SSH: THE SECURE SHELL GUIDE
1 1 WHAT IS SSH? 1 2 WHAT SSH IS NOT 1 3 THE SSH PROTOCOL 1 4 OVERVIEW OF SSH FEATURES 1 5 HISTORY OF SSH 1 6 RELATED TECHNOLOGIES 1 7 SUMMARY 2 BASIC CLIENT USE 2 1 A RUNNING EXAMPLE 2 2 REMOTE TERMINAL SESSIONS WITH SSH 2 3 ADDING COMPLEXITY TO THE EXAMPLE 2 4 AUTHENTICATION BY CRYPTOGRAPHIC KEY 2 5 THE SSH AGENT 2 6 CONNECTING WITHOUT A PASSWORD OR PASSPHRASE 2 7 MISCELLANEOUS CLIENTS 2 8 SUMMARY 3 INSIDE SSH 3 1 OVERVIEW OF FEATURES 3 2 A CRYPTOGRAPHY PRIMER 3 3 THE ARCHITECTURE OF AN SSH SYSTEM 3 4 INSIDE SSH-1 3 5 INSIDE SSH-2 3 6 AS-USER ACCESS (USERFILE) 3 7 RANDOMNESS 3 8 SSH AND FILE TRANSFERS (SCP AND SFTP) 3 9 ALGORITHMS USED BY SSH 3 10 THREATS SSH CAN COUNTER 3 11 THREATS SSH DOESN’T PREVENT 3 12 SUMMARY 4 INSTALLATION AND COMPILE-TIME CON?GURATION 4 1 SSH1 AND SSH2 4 2 F-SECURE SSH SERVER 4 3 OPENSSH 4 4 SOFTWARE INVENTORY 4 5 REPLACING R-COMMANDS WITH SSH 4 6 SUMMARY 5 SERVERWIDE CON?GURATION 5 1 THE NAME OF THE SERVER 5 2 RUNNING THE SERVER 5 3 SERVER CONFIGURATION: AN OVERVIEW 5 4 GETTING READY: INITIAL SETUP 5 5 LETTING PEOPLE IN: AUTHENTICATION AND ACCESS CONTROL 5 6 USER LOGINS AND ACCOUNTS 5 7 SUBSYSTEMS 5 8 HISTORY, LOGGING, AND DEBUGGING 5 9 COMPATIBILITY BETWEEN SSH-1 AND SSH-2 SERVERS 5 10 SUMMARY 6 KEY MANAGEMENT AND AGENTS 6 1 WHAT IS AN IDENTITY? 6 2 CREATING AN IDENTITY 6 3 SSH AGENTS 6 4 MULTIPLE IDENTITIES 6 5 SUMMARY 7 ADVANCED CLIENT USE 7 1 HOW TO CONFIGURE CLIENTS 7 2 PRECEDENCE 7 3 INTRODUCTION TO VERBOSE MODE 7 4 CLIENT CONFIGURATION IN DEPTH 7 5 SECURE COPY WITH SCP 7 6 SUMMARY 8 PER-ACCOUNT SERVER CON?GURATION 8 1 LIMITS OF THIS TECHNIQUE 8 2 PUBLIC KEY-BASED CONFIGURATION 8 3 TRUSTED-HOST ACCESS CONTROL 8 4 THE USER RC FILE 8 5 SUMMARY 9 PORT FORWARDING AND X FORWARDING 9 1 WHAT IS FORWARDING? 9 2 PORT FORWARDING 9 3 X FORWARDING 9 4 FORWARDING SECURITY: TCP-WRAPPERS AND LIBWRAP 9 5 SUMMARY 10 A RECOMMENDED SETUP 10 1 THE BASICS 10 2 COMPILE-TIME CONFIGURATION 10 3 SERVERWIDE CONFIGURATION 10 4 PER-ACCOUNT CONFIGURATION 10 5 KEY MANAGEMENT 10 6 CLIENT CONFIGURATION 10 7 REMOTE HOME DIRECTORIES (NFS, AFS) 10 8 SUMMARY 11 CASE STUDIES 11 1 UNATTENDED SSH: BATCH OR CRON JOBS 11 2 FTP FORWARDING 11 3 PINE, IMAP, AND SSH 11 4 KERBEROS AND SSH 11 5 CONNECTING THROUGH A GATEWAYHOST 12 TROUBLESHOOTING AND FAQ 12 1 DEBUG MESSAGES: YOUR FIRST LINE OF DEFENSE 12 2 PROBLEMS AND SOLUTIONS 12 3 OTHER SSH RESOURCES 12 4 REPORTING BUGS 13 OVERVIEW OF OTHER IMPLEMENTATIONS 13 1 COMMON FEATURES 13 2 COVERED PRODUCTS 13 3 TABLE OF PRODUCTS 13 4 OTHER SSH-RELATED PRODUCTS 14 SSH1 PORT BY SERGEY OKHAPKIN (WINDOWS) 14 1 OBTAINING AND INSTALLING CLIENTS 14 2 CLIENT USE 14 3 OBTAINING AND INSTALLING THE SERVER 14 4 TROUBLESHOOTING 14 5 SUMMARY 15 SECURECRT (WINDOWS) 15 1 OBTAINING AND INSTALLING 15 2 BASIC CLIENT USE 15 3 KEY MANAGEMENT 15 4 ADVANCED CLIENT USE 15 5 FORWARDING 15 6 TROUBLESHOOTING 15 7 SUMMARY 16 F-SECURE SSH CLIENT (WINDOWS, MACINTOSH) 16 1 OBTAINING AND INSTALLING 16 2 BASIC CLIENT USE 16 3 KEY MANAGEMENT 16 4 ADVANCED CLIENT USE 16 5 FORWARDING 16 6 TROUBLESHOOTING 16 7 SUMMARY 17 NIFTYTELNET SSH (MACINTOSH) 17 1 OBTAINING AND INSTALLING 17 2 BASIC CLIENT USE 17 3 TROUBLESHOOTING 17 4 SUMMARY