host keys authentication

Scott Ruckh sruckh at gemneye.org
Fri Mar 21 05:44:01 UTC 2008


> From: redhat-list-bounces at redhat.com
> [mailto:redhat-list-bounces at redhat.com] On Behalf Of Johan Booysen
> Sent: 20 March 2008 08:58
> To: General Red Hat Linux discussion list
> Subject: host keys authentication
>
> I have an FTP server using SSH for secure file uploads/downloads.  Users
> are chrooted into their home directories, and it works very well.
>
> Now we have the requirement that a client wants to upload/download via
> some or other automated process or script, so I need to work out how to
> do that via host keys or something similar.  I understand generating
> keys using ssh-keygen, and so on, but I'm not sure of the specifics of
> allowing a user or machine on the client side to automatically
> authenticate using public keys, and making sure that they are then still
> chrooted into their home folder on the FTP server.
>
> Can anyone point me in the right direction?  I've been googling it, but
> haven't really hit upon a good source of information for this kind of
> setup yet.
>

Are you saying the client is going to be using SFTP and/or SCP and you would 
like to use Public Key Authentication (PKA) with no password?  Or are you 
trying to use FTP/s or something entirely different?  What are the clients, 
and what are the client platforms that will need to be supported?

If you are trying to implement SFTP/SCP with PKA you might take a look at 
http://www.pizzashack.org/rssh/ or http://olivier.sessink.nl/jailkit/.  I 
successfully implemented both for setting up accounts for SFTP/SCP only 
access along with PKA for password-less logins.





More information about the redhat-list mailing list