Model 9289
Spectracom Corporation
NetClock/NTP Network Time Provider Instruction Manual
3-72
An example of a user adding a public key to the authorized_keys file is shown below.
Users are required to create private and public key pairs on their workstation or within a private
area in their network account. These keys may be RSA or DSA and may be any key bit length
as supported by the SSH client tool. These public keys are stored in a file in the .ssh directory
named authorized_keys. The file is to be formatted such that the key is followed by the optional
comment with only one key per line. The file format, line terminations, and other EOL or EOF
characters should correspond to UNIX conventions, not Windows.
If a user deletes all Public Keys Public/Private Key Authentication is disabled. If the user has
selected SSH authentication using the “Public Key with Passphrase” option login and file
transfers will be forbidden. The user must select a method allowing the use of account
password authentication to enable login or file transfers using SCP or SFTP.
If a user wants to completely control the public keys used for authentication, a correctly
formatted authorized_keys file formatted as indicated in the OpenSSH web site can be loaded
onto a secure Spectracom product. The user transfers a new public key file using an insecure
FTP client or a secure SCP or SFTP client using only account password authentication. The
user should place the new public key’s file in the .ssh directory.
Secure shell sessions using an SSH client can be performed using the admin or a user-defined
account. The user may use Account Password or Public Key with Passphrase authentication.
The OpenSSH tool SSH-KEYGEN may be used to create RSA and DSA keys used to identify
and authenticate user login or file transfers.
The following command lines for OpenSSH SSH client tool are given as examples of how to
create an SSH session.
Creating an SSH session with Password Authentication for the admin account:
ssh
[email protected]'s password: admin123
The user is now presented with Boot up text and/or a “>” prompt which allows the use of the
Spectracom command line interface.
Creating an SSH session using Public Key with Passphrase Authentication for the admin
account:
The user must first provide the secure Spectracom product a RSA public key found typically in
the OpenSSH id_rsa.pub file. The user may then attempt to create an SSH session.
ssh -i ./id_rsa
Enter passphrase for key './id_rsa': mysecretpassphrase
Please consult the SSH client tool’s documentation for specifics on how to use the tool, select
SSH protocols, and provide user private keys.
3.4.15.2 Secure File Transfer
NetClocks provide secure file transfer using the SSH client tools SCP and SFTP. Authentication
is performed using either Account Passwords or Public Key with Passphrase. However, unlike
SSH, in which the admin or a user-defined account is used, a special user account is provided
Summary of Contents for 9289
Page 18: ...Model 9289 Spectracom Corporation NetClock NTP Network Time Provider Instruction Manual 1 8...
Page 36: ...Model 9289 Spectracom Corporation NetClock NTP Network Time Provider Instruction Manual 2 18...
Page 154: ...Model 9289 Spectracom Corporation NetClock NTP Network Time Provider Instruction Manual 3 118...
