Avaya CS700 Administration And Maintenance page 243

1. Enter the command:
ssh-keygen -t [rsa | dsa]
This command generates a public/private rsa key pair. The system displays these prompts:
Enter a file in which to save the key: (/home/username/.ssh/id_rsa)
Enter passphrase: (leave blank for no passphrase)
Enter the same passphrase again:
Your identification has been saved in /home/username/.ssh/id_rsa.
Your public key has been saved in /home/username/.ssh/id_rsa.pub.
The key fingerprint is:
45:92:2d:81:1c:d8:9b:8a:ba:de:ca:4e:9b:0a:c8:18 username@and-unx11
Note:
The passphrase is not echoed on the screen. If you forget the passphrase then a
Note:
new key will have to be generated and propagated to remote systems.
2. Add the contents of the generated public key to the dcbadmin and dcbmaint accounts.
Note:
All Bridge Talk accounts that use SSH will access the .ssh/authorized_keys file.
Note:
Refer to the Bridge Talk Managing and Scheduling Conferences Guide
3. For each Bridge Talk account that you want to access, add the contents of /usr/local/etc/
ssh_host_[rsa | dsa]_key.pub to your .ssh/known_hosts file. The format is one entry per
line. Each entry uses this format:
hostname,[host ip address] [content of remote host
ssh_host_*_key.pub]
If the remote host name is not in the .ssh/known_host file then the system displays the
following message:
and-unx11~/.ssh>ssh and-unx15
The authenticity of host 'and-unx15 (10.221.10.103)' can't be established.
RSA key fingerprint is 17:a9:7f:84:5e:4d:26:58:ac:a0:38:45:df:2f:f3:38.
Are you sure you want to continue connecting (yes/no)?
Enter Yes to add the host to the known_host file.
l
Enter No if you are not positive that this is the host you want to connect to.
l
4. The SSH server (sshd) of OpenSSH is installed with the default configuration. The
configuration is stored in the default file /usr/local/etc/sshd_config. This default for
PasswordAuthentacation is set to Yes. Edit this setting to No. This change forces the SSH
server on bridge to reject an SSH client's connection using the clear text UNIX password for
authentication.
Managing System Files from a Remote Host
Issue 1 August 2007 243