The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
2answers
56 views

SSH key problems: Not a RSA1 key file unknown key type '-----BEGIN'

A backuppc server is able to sign into remote machines as root and backup them up, but if I sign in as the backuppc user and try to ssh into these machines using the same key, the key is rejected with ...
9
votes
15answers
3k views

How to manage rack keys?

As a result of a security audit there's the need to lock the racks and manage the keys: Keep the keys safe Record key usage Complying with these two requirements has many challenges as there are a ...
0
votes
0answers
7 views

Converting PGP2.x UIDs on a GPG key [migrated]

I have a couple of keys which were created many years ago, before GPG came out. (But let's pretend there's only one key involved.) The key has a mix of GPG and PGP-2.x-style UIDs. I've made one of ...
3
votes
1answer
21 views

Transfer SSH private and public keys after reinstall

I need to reinstall my system (debian) but I wonder if I could backup my pub and priv keys and then set them up on the new system. Too many servers already have my pub key and I do not want to change ...
3
votes
4answers
6k views

Why isn't my public key allowing me to sign in without a password?

On my home network I have a server running Ubuntu and another desktop running Windows 7. I'm using cygwin on the Windows machine to ssh into the server. I attempted to set up keys between these two ...
2
votes
1answer
841 views

Radius + SSH Key Authentication

Does anyone know if it is possible to configure pam to require both radius AND ssh-key to successfully authenticate ?
2
votes
2answers
447 views

Generating a CSR to a specific cipher suite

I am having to generate a CSR for a private RPC interface that is secured using certificates. As part of the requirements, it is specified that the only compatiable suite is: ...
20
votes
4answers
5k views

Centralized management system for SSH keys?

We are looking to switch to key-based management of SSH logins, and wonder if there any key-management systems which would allow us to centrally manage the access keys world-wide. The system should ...
0
votes
1answer
52 views

I have changed my server, Do I need to re generate the ssl key

I am using AWS for hosting. I have got one productions instance and pre-production instance in it. I have installed ssl to the production site. But unfortunately its crashed. So we cloned the ...
27
votes
8answers
3k views

What are best practices for managing SSH keys in a team?

I work with small teams (<10) of developers and admins with the following characteristics: Most members of the team have >1 personal computer, most of which are portable Team members have access ...
0
votes
2answers
142 views

SSH:using single public key on multiple remote machines and spoofing-by-known-server

Lyrics Usually, people say, that using single public key on several servers is just as secure as using unique public keys on each of them. (If we're not talking about possibility of private key being ...
0
votes
4answers
2k views

How to make connection between two computers using ssh-keygen

I want to use rsync command between two computers and both of them have RedHat 5.3 , when I googled for way to make that, I discovered that I have to make public key between them to not prompt ...
5
votes
1answer
131 views

Finding Windows keys in use throughout corporation

We own a lot of Windows desktop keys (XP, Vista, and Windows 7) and have documented their usage and availability. Now the documentation has fallen behind and we don't know what keys are used where. Of ...
1
vote
1answer
83 views

How to securely control access to a backend key server?

I need to securely encrypt data in my database so that if the database is dumped, hackers are unable to decrypt the data. I'm planning on creating a simple key server on a different machine, and ...
4
votes
4answers
1k views

Enforce SSH key passwords?

I'm looking at removing password-based logins for SSH. However, I don't want to allow passwordless ssh keys, as that would be even worse. How can I make sure that only SSH keys which have passwords ...
1
vote
2answers
157 views

How to create a new user and exempt the user of key authentication?

1 I have configured Ubuntu server with Key authentication & it is working fine. I have disabled password authentication for key authentication to work. Server is always accessed via remote ...
0
votes
1answer
577 views

Steps to use juju to orchestrate a devStack fresh VM setup?

