Friday, July 13, 2007

How to setup ssh key based login from SPLAT to another Linux Machine.

How to setup ssh key based login from SPLAT to another Linux Machine.

1) on the linux machine, run "ssh-keygen -t rsa"
2) on the secureplatform, in expert mode:
a) cd /root/.ssh
b) ssh-keygen -t rsa
c) touch authorized_keys
d) chmod 700 authorized_keys
3) copy the id_rsa.pub from the linux machine to the SPLAT machine.
(I had to do this via scp with password FROM the SPLAT box back
to the linux machine).
4) on the spat box, "cat id_rsa.pub >> authorized_keys"
5) modify the sshd_config file on the SPLAT box as follows:
DenyUsers shutdown halt nobody ntp pcap rpm
AllowGroups admin root
6) on the splat box, "service sshd restart"
7) from the linux machine, I can do this:
[root@linux-10g .ssh]# ssh -l root 192.168.1.2
Last login: Mon Feb 21 09:27:25 2005 from 192.168.1.100
[Expert@Checkpoint-cp01]#

Thanks to the firewall-1 mailing list for this helpful tip