The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
1answer
129 views

Correct use of RSA Key Pairs

I have recently began making use of RSA Key pairs to login to various servers I manage and wanted to get some insight on best practice as I recently ran into some issues. Is it best practice to keep ...
0
votes
2answers
982 views

How to allow password authentication OR key authentication on CentOS 5.7?

is it possible to enable the use of password authentication or key authentication in CentOS 5.7? All I can find is setting PasswordAuthentication to no which forces the use of keys... Thanks
1
vote
1answer
240 views

Accessing Citrix XenDesktop from outside the domain / firewall

My understanding of accessing a Citrix XenDesktop from a home PC is: Download the Citrix plugin. Go to the Citrix XenDesktop server in a web browser. Type in information, including PIN and number ...
6
votes
2answers
1k views

How To Organize and Use Multiple RSA Keys On Local Machine?

I have Server_A, Server_B, and Server_C. I want to generate unique authentication keys for each, and organize them on my local machine running Lion like so: Put server_A keys in ...
0
votes
4answers
1k views

Despite all the information available, I'm stumped on passwordless logins. Help?

So I have my home computer & a server. I want the server to be able to SSH into my home computer w/out a password. I have followed various tutorials and can ssh from home to server with no ...
13
votes
2answers
4k views

Possible to change email address in keypair?

I've created an RSA keypair that I used for SSH, and it includes my email address. (At the end of the public key.) I've now changed my email address. Is it possible to change the email address on ...
1
vote
4answers
3k views

SSH login without password

I know that you can use ssh-keygen to generate a public/private key pair. Then you can install the public key on a remote server. You can then login without supplying a password. I haven't been ...
2
votes
1answer
98 views

Setting up RSA with multiple users

I've recently set up a server, and I've set up RSA authentication on said server. My question is, how do I set up RSA authentication for different users? As of right now, the only user that has RSA ...
1
vote
1answer
196 views

Enforce sshd key algorithm

In ssh_config I have the HostKeyAlgorithms parameter where I can enforce the use of DSS algorithm for the key, like: HostKeyAlgorithms "ssh-dss" How can I do this in sshd_config (daemon config) in ...
8
votes
4answers
10k views

What does this ssh error mean?

This is my last resort. I've been trying to figure out the problem here for hours. Here's the deal: I have copied my private key from machine #1 onto machine #2. Machine #1 is able to connect via ...
3
votes
3answers
497 views

Any point using Denyhosts for SSH when only RSA key logins are allowed anyway?

Right, so if I can only SSH into my box by having the appropriate RSA keys configured, is there any point in using Denyhosts for SSH as well? Or is Denyhosts only looking at keyboard-interactive / ...
4
votes
4answers
2k views

The RSA key container could not be opened. Windows Server 2008 R2

I am setting up a second asp.net site on our Windows 2008 R2 server. We use a RSA Key Container to encrypt our connection strings. I created a new Application Pool with all the same settings as our ...
1
vote
1answer
715 views

Access CentOS 5 server over SSH with RSA public/private key from OSX

I'm trying to configure SSH access to my CentOS server using an RSA key rather than with a password but it refuses to accept the key. Here's what I've done so far: On client machine (OSX): ...
4
votes
1answer
946 views

What are the Jenkins/Hudson key files for?

After I have installed Jenkins (on Windows), the program folder contains, among others, two files: identity.key (28 lines) -----BEGIN RSA PRIVATE KEY----- MIIEow...... ... -----END RSA PRIVATE ...
1
vote
2answers
2k views

ssh hostname returns “Bad owner or permissions on ~/.ssh/config” (chmod 600 not working with MingW)

This question is a near duplicate of Robert's question but after trying chmod 600 ~/.ssh/config I still have the same error. I've tried using cygwin and MINGW32 to do the chmod 600. ls -la returns ...
2
votes
2answers
180 views

openssh: public key failure for one user only

Client: opensuse 10.3, openssh 4.6 host: opensuse 11.3, openssh 5.4 I have a user that has ssh publickey setup to a host, to enable running some scripts through cron. We migrated the host to a new ...
2
votes
1answer
402 views

is there a way to tail a log from remote server without using any user credentials?

