Trusted, Bureaucrats, Administrators
12,424
edits
Changes
From Amahi Wiki
→Option 1 (Amahi 7/8 ONLY)
This will allow you to safely login using SSH onto your HDA without having to provide a password every time.
=Windows - PuTTY=
== Key-Based SSH Logins with OS X's Terminal.app == Coming Soon... == Key-Based SSH Logins with Windows putty application == * <strong>Install Putty and PuttyGen on your windows desptop</strong>==
Download the following files from the [http://www.chiark.greenend.org.uk/%7Esgtatham/putty/download.html PuTTY download] page and save them on your Windows system, e.g. on the desktop:
Both files are self contained executables. That is: they do not install anything but run from where they are saved.
In PuTTY, you can create profiles for connections to your various SSH servers, so you don't have to type in the settings again when you want to connect to a certain server again.
[[Image:Red-S01.png]]
Now select '''Connection >> Data'' in the Catagory Category box and in the Auto-login box enter the username you wish to login to your HDA with. In this example 'sue'.
[[Image:Red-S02.png]]
Now you are on your 'Sessions' screen lets open our session by pressing open. You should see:
Here we can use PuTTYgen to create a private/public key pair. Start it by double-clicking its executable file. Make sure you select SSH-2 RSA under Type of key to generate and specify 1024 as the Number of bits in a generated key. Then click on Generate:
Now we must transfer the public key to our Amahi HDA server. Copy the key from the PuttyGEN window:
Using ''putty'' logon to our Amahi HDA using the profile you created earlier.
=== Option 1 (Amahi 7 or greater '''ONLY''') ===
We can add the key file to the HDA using the HDA dashboard.
Navigate to the '''Users''' tab
[[File:User-SS0.png|700px]]
Select your user and you should see ''Authentication''.
[[File:User-SS1.png|700px]]
Click the key and paste your key information. Choose ''Update Key'' when finished.
[[File:User-SS2.png|700px]]
Proceed to [[Key-Based_SSH_Logins#Configure_PuTTY_to_use_the_private_key|Configure PuTTY to use the private key]]
=== Option 2 (All Amahi versions) ===
We must now create a directory and file in which to store our public key
<div style="border: 1px solid #A3B1BF; padding: .5em 1em; color: #000; background-color: #E6F2FF; margin: 3px 3px 1em 3px;">chmod 600 ~/.ssh/authorized_keys2</div>
Close down your shell to your HDA and restart ''putty'' and load your ''192.168.1.67'' profile
[[Image:Red-S01.png]]
Go to '''''SHH SSH >> Auth''''' and click on '''''Browse'''''
[[Image:Red-S10.png]]
[[Image:Red-S11.png]]
Now on our puuty PuTTY sessions screen load your '''192.168.1.67''' profile and press ''Open''. You should get:
[[Image:Red-S12.png]]
Enter you your passphrase that you input created when generating your keys.
[[Image:Red-S12a.png]]
=Mac OS X - Terminal.app=
Up to now, you can log in with your private/public key pair and still with username/password logins, so if someone doesn't attach a private key to his PuTTY session, he will be asked for a username and password. So to achieve a better security, we must disable the username/password logins (you should do this only when you know that your key-based logins are working, because if they aren't and you disable username/password logins, then you have a problem...).
<div style="border: 1px solid #A3B1BF; padding: .5em 1em; color: #000; background-color: #E6F2FF; margin: 3px 3px 1em 3px;">su -<br />
vi /etc/sshdssh/sshd_config</div>
[[Image:Red-S13.png]]
<div style="border: 1px solid #A3B1BF; padding: .5em 1em; color: #000; background-color: #E6F2FF; margin: 3px 3px 1em 3px;">
service sshd restart</div>
= Tips =
* Recommend you check out [[Secure_SSH_against_brute_force_attacks|secure SSH against brute force attacked]] guidance to protect your HDA.
* Monitor SSH access to your HDA by following the [[SSH_Email_Alerts|SSH email alerts]] tutorial.
* In Amahi 7, you can add the '''public''' (not the private key) in your Users area of the HDA dashboard.
[[File:SSH_keys.png]]
