Further assisting comments. For people who have not made public and private keys before, here is the some tips. In Linux with openssh 1. You use "ssh-keygen" to make those keys. When you do, make sure to use "-t dsa" option to make ssh-2 keys. Then follows the instruction. (I just use the default.) 2. (1) should make two keys (id_dsa and id_dsa.pub) in ~/.ssh/ directory. If so, copy the content of id_dsa.pub to ~/.ssh/authorized_keys2 of remote machine you want to use. That's it. Easy!!! For people who use MSWin, If you use openssh with cygwin, just follow the same instruction above. But, I suggest to use puttygen.exe program, which you can download from "http://www.openssh.org" 1. Just run the programs and follow the instruction to make keys and save them to somewhere. 2. Again, copy the content of public keys to ~/.ssh/authorized_keys2 file. 3. When you run PuTTY, make sure you set your private key option. That's it. (Additional thoughts. Since Win95/98/Me is not secure to start with, keepting a private key in these machine seems to be more dangerous than typing the password. (Files are reable to anyone.) But, if this is the way to do, so be it! Or maybe, it is a consipracy intended to get rid of Win95/98/Me in the near future (for the better world =) ). Hiro On Thu, 24 Jan 2002, Christian Holm Christensen wrote: > Hi Hiro et al, > > On Wed, 23 Jan 2002 12:04:21 -0600 (CST) > Hironori Ito <hito@students.phsx.ukans.edu> wrote > concerning "Re: FYI-will affect us..16/17 68/69": > > However, make sure to download "latest development snapshot" version > > instaed of "latest release version" because the later does not > > support X11 forwarding. (Do not forget to check "Enable X11 > > forwarding" option.) > > This ofcourse only makes sense if you have an X-server running on your > windoze machine. Some avaliable X-servers are eXceed [1] and XFree86 > [2] with Cygnus Cygwin [3]. > > I believe eXeed (which is closed source, propertary and expensive) > comes with a SSH client which may (or may not) support the SSH2 > protocol - I think it does. An evaluation copy can be downloaded > [4]. > > XFree86 for Cygwin does not come with an SSH client, but Cygnus Cygwin > ships with an OpenSSH client [5]. > > I should like to discourage people outside the USA to use X clients > from inside BNL - it's just to slow (which isn't helped much by the > two jumps you need to make either). > > In regards to all this CyperSecurity stuff. You should _always_ have > RSA of DSA keys on your account, both at home and at BNL, and put > those keys in the authorized_keys list (~/.ssh/authorized_keys) since > this draticly increases security. There was an posting on /. [6] > sometime ago about this, but I can't find it now :-( > > Yours, > > Christian Holm Christensen ------------------------------------------- > Address: Sankt Hansgade 23, 1. th. Phone: (+45) 35 35 96 91 > DK-2200 Copenhagen N Cell: (+45) 28 82 16 23 > Denmark Office: (+45) 353 25 305 > Email: cholm@nbi.dk Web: www.nbi.dk/~cholm > > [1] http://www.hummingbird.com/products/nc/exceed/ > [2] http://cygwin.com/xfree/ > [3] http://cygwin.com/ > [4] http://www.hummingbird.com/products/evals/index.html > [5] http://www.cygwin.com/packages/openssh/ > [6] http://slashdot.org >
This archive was generated by hypermail 2b30 : Thu Jan 24 2002 - 10:50:03 EST