Lantronix SLC 8000 Series, Руководство пользователя

Страница: 285 / 425

12: User Authentication
SLC™ 8000 Advanced Console Manager User Guide 285
To view or update a group:
1. In the Groups table, select the group and click the View Group button. The group attributes
and permissions will be displayed in the lower section of the page.
2. Modify the group attributes and permissions and click the Edit Group button.
To delete a group:
1. Select the group in the Groups table.
2. Click the Delete Group button.
Group Commands
Go to Group Commands to view CLI commands which correspond to the web page entries
described above.
SSH Keys
The SLC 8000 advanced console manager can import and export SSH keys to facilitate shared
key authentication for all incoming and outgoing SSH connections. By using a public/private key
pair, a user can access multiple hosts with a single passphrase, or, if a passphrase is not used, a
user can access multiple hosts without entering a password. In either case, the authentication is
protected against security attacks because both the public key and the private key are required to
authenticate. For both imported and exported SSH keys, the SLC unit supports both RSA and
DSA keys, and can import and export keys in OpenSSH and SECSH formats. Imported and
exported keys are saved with the SLC console manager configuration, and the administrator has
the option of retaining the SSH keys during a reset to factory defaults.
The SLC unit can also update the SSH RSA and DSA host keys that the SSH server uses with
site-specific host keys or reset them to the default values.
Imported Keys
Imported SSH keys must be associated with an SLC 8000 advanced console manager local user.
The key can be generated on host "MyHost" for user "MyUser," and when the key is imported into
the SLC unit, it must be associated with either "MyUser" (if "MyUser" is an existing SLC console
manager local user) or an alternate SLC local user. The public key file can be imported via SCP,
SFTP, or FTP; once imported, you can view or delete the public key. Any SSH connection into the
SLC unit from the designated host/user combination uses the SSH key for authentication.
Exported Keys
The SLC can generate SSH keys for SSH connections out of the SLC advanced console manager
for any SLC user. The SLC 8000 advanced console manager retains both the private and public
key on the SLC unit, and makes the public key available for export via SCP, SFTP, FTP, or copy
and paste. The name of the key is used to generate the name of the public key file that is exported
(for example, <keyname>.pub), and the exported keys are organized by user and key name. Once
a key is generated and exported, you can delete the key or view the public portion. Any SSH
connection out of the SLC console manager for the designated host/user combination uses the
SSH key for authentication.