website view en/doc/handbook/secure-server.html @ rev 49
Add Security to Handbook (en)
| author | Paul Issott <paul@slitaz.org> |
|---|---|
| date | Sun May 18 22:50:22 2008 +0000 (2008-05-18) |
| parents | 65881025ee62 |
| children | f0c0c73578c0 |
line source
1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
2 <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head><title>SliTaz Handbook (en) - Template</title>
6 <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1" />
7 <meta name="description" content="slitaz English handbook" />
8 <meta name="expires" content="never" />
9 <meta name="modified" content="2008-02-26 18:30:00" />
10 <meta name="publisher" content="www.slitaz.org" />
11 <meta name="author" content="Christophe Lincoln" />
12 <link rel="shortcut icon" href="favicon.ico" />
13 <link rel="stylesheet" type="text/css" href="book.css" /></head><body bgcolor="#ffffff">
15 <!-- Header and quick navigation -->
16 <div id="header">
17 <div id="quicknav" align="right">
18 <a name="top"></a>
19 <a href="security.html">Security</a> |
20 <a href="index.html">Table of contents</a>
21 </div>
22 <h1><font color="#3e1220">SliTaz Handbook (en)</font></h1>
23 </div>
25 <!-- Content. -->
26 <div id="content">
27 <div class="content-right"></div>
29 <h2><font color="#df8f06">Secure SHell (SSH)</font></h2>
31 <ul>
32 <li><a href="#about">About Dropbear.</a></li>
33 <li><a href="#dbclient">Connecting to a remote host.</a> - (dbclient).</li>
34 <li><a href="#scp">Transfer files</a> - (scp).</li>
35 <li><a href="#dropbearkey">Generate keys rsa/dss.</a> - (dropbearkey).</li>
36 <li><a href="#start-stop-restart">Start, stop, restart SSH server.</a></li>
37 </ul>
39 <a name="about"></a>
40 <h3>About Dropbear</h3>
41 <p>
42 Control and administer remotely with the Dropbear SSH secure server. Dropbear is a small SSH client/server
43 supporting SSH 2, it's compatible with OpenSSH and uses ~/.ssh/authorized_keys for the management of public keys.
44 Dropbear also provides it's own version of <code>scp</code>, allowing you to copy files
45 between machines in a secure manner.
46 </p>
47 <p>
48 Project website:
49 <a href="http://matt.ucc.asn.au/dropbear/dropbear.html">matt.ucc.asn.au/dropbear/dropbear.html</a>
50 </p>
52 <a name="dbclient"></a>
53 <h3>Connecting to a remote host with dbclient</h3>
54 <p>
55 The configuration files for the SSH client are located in the ~/.ssh directory of each user, this contains
56 the authorized_keys and known_hosts files. The directory ~/.ssh and known_hosts file are automatically created
57 the first time you run the Dropbear client (dbclient).
58 </p>
59 <p>
60 To connect to a remote host employing the user and machine name:
61 </p>
62 <pre> $ dbclient user@machine.org
63 </pre>
64 <p>
65 You can also connect using the IP address of the machine:
66 </p>
67 <pre> $ dbclient user@192.168.0.2
68 </pre>
70 <a name="scp"></a>
71 <h3>Transfer of remote files with scp</h3>
72 <p>
73 To copy a file from one computer to another, scp can be utilized in the following ways. To copy a file
74 named page.html to a remote directory of the user (don't forget the <code>:</code> after the machine name or
75 IP address):
76 </p>
77 <pre> $ scp page.html user@machine.org:path/remote/directory
78 </pre>
79 <p>
80 Copy a file from a remote machine to your local machine:
81 </p>
82 <pre> $ scp user@machine.org:path/remote/directory/page.html /path/your/directory
83 </pre>
85 <a name="dropbearkey"></a>
86 <h3>Generate rsa/dss keys with dropbearkey</h3>
87 <p>
88 Dropbear provides <code>dropbearkey</code> to generate the protected keys rsa
89 and dss. Note that when you start the server for the first time, secure keys will be
90 automatically generated if they don't already exist. You can use <code>dropbearkey</code> with
91 the following argurments:
92 </p>
93 <pre> # dropbearkey -t rsa -f /etc/dropbear/dropbear_rsa_host_key
94 # dropbearkey -t dss -f /etc/dropbear/dropbear_dss_host_key
95 </pre>
97 <a name="start-stop-restart"></a>
98 <h3>Start, stop, restart the SSH server</h3>
99 <p>
100 By default SliTaz will not start the SSH server at boot, to be launched automatically <code>dropbear</code>
101 must be added to the variable RUN_DAEMONS in the <code>/etc/rcS.conf</code> file. To start, stop or restart
102 the SSH server; use the following commands: <code>/etc/init.d/dropbear [start|stop|restart]</code>.
103 Example to start the server:
104 </p>
105 <pre> # /etc/init.d/dropbear start
106 </pre>
107 <p>
108 Note that the server supports the passing of various options when launched. To change the default values,
109 simple modify the daemons configuration file <code>/etc/daemons.conf</code>.
110 </p>
112 <!-- End of content -->
113 </div>
115 <!-- Footer. -->
116 <div id="footer">
117 <div class="footer-right"></div>
118 <a href="#top">Top of the page</a> |
119 <a href="http://www.slitaz.org/en/doc/handbook/index.html">Table of contents</a>
120 </div>
122 <div id="copy">
123 Copyright © 2008 <a href="http://www.slitaz.org/en/">SliTaz</a> -
124 <a href="http://www.gnu.org/licenses/gpl.html">GNU General Public License</a>;<br />
125 Documentation is under
126 <a href="http://www.gnu.org/copyleft/fdl.html">GNU Free Documentation License</a>
127 and code is <a href="http://validator.w3.org/">valid xHTML 1.0</a>.
128 </div>
130 </body></html>