
Appendix A - New User Background Information
292 BLACK BOX ® Advanced Console Server
cat /tmp/known_hosts >> /etc/ssh/ssh_known_hosts or ~/.ssh/
known_hosts
• client start-up command: ssh -t <BLACK BOX ® Advanced Console Server_ip or
Serial_port_ip>
Step 3: Only RSAAuthentication yes in sshd_config.
• Removal of the BLACK BOX ® Advanced Console Server’s *.equiv, ~/.?hosts, and
*known_hosts files.
• Client identity created by ssh-keygen and its public part (~/.ssh/identity.pub) cop-
ied into BLACK BOX ® Advanced Console Server ’s ~/.ssh/authorized_keys.
• Client start-up command: ssh -t <BLACK BOX ® Advanced Console Server_ip or
Serial_port_ip>.
Step 4: Only PasswdAuthentication yes in sshd_config.
• Removal of the BLACK BOX ® Advanced Console Server’s *.equiv, ~/.?hosts,
*known_hosts, and *authorized_keys files.
• Client startup command: ssh –t -l <username> <BLACK BOX ® Advanced Console
Server_ip or Serial_port_ip> or ssh –t –l <username:alias><BLACK BOX ®
Advanced Console Server_ip>.
Configuring sshd’s client authentication using SSH Protocol version 2
Only PasswdAuthentication yes in sshd_config DSA Authentication is the default. (Make sure
the parameter PubkeyAuthentication is enabled.)
• Client DSA identity created by ssh-keygen -d and its public part (~/.ssh/id_dsa.pub) cop-
ied into the BLACK BOX ® Advanced Console Server’s ~/.ssh/authorized_keys2 file.
• Password Authentication is performed if DSA key is not known to the BLACK BOX ®
Advanced Console Server. Client start-up command: ssh -2 -t <TS_ip or Serial_port_ip>.
Note: “client_hostname” should be the DNS name. To access the serial port, the
BLACK BOX ® Advanced Console Server must be configured for local authenti-
cation. No root user should be used as username.
Komentarze do niniejszej Instrukcji