HowTo: Configure SSH2 access to the Admin Console - Revision history

Eplanas: /* Server - Admin Console Authorized Keys */

2022-06-13T14:26:28Z

Server - Admin Console Authorized Keys

Eplanas: /* Server - Admin Console Authorized Keys */

2022-06-13T14:26:01Z

Server - Admin Console Authorized Keys

Eplanas: /* Server - Admin Console Authorized Keys */

2022-06-13T14:24:59Z

Server - Admin Console Authorized Keys

Mcaubet at 12:07, 7 August 2015

2015-08-07T12:07:49Z

Mcaubet at 12:07, 7 August 2015

2015-08-07T12:07:32Z

Mcaubet at 12:06, 7 August 2015

2015-08-07T12:06:32Z

Mcaubet at 12:06, 7 August 2015

2015-08-07T12:06:18Z

Mcaubet at 12:06, 7 August 2015

2015-08-07T12:06:05Z

Mcaubet at 12:01, 7 August 2015

2015-08-07T12:01:58Z

Mcaubet: Created page with "= Server - Admin Console Authorized Keys = * To allow SSH2 access to the Admin Console a public key needs to be added to the authorized_keys file. * SSH2 authentication in dCa..."

2015-08-07T11:02:45Z

Created page with "= Server - Admin Console Authorized Keys = * To allow SSH2 access to the Admin Console a public key needs to be added to the authorized_keys file. * SSH2 authentication in dCa..."

New page

= Server - Admin Console Authorized Keys =
* To allow SSH2 access to the Admin Console a public key needs to be added to the authorized_keys file.
* SSH2 authentication in dCache works very similar to the standard SSH2 service.
* SSH2 authorized_keys file in dCache is found in: '''/etc/dcache/admin/authorized_keys2'''
:Please notice that in dCache is called '''''authorized_keys2''''' and not authorized_keys (which historically corresponds to SSH1 access to the dCache Admin Console)

= Client - Private & Public Keys =
* In order to access to the Admin Console, SSH Keys must be generated.
* Use '''''ssh-keygen''''' in order to generate the public (id_rsa.pub) and the private (id_rsa) SSH Keys. For instance:

user@pw-mcaubet:~# ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/user/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
1d:60:95:2f:73:94:b8:5b:d6:8c:2d:d4:d2:ea:b6:de root@pw-mcaubet
The key's randomart image is:
+---[RSA 2048]----+
| o..o + |
| . .o = o |
| .= B |
| .+.O + |
| S .O . |
| . o |
| . . |
| .. |
| .. E |
+-----------------+

@@ Line 10: / Line 10: @@
 ucJLVVEDHIW8ehIirStaCupRABRxQ+Esy6+xwOeydL8o3DOtUwk9lNel2ISOLrbzwVAdUC3YxeSLV8weGv23hIXXyRrKnTESNxgnZgMRM4oW5D admin@pw-mcaubet
-Notice that the info should end like **admin@**<user>
+Notice that the info should end like '''admin@'''<user>
 = Client - Private & Public Keys =

@@ Line 9: / Line 9: @@
   jmyD0Eaa73Hg9tBubhB0Ufazlf951cMmhjsQvIFb4gWgN6gDKcnk8ka1QV5Z6MASd7JD4k28p8s /yFhtpymyYRdqg0KZGdnqh51MsIL4kkmS+jx8hINMCspHFYOe3ptFEmX4rp
 ucJLVVEDHIW8ehIirStaCupRABRxQ+Esy6+xwOeydL8o3DOtUwk9lNel2ISOLrbzwVAdUC3YxeSLV8weGv23hIXXyRrKnTESNxgnZgMRM4oW5D admin@pw-mcaubet
 = Client - Private & Public Keys =

@@ Line 8: / Line 8: @@
   ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIODhZQPz/sxK44pTdOaCVWXM2qZPJ1Zz/xOHt31LKEC/seWf1fzy0YuC9Wu++eATtKXtv2fIryj9cFOhijXmAQtYHfhNCbBA
   jmyD0Eaa73Hg9tBubhB0Ufazlf951cMmhjsQvIFb4gWgN6gDKcnk8ka1QV5Z6MASd7JD4k28p8s /yFhtpymyYRdqg0KZGdnqh51MsIL4kkmS+jx8hINMCspHFYOe3ptFEmX4rp
-ucJLVVEDHIW8ehIirStaCupRABRxQ+Esy6+xwOeydL8o3DOtUwk9lNel2ISOLrbzwVAdUC3YxeSLV8weGv23hIXXyRrKnTESNxgnZgMRM4oW5D root@pw-mcaubet
+ucJLVVEDHIW8ehIirStaCupRABRxQ+Esy6+xwOeydL8o3DOtUwk9lNel2ISOLrbzwVAdUC3YxeSLV8weGv23hIXXyRrKnTESNxgnZgMRM4oW5D admin@pw-mcaubet
 = Client - Private & Public Keys =

