Open main menu

OpenVZ Virtuozzo Containers Wiki β

Changes

Ssh keys

1,344 bytes added, 13:04, 11 September 2006
reorganized, adding some theory and intro
If {{wrongtitle|ssh keys}} OpenSSH has several authentication mechanism. The most known one is then you intend type in the password, which is then checked against the password at the remote system. While this is straightforward and does not usually require any additional setup, it is not convenient to enter the password each time. This article describes how to accomplish [[VE]]s set up a passwordless ssh login, using ssh key pairs. This can be convenient e.&nbsp;g. in cases when you use [[Checkpointing and live migration|live migration]] between nodes . == Theory == OpenSSH uses several assymmetric cryptography algorithms, where a pair of keys are generated. Those keys are known as ''public key'' and ''private key''. Public keys can then be uploaded to a remote system which you have want a passwordless access to generate . ''See more at [http://en.wikipedia.org/wiki/Public-key_cryptography wikipedia: Public-key cryptography].''' ''Your'' OpenSSH public keys are usually stored in <code>~/.ssh /id*.pub</code> files, and your private keys for these nodes and are stored in the <code>~/.ssh/id*</code> files (the ones without <code>.pub</code> suffix). If you want to let user Joe at host One to log in as user Bar at host Two, you should put these Joe@One's public keys into Bar@Two's <code>~/.ssh/authorized_keys*</code> files. This process can be automated using the following script. == The script == The following script can be used to automate a process of generating ssh key pairs and putting the appropriate place public keys to an account on a remote sidehost. [[User:Kir|Kir]] has recently written a Place the script to facilitate this operation<code>/usr/local/bin</code> or your </code>~/bin</code> and enable its execution. Take a look:
<pre>
#!/bin/bash
#
# ssh-keyput -- set up passwordless openssh login.
#
# Copyright (C) 2001, 2002, 2006 by SWsoft.