quinta-feira, 7 de agosto de 2008

ssh server without auth (no auth server/client)

Well I have a Mac OS and Ubuntu.

My ubuntu have sshd - server.


I didn't want no autentification on ssh server.



Introdution and overview about keygen


if you want no auth in ssh server, you need access on your ssh server to change some configs.
If it is a public server (like hosting servers ) configs on server should be done.

Only need to upload your key.

How to say to ssh server that it's my machine trying login?

Client generate a private and public key. You share public key with server.
private and public key matches by algorithm and it's authentication.

So server recognize the keys and doesn't ask password.



How to do that?

Server

Edit /etc/ssh/sshd_config

Change some configs to:

RSAAuthentication yes
PubkeyAuthentication yes
ChallengeResponseAuthentication no
PasswordAuthentication no
UsePAM no


Reload server:

sudo /etc/init.d/ssh reload


Client

Gerate key:

ssh-keygen -q -f id_rsa -t rsa



scp ~/.ssh/id_rsa.pub user@server:~/.ssh/id_rsa.pub
ssh user@server
cd .ssh
cat id_rsa.pub>>authorized_keys
rm id_rsa.pub
exit


do same on server if you wish.


AutentificationTroubles?


Put this at server:


server$ chmod go-w ~/
server$ chmod 700 ~/.ssh
server$ chmod 600 ~/.ssh/authorized_keys


Doesn't it works?

cat /var/log/auth.log and grep it!



References:
Troubles page ssh

terça-feira, 5 de agosto de 2008

Umit 0.9.5 released and Mapper and Network Inventory, Interface Editor and others comming...

Now umits will integrate soc projects! :D


What is comming?
- Mapper
- Network Inventory
- Interface Editor
- Target widget
- NSE Script Editor


soon!! Stay tunned on trunk.



Official message from Umit:

Hi everyone!

We're happy to say we finally have a stable release. We fixed bugs, language files and complemented documentation.

Try it and let us know if you have any trouble. You can send a message to this mailing list or, if you find a bug, please report on our trac[1].

Changes since RC2:

* Changes on tarball, now it does not have *.mo (binary) files
* Fixed icons directory, it was causing problems on uninstall_umit
* Fixed CrashReport message - now have formatted view on trac
* Added number version in components of Umit (umitGUI, umitCore, higwidgets) - it is useful to view if umit is using old stuff in CrashReports.
* Remove some lines that was debuging and it was freezing Umit in some situations (Search Scans and CrashReport)
* Update keyboard shortcuts for Profiles Deletion (it was in conflict with another shortcuts)
* Update language files
* Complement documentation

You can download Umit from here:

http://sourceforge.net/project/showfiles.php?group_id=142490&package_id=156443&release_id=617967

http://www.umitproject.org/?active=download

Now we are ready to start integration of the projects of GSoC and make several improvements on Umit.
Stay tunned!


Cheers!


[1] http://trac.umitproject.org


--
Luís Silva and Rodolfo Carvalho