I run a script tailing a log in a remote server, like so: ssh userx@someip tail -f /data/current.log|python2.7 monitorlog.py There are dependencies and service requirements that disallows me to run ...
1
vote
1answer
1k views

Gitosis installation of public key not working

I've been following this tutorial to install and setup git on Ubuntu Server 10.04 using Windows 7 as a client. However, after finally figuring out how it works (executed gitosis-init a bunch of times ...
0
votes
1answer
153 views

SSH without password still asks for passphrase

I'm writing a cron job that SSHs into a remote server. Since I'm of course not going to be around to type in a password each time the cron job runs, I need to be able to SSH without a password. I ...
2
votes
1answer
1k views

Can you make default client key length larger for ssh-keygen?

When users employ ssh-keygen to create RSA key pairs, the default key length is 2048 bits. You can override that on the command line with the -b argument, but few users will bother. As mentioned in ...
3
votes
1answer
81 views

Is RSA's SecureID anyless secure in light of the attacks exploiting them?

Additionally, is two-factor authentication in general less secure, and if so, why?
6
votes
3answers
12k views

How to use openssh sftp command with a RSA/DSA key specified from the command line

The Openssh ssh and scp command provied an -i command line option to specify the path to the RSA/DSA key to be used for authentication. Looking at the sftp man pages I was not able to find a way to ...
1
vote
1answer
496 views

SSH accepts publickey authetication but won't connect with an identify file?

Problem I recently switched to a new web server. I had been using identify files with SSH to connect on the previous server with no problems, but on the new server I can't seem to use an identify ...
5
votes
2answers
763 views

SSH keys: why is id_rsa larger than id_rsa.pub?

My private key (~/.ssh/id_rsa) is a 1766-byte file, but my public key (~/.ssh/id_rsa.pub) is only 396 bytes in length. Why the massive difference? Is it because the private key is encrypted using AES? ...
2
votes
1answer
3k views

Fallback authentication if mod_auth_kerb fails

Is there a way for Apache to fall back to a different authentication method if Kerberos authentication (for some reason) fails? The order of the authentication methods should be: Kerberos Active ...
1
vote
0answers
76 views

change symmetric key in a SSL connection?

I'm analyzing (for didactic reason) the SSL security, and now I'm focusing on the symmetric key used for crypt the data on SSL tunnel. I read that at the first access to the server, both client and ...
3
votes
2answers
259 views

Centrally managing logins to lots of linux machines

We have a growing collection of servers, both physical and virtual, which we need to login into. Login is usually with SSH, using an RSA key pair rather than a password (which is switched off in SSH ...
1
vote
1answer
137 views

Private and public key negotiations over SSL protocol

I understand how public key encryption works and I understand how it works into SSL. Server sends encrypted(public) key so I can send it a message but only it knows the private key to decrypt it. ...
1
vote
2answers
3k views

How to manually know the RSA2 key finger print?

When I grep in the etc folder, I get this message: grep: ssh_host_rsa_key: Permission denied. Since I am on cygwin, I can't use sudo or something else. Please let me know how to find it out.
1
vote
1answer
196 views

RSA fingerprint [closed]

what is the benefits of SSH RSA Fingerprint? and how does it different from PGP ? also how can i use it? are there any tool to do this? regards
3
votes
1answer
209 views

Onscreen keyboard with RSA Authentication Agent on WIndows

I'm attempting to integrate a touch panel into our secured environment. As such, the touchpanel requires that the user login via RSA SecurID. Unfortunately, there is no exposed keyboard for the user ...
0
votes
1answer
210 views

Using RSA SecurID without a Windows Domain

I have a bunch of PCs I'd like to secure with RSA SecurID tokens. However, they're not part of any Windows domain. Is this doable? Anyone any experience with that?
1
vote
1answer
94 views

What's the most compact way to store a password-protected RSA key?

I've tried converting a PEM-encoded key to DER format, and it appears the password is stripped regardless of the -passout argument. Example: openssl rsa -in tmp.pem -outform DER -out tmp.der -passin ...
5
votes
2answers
345 views

When routers communicate with HTTPS, how is their identity confirmed?

