Posts Tagged linux

Really busy for these days. Haven’t posted for a long time~~.
Yo! I am back.

近來試一試 openSUSE 去SETUP 一台 WEB SERVER. 因為要放上data center, 所以要set SSH connect 去server.

1. Generate SSH Key
$ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/home/chowky/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/chowky/.ssh/id_rsa.
Your public key has been saved in /home/chowky/.ssh/id_rsa.pub.
The key fingerprint is:
XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX chowky@linux

2. check the files generated
$ ls /home/chowky/.ssh
id_rsa id_rsa.pub

Note: id_rsa is private key. 你要keep 這個file. copy to USB drive
id_rsa.pub is public key

3. import the key to the .ssh folder. 找不到的話就自己 create 一個.
$ cd /home/chowky/.ssh
$ cat id_rsa.pub >> /home/chowky/.ssh/authorized_keys

4. Modify “/etc/ssh/sshd_config” …(只識用nano…vi 不太熟…). 修改以下value.
RSAAuthentication yes
PubkeyAuthentication yes

disable password security，因為改用了RSA Keypair Authentication.
ChallengeResponseAuthentication no
PasswordAuthentication no
UsePAM yes

Reload the server configuration:
$ sudo /etc/init.d/sshd force-reload

Read the rest of this entry »