SSH

From Things and Stuff Wiki
Revision as of 20:21, 18 January 2016 by Milk (talk | contribs) (→‎Distributing)
Jump to navigation Jump to search


General

Server

Client

Management

storm

  • storm is a command line tool to manage your ssh connections. features; adding, editing, deleting, listing, searching across your SSHConfig. command alias support for your CLI preferences. support for custom SSH directives. scriptable as a python library.

user interfaces besides cli. (web ui, wxpython, unity(ubuntu) indicator.) [2]

Keys

Default file name format; 

~/.ssh/id_rsa and ~/.ssh/id_rsa.pub
  RSA key

~/.ssh/identity and ~/.ssh/identity.pub
  DSA key (old)

Creating

ssh-keygen
  create a key. rsa is default.

Distributing

ssh-copy-id [-i [identity_file]] [user@]remote

ssh-copy-id username@remote-server.org

ssh-copy-id 'user@remote-server.org -p 8129'

ssh-copy-id -i ~/.ssh/id_ecdsa.pub '-p 221 username@remote-server.org'

Multiple keys

ssh -i ~/.ssh/id_rsa_example.org

Config

~/.ssh/config 

Host example.org
 IdentityFile ~/.ssh/id_rsa_example.org
  • sshit - A quick way to manage .ssh/config

to sort


SSH agents

  • Envoy helps you to manage ssh keys in similar fashion to keychain, but done in c, takes advantage of cgroups and systemd.

randomart

VisualHostKey=yes

SCP

scp -P [port] file.txt user@remotehose:~/file.txt

When scp on remote is initiated, it done so with -t flag, which is undocumented but might be required for precise command persmission configuration.


SSHFS

sshfs user@address:/home/user/dir dirtomountto -p [port]
  mount

fusermount -u dirtomountto
  unmount

if 

fuse: failed to open /dev/fuse: Permission denied

do 

usermod -G fuse [username]

and relogin

Security

fail2ban

sshguard

Honeypot

X11 forwarding

See GUI#X_Forwarding

Web forwarding

Tools

To sort

Multi factor

Retrieved from "https://wiki.thingsandstuff.org/index.php?title=SSH&oldid=33394"