There's something I don't understand. Possibly I have some misunderstanding about how HTTPS works. I heard that some wireless routers allow the user to access the administration page with HTTPS ...
0
votes
2answers
338 views

setting minimum size of accepted rsa key

Is there a way to set the minimum size accepted by sshd as an RSA public key? I want to restrict users to using RSA keys that are generated with ssh-keygen -b 8196 or greater. I didn't see any ...
0
votes
1answer
203 views

Is it safe to share easy-rsa keys between machines? How?

I have two vpn hosts, vpn1 being the primary, vpn2 being a hot failover machine for cases where vpn1 goes down, either planned or unplanned. Right now, we manage client keys using the easy-rsa shell ...
140
votes
14answers
156k views

How do I tell Git for Windows where to find my private RSA key?

My GIT setup runs fine in Linux, but when I try to set things up under Windows (using Git for Windows and TortoiseGit), I don't know where to put my private ssh key (or, better still, how to tell ssh ...
0
votes
1answer
4k views

RSA Authentication Manager - Unable to resolve principal by login ID and/or alias

I'm attempting to setup a RSA authentication manager with a Microsoft Active Directory as the identity source. When I try to login from the Windows login client the login attempt failed and I recieve ...
3
votes
5answers
4k views

Recover an SSH private key?

I have an RSA key (generated by PuTTYgen) that's set up for logging in to a bunch of machines via SSH. Or rather, i HAD such a key. (The computer it was on crashed, to the point that a reinstall of ...
1
vote
0answers
680 views

unable to logon because of account restriction on Domain Controller

I have a Domain Controller which had installed RSA SecurID software Few months ago we switched from RSA SecurID to Gemalto smart cards. This DC was the last machine with RSA software installed ...
3
votes
2answers
5k views

OpenVPN easy-rsa build-key automation?

I have a lot of keys to generate for my clients VPN server. Whenever I use easy-rsa to generate the keys like this: ./build-key client1 There is some output with a series of questions. The ...
4
votes
3answers
2k views

OpenSSH : Key-based authorization, maximum key length

I'am using Putty on windows with key-based authentication to access some of mine servers. It works totally fine with ~3700-bit key, but with ~17000-bit key it thinks for like 20 seconds on ...
7
votes
3answers
10k views

How to set up my own full-featured certificate authority?

I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.
1
vote
1answer
467 views

SSH with public/private key to iMac fails

I'm trying to connect to my iMac (server) from my macbook (client) on my LAN. Both have Mac OS X 10.6.4. Server running on a new clean install of the OS. When just activating Remote Login in System ...
6
votes
1answer
4k views

RSA key, github keeps asking for my password

Okay folks, noob RSA question here. I have a production server, and I've generated an rsa key there. I've then taken the public key (id_rsa.pub) and given that to github, as a deploy key I believe. ...
1
vote
5answers
3k views

sshd shuts down with “No supported key exchange algorithms” error

sshd $ /usr/sbin/sshd -f testconfig -p 22025 -d debug1: sshd version OpenSSH_5.2p1 debug1: private host key: #0 type 0 RSA1 debug1: read PEM private key done: type RSA debug1: private host key: #1 ...
1
vote
1answer
491 views

How to run RSA software fob on Ubuntu?

I am using RSA software fob on windows. I want to use software fob on ubuntu. I didnot find any relevant software on RSA website for using software fob on ubuntu. I tried to use RSA firefox plugin but ...
4
votes
4answers
2k views

Cisco ASA user authentication options - OpenID, public RSA sig, others?

My organization has a Cisco ASA 5510 which I have made act as a firewall/gateway for one of our offices. Most resources a remote user would come looking for exist inside. I've implemented the usual ...
0
votes
1answer
119 views

Can I use authorized keys for user not 'root'

I used this tutorial to login into root without using password. Is there any way to make this work for normal user , not root user
1
vote
4answers
557 views

Enabling publickey authentication for server's sshd

I have two servers running RHEL 5. Both have nearly identical configurations. I have set up RSA Publickey authetication on both, and one works but the other does not: [my_user@client] $ ssh ...