257 lines
4.8 KiB
HTML
257 lines
4.8 KiB
HTML
<HTML
|
|
><HEAD
|
|
><TITLE
|
|
>Configure and optimise Openssh</TITLE
|
|
><META
|
|
NAME="GENERATOR"
|
|
CONTENT="Modular DocBook HTML Stylesheet Version 1.60"><LINK
|
|
REL="HOME"
|
|
TITLE="Securing and Optimizing Linux"
|
|
HREF="index.html"><LINK
|
|
REL="UP"
|
|
TITLE="Software -Securities"
|
|
HREF="soft-netsecured.html"><LINK
|
|
REL="PREVIOUS"
|
|
TITLE="OpenSSH"
|
|
HREF="chap15sec119.html"><LINK
|
|
REL="NEXT"
|
|
TITLE="Configure the /etc/ssh/ssh_config file"
|
|
HREF="chap15sec121.html"></HEAD
|
|
><BODY
|
|
CLASS="section"
|
|
BGCOLOR="#FFFFFF"
|
|
TEXT="#000000"
|
|
LINK="#0000FF"
|
|
VLINK="#840084"
|
|
ALINK="#0000FF"
|
|
><DIV
|
|
CLASS="NAVHEADER"
|
|
><TABLE
|
|
WIDTH="100%"
|
|
BORDER="0"
|
|
CELLPADDING="0"
|
|
CELLSPACING="0"
|
|
><TR
|
|
><TH
|
|
COLSPAN="3"
|
|
ALIGN="center"
|
|
>Securing and Optimizing Linux: RedHat Edition -A Hands on Guide</TH
|
|
></TR
|
|
><TR
|
|
><TD
|
|
WIDTH="10%"
|
|
ALIGN="left"
|
|
VALIGN="bottom"
|
|
><A
|
|
HREF="chap15sec119.html"
|
|
>Prev</A
|
|
></TD
|
|
><TD
|
|
WIDTH="80%"
|
|
ALIGN="center"
|
|
VALIGN="bottom"
|
|
>Chapter 15. Software -Securities</TD
|
|
><TD
|
|
WIDTH="10%"
|
|
ALIGN="right"
|
|
VALIGN="bottom"
|
|
><A
|
|
HREF="chap15sec121.html"
|
|
>Next</A
|
|
></TD
|
|
></TR
|
|
></TABLE
|
|
><HR
|
|
ALIGN="LEFT"
|
|
WIDTH="100%"></DIV
|
|
><DIV
|
|
CLASS="section"
|
|
><H1
|
|
CLASS="section"
|
|
><A
|
|
NAME="AEN7998"
|
|
>15.2. Configure and optimise Openssh</A
|
|
></H1
|
|
><DIV
|
|
CLASS="note"
|
|
><BLOCKQUOTE
|
|
CLASS="note"
|
|
><P
|
|
><B
|
|
><SPAN
|
|
CLASS="inlinemediaobject"
|
|
><IMG
|
|
SRC="./images/Note.gif"
|
|
ALT="Note"
|
|
></IMG
|
|
></SPAN
|
|
>: </B
|
|
>All the configuration files required for each software described in this book has been provided by us as a gzipped file, <TT
|
|
CLASS="filename"
|
|
>floppy.tgz</TT
|
|
> for your convenience. This can be downloaded from this web address: <A
|
|
HREF="appendixa.html#sc24obecfrs2"
|
|
>http://www.openna.com/books/floppy.tgz</A
|
|
>
|
|
You can unpack this to any location on your local machine, say for example <TT
|
|
CLASS="filename"
|
|
>/tmp</TT
|
|
>, assuming you have done this your directory structure will be <TT
|
|
CLASS="filename"
|
|
>/tmp/floppy</TT
|
|
>. Within this floppy directory each configuration file has its own directory
|
|
for respective software. For example <I
|
|
CLASS="wordasword"
|
|
>Openssh</I
|
|
> configuration file are organised like this:
|
|
<TABLE
|
|
BORDER="0"
|
|
BGCOLOR="#E0E0E0"
|
|
WIDTH="100%"
|
|
><TR
|
|
><TD
|
|
><PRE
|
|
CLASS="literallayout"
|
|
><TT
|
|
CLASS="computeroutput"
|
|
> total 16
|
|
-rw-r--r-- 1 harrypotter harrypotter 275 Jun 8 13:00 Compile-OpenSSH
|
|
drwxr-xr-x 2 harrypotter harrypotter 4096 Jun 8 13:00 pam.d/
|
|
-rw-r--r-- 1 harrypotter harrypotter 372 Jun 8 13:00 ssh_config
|
|
-rw-r--r-- 1 harrypotter harrypotter 467 Jun 8 13:00 sshd_config
|
|
</TT
|
|
></PRE
|
|
></TD
|
|
></TR
|
|
></TABLE
|
|
>
|
|
You can either cut and paste this directly if you are faithfully following our instructions from the begining or manually edit these to modify to your needs. This facility is there though as a convenience but please don't forget ultimately it will be your
|
|
responsibility to check, verify, <SPAN
|
|
CLASS="abbrev"
|
|
>etc.</SPAN
|
|
> before you use them whether modified or as it is.