Using this devStack guide : Running a Cloud in a VM to test OpenStack. What would be the steps to get the correct juju configuration from a fresh devStack setup? EDIT : Found out the first ...
-4
votes
1answer
771 views

Lost key to Dell server casing [closed]

I lost the key to remove the casing on my Dell T710 Server. Where can I get a replacement key?
12
votes
5answers
8k views

SSH: Do you use one private/public key pair for each remote machine? Or a single pair for all?

When you want to have public key based ssh logins for multiple machines, do you use one private key, and put the same public key on all of the machines? Or do you have one private/public key pair for ...
1
vote
1answer
63 views

Linux group keyring (eg request_key and add_key)

I'm working on building an application that needs to use the group keyring to share some sensitive data between processes with different owners. Whenever I try to access the group keyring (e.g."@g") ...
5
votes
2answers
2k views

SSH keys management system

I'm looking to switch from password based (which I starting to become overwhelmed with) to SSH keys based system. I'd like to know if there any SSH keys management system or server solution, which ...
1
vote
4answers
771 views

SSH key based authentication in Perl server

I have a server written in Perl that clients connect to in order to perform some management tasks. Without going into details I would like to achieve two things: encrypt connection channel between ...
2
votes
1answer
370 views

Windows 2003 DNS TSIG transfer?

I am trying to use a Windows 2003 R2 server as a secondary dns server for my BIND 9 master. The problem is I use keys to control transfers and I dont know how to add the key to Windows so its able to ...
0
votes
2answers
1k views

How to allow password authentication OR key authentication on CentOS 5.7?

is it possible to enable the use of password authentication or key authentication in CentOS 5.7? All I can find is setting PasswordAuthentication to no which forces the use of keys... Thanks
0
votes
1answer
144 views

Authenticate user(group) and encrypt port 8078 on a server using SSH2 keys?

I want to encrypt and authenticate port 8078 on a server running Jenkins using SSH keys (I'll pass our the public or private key as needed), and keep 8078 from being accessed by anything but SSH. I ...
1
vote
3answers
935 views

Old dell workstations need to have XP reinstalled but there are no restore disks; Besides ordering restore disk what is the best option?

All of the workstations are XP Pro oem from Dell. I need to reinstall XP and all I have access to are the MSDN copies of XP. I found a page on Dell's website where they would send you a free copy of a ...
5
votes
1answer
153 views

Policies for maintaining access credentials on EC2

Managing EC2 access keys and X.509 certificates can become challenging when you start to deal with large numbers of instances. Do any EC2 users here have good policies and/or tools for: rotating ...
0
votes
2answers
450 views

Redis using lots of RAM, steadily increasing until I restart it

I have a simple redis installation and it seems to slowly eat more and more ram at a steady incline until I restart the redis server. I'm using redis as a caching layer, currently I don't set an ...
0
votes
1answer
369 views

.Net SqlClient Data Provider error when comparing keys in powershell DB install

I am trying to install Databases on a new windows 7 machine with powershell code that was meant for windows xp. I have been able to fix most of the problems as I have come across them but I have been ...
2
votes
1answer
398 views

What is sshkeys-lint

I was following some instructions on a website, and it told me to run sshkeys-lint to check ssh keys. I never heard of sshkeys-lint and can't apt-get. Is this a typo?
0
votes
2answers
137 views

DNSSEC - Dynamic Update

I'm testing key rollover with Dynamic Update. I'm using Bind 9.7.1-P2. When I change the key dates with the script dnssec-settime, named doesn´t update automatically the zone file unless I reload the ...
1
vote
1answer
74 views

Freenx with ssh that requires keys?

Is it possible to connect to a Freenx server if ssh requires the use of keys instead of passwords? If so, how would I connect using the client?
3
votes
3answers
2k views

Two-Factor Authentication - SSH using Keys & Local Account Password

Is it possible and feasible to setup a linux box to first require a valid key file before prompting for the user's local account credentials? Our setup is that we have to open ssh on a machine to the ...
0
votes
2answers
1k views

I have the private DSA key in PEM format. What do I do next to access SSH without a password?

