Re: ssh key authentication



Jorge JJ wrote:
When you want a ssh authentication by a public/private key. You must
leave the public key on the server and the private key in the
client... ¿how does the authentication work? ¿is the private key send
to the server (ahhh!!!)? and the best question where i can find
information about this... when i have this type of question where have
i look?

Brian Hatch wrote some very good articles on this back in late 2004, and it still works the same today:

SSH Host Key Protection http://www.securityfocus.com/infocus/1806
SSH User Identities http://www.securityfocus.com/infocus/1810
SSH and ssh-agent http://www.securityfocus.com/infocus/1812

Using keys with SSH is a very good idea.

best regards,

kelly



Relevant Pages

  • Re: Remote Desktop directly to another computer on the network
    ... It also allows file transfers, tunneling, etc. ... You can use any Java enabled browser AFAIK to connect to the server, ... because you can actually map a remote folder through the SSH tunnel. ... private key and strong pass phrase. ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: SSH as root
    ... Subject: SSH as root ... but it doesn't require having a key on the server that could be ... If they compromise a server, and the passphrase, etc. is there, they only ... private key to anyone. ...
    (SSH)
  • Re: Sniffing on SSH providing private key
    ... > sniffing SSH connectin providing that I have the private key. ... > being passed to the kernel on such a connection. ... If you could somehow reach into the SSH server ...
    (comp.security.ssh)
  • Re: SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permi
    ... I have tried using SSH in>> the past, and got stuck setting up the public key login (that's ... In order to use cvs with ssh, we must use public key authentication. ...
    (freebsd-questions)
  • Re: SSH, Putty and Mandrake 9.1
    ... ]> cp id_rsa.ssh ... ]Two mistakes here: there is no need to copy the private key to the server, ... Who said anything about copying it to the server? ...
    (comp.security.ssh)