|
|
</P
|
|
></BLOCKQUOTE
|
|
></DIV
|
|
><P
|
|
> To run OpenSSH Client/Server, the following files are required and must be created or copied to the appropriate directories on your server.
|
|
<P
|
|
></P
|
|
><UL
|
|
><LI
|
|
><P
|
|
> Copy the ssh_config file to the <TT
|
|
CLASS="filename"
|
|
>/etc/ssh/</TT
|
|
> directory.
|
|
</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
> Copy the sshd_config file to the <TT
|
|
CLASS="filename"
|
|
>/etc/ssh/</TT
|
|
> directory.
|
|
</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
> Copy the sshd file to the <TT
|
|
CLASS="filename"
|
|
>/etc/pam.d/</TT
|
|
> directory.
|
|
</P
|
|
></LI
|
|
></UL
|
|
>
|
|
</P
|
|
><DIV
|
|
CLASS="tip"
|
|
><BLOCKQUOTE
|
|
CLASS="tip"
|
|
><P
|
|
><B
|
|
><SPAN
|
|
CLASS="inlinemediaobject"
|
|
><IMG
|
|
SRC="./images/Tip.gif"
|
|
ALT="Tip"
|
|
></IMG
|
|
></SPAN
|
|
>: </B
|
|
>
|
|
You can obtain the configuration files listed in the next sections on our <TT
|
|
CLASS="filename"
|
|
>floppy.tgz</TT
|
|
> archive. Copy the following files from the decompressed
|
|
<TT
|
|
CLASS="filename"
|
|
>floppy.tgz</TT
|
|
> archive to the appropriate places, or copy them directly from this book to the concerned file.
|
|
</P
|
|
></BLOCKQUOTE
|
|
></DIV
|
|
></DIV
|
|
><DIV
|
|
CLASS="NAVFOOTER"
|
|
><HR
|
|
ALIGN="LEFT"
|
|
WIDTH="100%"><TABLE
|
|
WIDTH="100%"
|
|
BORDER="0"
|
|
CELLPADDING="0"
|
|
CELLSPACING="0"
|
|
><TR
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="left"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="chap15sec119.html"
|
|
>Prev</A
|
|
></TD
|
|
><TD
|
|
WIDTH="34%"
|
|
ALIGN="center"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="index.html"
|
|
>Home</A
|
|
></TD
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="right"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="chap15sec121.html"
|
|
>Next</A
|
|
></TD
|
|
></TR
|
|
><TR
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="left"
|
|
VALIGN="top"
|
|
>OpenSSH</TD
|
|
><TD
|
|
WIDTH="34%"
|
|
ALIGN="center"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="soft-netsecured.html"
|
|
>Up</A
|
|
></TD
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="right"
|
|
VALIGN="top"
|
|
>Configure the <TT
|
|
CLASS="filename"
|
|
>/etc/ssh/ssh_config file</TT
|
|
></TD
|
|
></TR
|
|
></TABLE
|
|
></DIV
|
|
></BODY
|
|
></HTML
|
|
> |