I ssh'd from one to the other. I received this message:

"The authenticity of host '<host-I'm-connecting-to (IP)>' can't be established. RSA key fingerprint is blah:blah:blah:blah:etc. Are you sre you want to continue connecting (yes/no)?"

What do I do here? I've been to the openssh site, and it's a little confusing for someone who has never done this before. All help is appreciated!
 
You don't mention what client you are using.

Let me put in a plug for my favorite (and free) client PuTTY.
It has handy utilities such as PuTTYgen to generate public/private key pairs and Pageant which allows you store your client key in memory. You enter your pass phrase once and then it will automatically authenticate your SSH sessions from then on.

One word of warning: OpenSSH on the linux side is VERY particular about file & directory permissions. If they aren't EXACTLY right, it won't work. It will ususally give you good error messages in the syslog.

Patrick

Patrick Bartkus, CCNP, CNX, SCM Sr. Network Engineer
GA Dept of Labor IT Network Services
If truth were not absolute, how could there be justice?
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top