SSH

Question 1

Dir contains pub and private keys on local machine

Answer 1

~/.ssh

After connecting using ssh, remote host’s finger print will be added to ~/.ssh/known_host file of local machine

Question 2

Generate pub/priv pair of keys on local machine

Answer 2

ssh-keygen -t dsa

default encryption is rsa: ssh-keygen -t rsa= ssh-keygen

Question 3

File contains authorized keys on remote machine

Answer 3

~/.ssh/authorized_keys

Question 4

Global client side conf file of ssh

Answer 4

/etc/ssh/ssh_config

here port to connect to ssh server can be set up

Question 5

Global server side conf file of ssh

Answer 5

/etc/sshd_config
1. 22 port be redefined to accept connections from
2. Root user can be restricted to access to
3. add AllowUsers user1
add AllowGroups
to allow only specified users and/or groups to

Question 6

TCPWrappers

Answer 6

create hosts.allow and/or hosts deny in /etc dir
vim /etc/hosts.allow
sshd : 1.2.3.4, 1.2.3.5
vim /etc/hosts.deny
sshd : ALL
hosts.allow supersedes hosts.deny

Question 7

Add to cache passphrase for current ssh session

Answer 7

ssh user@server
ssh-agent bash
ssh-add
so for this session, there will be no need to enter a passphrase again:
ssh user@server cd .ssh; ls -la=>
remote server will not ask for passphrase