@@ Line 35: / Line 35: @@
   |           .. E  |
   +-----------------+
-* Add the generated '''id_rsa.pub''' to the '''/etc/dcache/admin/authorized_keys2''' in the dCache server (see [[HowTo:_Configure_SSH2_access_to_the_Admin_Console#Server - Admin Console Authorized Keys | Server - Admin Console Authorized Keys]]
+* Add the generated '''id_rsa.pub''' to the '''/etc/dcache/admin/authorized_keys2''' in the dCache server (see '''[[HowTo:_Configure_SSH2_access_to_the_Admin_Console#Server - Admin Console Authorized Keys | Server - Admin Console Authorized Keys]]''')

@@ Line 6: / Line 6: @@
 * Example of content of '''/etc/dcache/admin/authorized_keys2''':
-  ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIODhZQPz/sxK44pTdOaCVWXM2qZPJ1Zz/xOHt31LKEC/seWf1fzy0YuC9Wu++eATtKXtv2fIryj9cFOhijXmAQtYHfhNCbBAjmyD0Eaa73Hg9tBubhB0Ufazlf951cMmhjsQvIFb4gWgN6gDKcnk8ka1QV5Z6MASd7JD4k28p8s
+  ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIODhZQPz/sxK44pTdOaCVWXM2qZPJ1Zz/xOHt31LKEC/seWf1fzy0YuC9Wu++eATtKXtv2fIryj9cFOhijXmAQtYHfhNCbBA
-  /yFhtpymyYRdqg0KZGdnqh51MsIL4kkmS+jx8hINMCspHFYOe3ptFEmX4rp0ucJLVVEDHIW8ehIirStaCupRABRxQ+Esy6+xwOeydL8o3DOtUwk9lNel2ISOLrbzwVAdUC3YxeSLV8weGv23hIXXyRrKnTESNxgnZgMRM4oW5D root@pw-mcaubet
+  jmyD0Eaa73Hg9tBubhB0Ufazlf951cMmhjsQvIFb4gWgN6gDKcnk8ka1QV5Z6MASd7JD4k28p8s /yFhtpymyYRdqg0KZGdnqh51MsIL4kkmS+jx8hINMCspHFYOe3ptFEmX4rp
 = Client - Private & Public Keys =

@@ Line 4: / Line 4: @@
 * SSH2 authorized_keys file in dCache is found in: '''/etc/dcache/admin/authorized_keys2'''
 :Please notice that in dCache is called '''''authorized_keys2''''' and not authorized_keys (which historically corresponds to SSH1 access to the dCache Admin Console)
-* Example of '''/etc/dcache/admin/authorized_keys2''':
+* Example of content of '''/etc/dcache/admin/authorized_keys2''':
-  from="*.pic.es" ssh-dss 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 dcache_root@dccore01-test.pic.es
+  ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIODhZQPz/sxK44pTdOaCVWXM2qZPJ1Zz/xOHt31LKEC/seWf1fzy0YuC9Wu++eATtKXtv2fIryj9cFOhijXmAQtYHfhNCbBAjmyD0Eaa73Hg9tBubhB0Ufazlf951cMmhjsQvIFb4gWgN6gDKcnk8ka1QV5Z6MASd7JD4k28p8s/yFhtpymyYRdqg0KZGdnqh51MsIL4kkmS+jx8hINMCspHFYOe3ptFEmX4rp0ucJLVVEDHIW8ehIirStaCupRABRxQ+Esy6+xwOeydL8o3DOtUwk9lNel2ISOLrbzwVAdUC3YxeSLV8weGv23hIXXyRrKnTESNxgnZgMRM4oW5D root@pw-mcaubet
 = Client - Private & Public Keys =

@@ Line 4: / Line 4: @@
 * SSH2 authorized_keys file in dCache is found in: '''/etc/dcache/admin/authorized_keys2'''
 :Please notice that in dCache is called '''''authorized_keys2''''' and not authorized_keys (which historically corresponds to SSH1 access to the dCache Admin Console)
 = Client - Private & Public Keys =
@@ Line 9: / Line 14: @@
 * Use '''''ssh-keygen''''' in order to generate the public (id_rsa.pub) and the private (id_rsa) SSH Keys. For instance:
-  user@pw-mcaubet:~# ssh-keygen
+  user@pw-mcaubet:~$ ssh-keygen
   Generating public/private rsa key pair.
-  Enter file in which to save the key (/user/.ssh/id_rsa):
+  Enter file in which to save the key (/home/user/.ssh/id_rsa):
   Enter passphrase (empty for no passphrase):
   Enter same passphrase again:
-  Your identification has been saved in /root/.ssh/id_rsa.
+  Your identification has been saved in /home/user/.ssh/id_rsa.
-  Your public key has been saved in /root/.ssh/id_rsa.pub.
+  Your public key has been saved in /home/user/.ssh/id_rsa.pub.
   The key fingerprint is:
-d:60:95:2f:73:94:b8:5b:d6:8c:2d:d4:d2:ea:b6:de root@pw-mcaubet
+d:60:95:2f:73:94:b8:5b:d6:8c:2d:d4:d2:ea:b6:de user@pw-mcaubet
   The key's randomart image is:
   +---[RSA 2048]----+
@@ Line 30: / Line 35: @@
   |           .. E  |
   +-----------------+