IMPLEMENTING SSH

By F. HIUNA

PART SSH BASICS CHAPTER OVERVIEW OF SSH VARIOUS USES OF SSH SECURITY REMOTE COMMAND LINE EXECUTION REMOTE FILE TRANSFER REMOTE NETWORK ACCESS SECURE MANAGEMENT PROXY SERVICES CLIENT/SERVER ARCHITECTURE FOR SSH SSH’S ENCRYPTION ARCHITECTURE BASIC MISCUES WITH SSH TYPES OF SSH CLIENTS/SERVERS BASIC SETUP OF SSH OPENSSH WINDOWS 2000 SERVER COMMERCIAL SSH WINDOWS VSHELL SSH SERVER OPTIMAL USES OF SSH SUMMARY CONTENTS CHAPTER SSH SERVERS SSH COMMUNICATIONS’ SSH SERVER SSH COMMUNICATIONS’ SSH SERVER: UNIX GENERAL NETWORK CRYPTO USERS USER PUBLIC KEY AUTHENTICATION TUNNELING AUTHENTICATION HOST RESTRICTIONS USERS RESTRICTIONS SSH1 COMPATIBILITY CHROOTED ENVIRONMENT SUBSYSTEM DEFINITIONS SSH COMMUNICATIONS’ SSH SERVER: WINDOWS GENERAL SETTINGS NETWORK SETTINGS CRYPTO SETTINGS USERS SETTINGS SERVER PUBLIC KEY CONFIGURATION SERVER CERTIFICATE CONFIGURATIONS TUNNELING CONFIGURATIONS AUTHENTICATION METHODS USER RESTRICTIONS VANDYKE SOFTWARE’S VSHELL SSH SERVER GENERAL–HOST KEY GENERAL–KEY EXCHANGES GENERAL–CIPHER GENERAL–MAC GENERAL–COMPRESSION ACCESS CONTROL SFTP SECTION TRIGGERS CONNECTION FILTERS PORT-FORWARD FILTERS LOGGING COMPARISON OF OPENSSH, SSH SERVER, AND VSHELL SECURE SHELL CLIENTS COMMAND-LINE SSH CLIENTS WINDOWS INSTALLATION UNIX INSTALLATION SSH CLIENT CONFIGURATION FILE GUI SSH CLIENTS SSH COMMUNICATIONS PROFILE SETTINGS GLOBAL SETTINGS VANDYKE SOFTWARE’S SECURECRT PUTTY WINSCP MINDTERM MACSSH GENERAL OPTIONS SSH COMMUNICATIONS’ SSH SERVER (WINDOWS) SSH COMMUNICATIONS’ SSH SERVER (UNIX) OPENSSH (UNIX AND WINDOWS) PASSWORDS HOST-BASED AUTHENTICATION SERVER AUTHENTICATION PUBLIC KEYS CREATING KEYS WITH OPEHSSH HOW TO USE AN OPENSSH KEY ON AN OPENSSH SERVER HOW TO USE AN OPENSSH KEY ON SSH COMMUNICATIONS’ SSH SERVER HOW TO USE AN OPENSSH KEY ON A VSHELL SSH SERVER CREATING KEYS WITH SSH COMMUNICATIONS’ SSH CLIENT (UNIX AND WINDOWS COMMAND LINE) HOW TO USE SSH CLIENT KEYS WITH SSH COMMUNICATIONS’ SSH SERVER HOW TO USE SSH CLIENT KEYS WITH AN OPENSSH SERVER HOW TO USE SSH CLIENT KEYS WITH A VSHELL SSH SERVER CREATING KEYS WITH SSH COMMUNICATIONS (WINDOWS GUI) HOW TO UPLOAD AN SSH CLIENT KEY PAIR TO SSH COMMUNICATIONS’ SSH SERVER HOW TO UPLOAD AN SSH CLIENT KEY PAIR TO AN OPENSSH SERVER HOW TO UPLOAD AN SSH CLIENT KEY PAIR TO A VSHELL SSH SERVER CREATING KEYS WITH VANDYKE SECURECRT SSH COMMUNICATIONS’ SSH SERVER SSH AGENTS SSH MANAGEMENT NETWORK DEVICES CISCO ROUTERS CISCO SWITCHES CISCO VPN CONCENTRATOR CISCO PIX FIREWALLS NETWORK APPLIANCE FILERS MANAGEMENT SERVERS TWO-FACTOR AUTHENTICATION SOCKS MANAGEMENT SSH: USER RESTRICTIONS CHROOT USER ACCESS CONTROLS SSH USER