Howto: Ssh Basics

Title: Ssh Basics
Description: Basic how to for use of ssh client (written for new linux users)

http://wiki.suselinuxsupport.de/wikk...wakka=HowToSSH


Well it is my first one, so be gentle

comments are always welcome.


sander

Title: Ssh Basics
Description: Basic how to for use of ssh client (written for new linux users)

http://wiki.suselinuxsupport.de/wikk...wakka=HowToSSH
Well it is my first one, so be gentle

comments are always welcome.
sander
[/b]

Commentary see here http://forums.suselinuxsupport.de/index.ph...st&p=216532

This ssh stuff is neat, and I use it a fair amount. However one point about it, if you decide to use it for access outside of your DMZ (ie outside of your home LAN) then put good security measures in place.

For example, a good thing to do is disable root access.

My memory is somewhat hazy on this, but I believe this can be done by editting the file for SSH logins "/etc/ssh/sshd_config", uncommenting the line "PermitRootLogin yes" and changing it to "PermitRootLogin no "

As a "case in point", someone tried 12 times yesterday (unsuccessfully, I think), to log in to my home PC via external ssh:
http://forums.suselinuxsupport.de/index.ph...st&p=216543

This ssh stuff is neat, and I use it a fair amount. However one point about it, if you decide to use it for access outside of your DMZ (ie outside of your home LAN) then put good security measures in place.

For example, a good thing to do is disable root access.

My memory is somewhat hazy on this, but I believe this can be done by editting the file for SSH logins "/etc/ssh/sshd_config", uncommenting the line "PermitRootLogin yes" and changing it to "PermitRootLogin no "

As a "case in point", someone tried 12 times yesterday (unsuccessfully, I think), to log in to my home PC via external ssh:
http://forums.suselinuxsupport.de/index.ph...st&p=216543
[/b]

Thanks for the comment, but the this howto is not about the server but about the client and ho to solve most common problems, and the root login thinks i oncidered more advanced then the scope of the howto, it is intended for starting users.

but thanks for the comment annyway.

sander

Thanks for the comment, but the this howto is not about the server but about the client and ho to solve most common problems, and the root login thinks i oncidered more advanced then the scope of the howto, it is intended for starting users.[/b]

Fair enough.

How do you recommend new users enable only the client side, and not the server side? I installed openssh on all my pcs. Opened the ssh port. And they automatically had BOTH client and server capabiltiies. ie. It is NOT immediately obvious what one needs to DO or NOT DO to ONLY enable the client, without enabling the server. The two easily come together, with a deliniation (in the setup) not so obvious.

Fair enough.

How do you recommend new users enable only the client side, and not the server side? I installed openssh on all my pcs. Opened the ssh port. And they automatically had BOTH client and server capabiltiies. ie. It is NOT immediately obvious what one needs to DO or NOT DO to ONLY enable the client, without enabling the server. The two easily come together, with a deliniation (in the setup) not so obvious.
[/b]

Yes, your right. but as you say you first have to open the ssh port so (i know its a thin agrument) you should be save. (some what).
The howto is meant for people who need to ssh out. but maybe it is best there will be also one about the server...

maybe something to do on saturday


Sander