Service manual

Cyclades-TS

Appendix A - Linux

Installation & Service Manual

Note 1: Some ssh clients do not allow just this type of authentication, for security reasons.

Note 2: To access the serial port, the TS must be configured for local authentication.

Note 3: No root user should be used as username.

2. Only RhostsRSAAuthentication yes in sshd_config

• One of the RhostsAuthentication above settings

• Client machine’s host key ($ETC/ssh_host_key.pub) copied into the TS /tmp/known_hosts file. The client

hostname plus the information inside this file must be appended in one single line inside the file /etc/ssh/

ssh_known_hosts or ~/.ssh/known_hosts and IgnoreUserKnownHosts no inside sshd_config. The follow-

ing commands can be used for example:

echo –n “client_hostname “ >> /etc/ssh/ssh_known_hosts or ~/.ssh/known_hosts

cat /tmp/known_hosts >> /etc/ssh/ssh_known_hosts or ~/.ssh/known_hosts

• client start-up command: ssh -t <TS_ip or Serial_port_ip>

Note 1: “client_hostname” should be the DNS name.

Note 2: To access the serial port, the TS must be configured for local authentication.

Note 3: No root user should be used as username.

3. Only RSAAuthentication yes in sshd_config

• Removal of TS’s *.equiv, ~/.?hosts, and *known_hosts files

• client identity created by ssh-keygen and its public part (~/.ssh/identity.pub) copied into TS’s ~/.ssh/

authorized_keys