Black Box LS1016A, Руководство пользователя

Страница: 291 / 450

Appendix A - New User Background Information
User Guide 291
UsePrivilegedPort yes
• One of these:
hostname or ipaddress in /etc/hosts.equiv or
/etc/ssh/shosts.equiv
hostname or ipaddress and username in ~/.rhosts or ~/.shosts
and IgnoreRhosts no in sshd_config
• Client start-up command: ssh -t <BLACK BOX ® Advanced Console Server_ip or
Serial_port_ip> (if the ssh client is running under a session belonging to a user-
name present both in the workstation’s database and the BLACK BOX
®
Advanced
Console Server’s database).
• Client start-up command: ssh -t -l <username> <BLACK BOX ® Advanced Console
Server_ip or Serial_port_ip> (if the ssh client is running under a session belonging
to a username present only in the workstation’s database. In this case, the <user-
name> indicated would have to be a username present in the BLACK BOX
®
Advanced Console Server’s database).
Step 2: Only RhostsRSAAuthentication yes in sshd_config.
• One of the RhostsAuthentication settings, described in Step 1.
• Client machine’s host key ($ETC/ssh_host_key.pub) copied into the
TS/tmp/known_hosts file. The client hostname plus the information inside this file
must be appended in one single line inside the file /etc/ssh/ ssh_known_hosts or
~/.ssh/known_hosts and IgnoreUserKnownHosts no inside sshd_config. The fol-
lowing commands can be used for example:
echo ‘n ‘client_hostname ‘ >> /etc/ssh/ssh_known_hosts or ~/.ssh/
known_hosts
Note: For security reasons, some ssh clients do not allow just this type of
authentication. To access the serial port, the BLACK BOX ® Advanced Console
Server must be configured for local authentication. No root user should be used
as username.