I have the private DSA key in PEM format. What do I do next to access SSH without a password? Sample certificate in PEM format: ...
0
votes
2answers
970 views

How do I configure MySQL command line client key bindings?

I often use the mysql command-line client on an Ubuntu box. It works fine, except that the key bindings are wrong. Specifically, pressing "Home", "End", or "Delete" makes it output a ~ (tilde) ...
0
votes
5answers
538 views

Capistrano security

We are using Capistrano in some systems as a deploy system. The new sysadmin we have says that our setup is really dangerous and I would like to know how to fix it. We have a deploy user called "foo" ...
2
votes
2answers
154 views

When should I generate a new private key for SSL?

I'm renewing a wildcard SSL cert. The easiest option is to use my existing private key and generate a new CSR using that. Is there any reason (assuming my private key hasn't been compromised) to go ...
1
vote
1answer
183 views

DNSSEC - First Signature

I'm testing DNSSEC with Bind 9.7.2-P2. I have a question regarding the first signature created over a zone that already exists. I'm using dynamic DNS. I create the first two keys: one KSK and one ...
2
votes
2answers
888 views

Validating GPG key signature authenticity

I'm trying to validate the integrity of my httpd-2.2.17.tar.gz image. I followed the steps written in the following pages: http://httpd.apache.org/download.cgi#verify ...
2
votes
3answers
1k views

How to stop SSH from falling back to password?

A script regularly initiates an SSH connection from one server to another, using SSH keys. However, once, the keys were briefly overwritten. This caused the SSH client to fall back to asking for a ...
0
votes
1answer
124 views

Which is faster, key_cache or OS cache?

In a tb with 1 mil. rows if I do (after I restart the computer - so nothing it's cached): 1. SELECT price,city,state FROM tb1 WHERE zipId=13458; the result is 23rows in 0.270s after I run 'LOAD ...
1
vote
1answer
118 views

DNSSEC - DNSKEY RRSIG not updated

Does anybody know why the DNSKEY RRsigs are not re-signed with dynamic update?? Regards
1
vote
4answers
2k views

How bad is it to use the NX server default SSH key?

It is said in NoMachine NX setup and FreeNX ubuntu setup article that using the default SSH key for NX server is bad for security. How much is it bad? Is it the case that the default SSH key is the ...
1
vote
1answer
153 views

Simple PHP encryption

I'm looking for an asymmetric encryption library for php that can generate keys, hand out public keys and decrypt incoming messages with the corresponding private key. However, I'm a novice in the ...
2
votes
2answers
545 views

Stolen Windows7 Keys! Help

I work in the IT Department of my company and we use one multi-license Windows 7 Ultimate Productkey for our in-house machines. Lately I've come to the strong suspicion, that workers from other ...
9
votes
3answers
4k views

How do I setup sshd on Mac OS X to only allow key-based authentication?

I have a Mac OS X machine (Mac mini running 10.5) with Remote Login enabled. I want to open the sshd port to the Internet to be able to login remotely. For security reasons I want to disable remote ...
0
votes
2answers
194 views

How can you tell how old an ssh key is?

I'm connecting to a remote server, but want to make sure that they keys have been created relatively recently. How can I tell when the keys for that ssh server were generated? If I can't check ...
0
votes
2answers
1k views

What is the simplest way to delete a corrupt registry key?

I have a registry key that produces an error when selected in regedit. It may have multiple but unknown subkeys. regeidt isn't up to the task what is the best way to wipe out this key and anything ...
1
vote
2answers
157 views

authentication keys for ssh

I use the following commands on computer A to generate authentication key for ssh from computer A to computer B ssh-keygen -t rsa scp ~/.ssh/id_rsa.pub B:.ssh/authorized_keys2 If further I need to ...
1
vote
2answers
925 views

How to send Alt-Tab through the Putty?

I want to use bash completion for command parameters on a remote computer. How can I send Alt-Tab combination in Putty? Is there other key combinations for this?