RESTRICTIONS SSH: NETWORK ACCESS CONTROLS SSH TCP WRAPPERS SSH CONNECTION FILTERS SSH HOST RESTRICTIONS REMOTE ACCESS SOLUTIONS SSH PORT FORWARDING NETWORKING BASICS OF PORT FORWARDING FOR CLIENTS NETWORKING BASICS OF PORT FORWARDING FOR SERVERS LOCAL PORT FORWARDING FOR SSH CLIENTS CONFIGURATION FOR COMMAND-LINE CLIENTS CONFIGURATION FOR SSH COMMUNICATIONS’ GUI SSH CLIENT CONFIGURATION FOR VANDYKE SOFTWARE’S SECURE CRT CONFIGURATION FOR PUTTY REMOTE PORT FORWARDING FOR SSH CLIENTS CONFIGURATION FOR OPENSSH CLIENT (UNIX AND WINDOWS) CONFIGURATION FOR SSH COMMUNICATIONS’ COMMAND-LINE CLIENT (UNIX AND WINDOWS) CONFIGURATION FOR SSH COMMUNICATIONS’ GUI SSH CLIENT (WINDOWS) CONFIGURATION FOR VANDYKE SOFTWARE’S SECURECRT PORT FORWARDING FOR SSH SERVERS CONFIGURATION FOR OPENSSH SERVER (UNIX AND WINDOWS) CONFIGURATION FOR SSH COMMUNICATIONS’ SSH SERVER (UNIX) CONFIGURATION FOR SSH COMMUNICATIONS’ SSH SERVER (WINDOWS) CONFIGURATION FOR VANDYKE SOFTWARE’S VSHELL SSH SERVER ADVANTAGES TO SSH PORT FORWARDING SECURE REMOTE ACCESS SECURE E-MAIL WITH SSH SETTING UP THE SSH SERVER SETTING UP THE SSH CLIENT SETTING UP THE E-MAIL CLIENT EXECUTING SECURE E-MAIL SECURE FILE TRANSFER (SMB AND NFS) WITH SSH SETTING UP THE FILE SERVER CLIENTS EXECUTING SECURE FILE TRANSFER SECURE FILE SHARING WITH SMB AND SSH SECURE FILE SHARING WITH NFS AND SSH SECURE MANAGEMENT WITH SSH SETTING UP THE MANAGEMENT CLIENTS EXECUTING SECURE MANAGEMENT SECURE MANAGEMENT WITH WINDOWS TERMINAL SERVICES AND SSH SECURE MANAGEMENT WITH VNC AND SSH SECURE MANAGEMENT WITH PCANYWHERE AND SSH SECURE VPN WITH SSH (PPP OVER SSH) PPP DAEMON ON THE SERVER VPN USER AND SUDO CLIENT SCRIPT PROTOCOL REPLACEMENT SSH VERSATILITY TERMINAL ACCESS COMPROMISING A SYSTEM WITH REMOTE SHELL (RSH) COMPROMISING A SYSTEM WITH REMOTE LOGIN (RLOGIN) COMPROMISING A SYSTEM WITH REMOTE EXECUTION (REXEC) WHY ACCESS VIA SSH IS BETTER FILE TRANSFER WITH SECURE FILE TRANSFER PROTOCOL (SFTP) SFTP WITH THE OPENSSH SFTP SERVER USING OPENSSH FOR MANAGEMENT PURPOSES USING OPENSSH FOR FILE SHARING AUTHORIZING USERS WITH OPENSSH OPENSSH ON WINDOWS AND CYGDRIVE SFTP WITH VANDYKE SOFTWARE VSHELL USING VSHELL FOR MANAGEMENT PURPOSES USING VSHELL FOR FILE SHARING AUTHORIZING USERS WITH VSHELL SFTP WITH SSH COMMUNICATIONS’ SSH SERVER USING SSH COMMUNICATIONS’ SSH SERVER FOR MANAGEMENT PURPOSES USING SSH COMMUNICATIONS’ SSH SERVER FOR FILE SHARING AUTHORIZING USERS WITH SSH COMMUNICATIONS’ SSH SERVER COMPARISON OF THE THREE SFTP SOLUTIONS SECURE CHAT SECURE BACKUPS PROXY TECHNOLOGIES IN A SECURE WEB ENVIRONMENT SSH AND SOCKS DYNAMIC PORT FORWARDING AND SOCKS SECURE WEB BROWSING WITH SSH SSH VIA HTTP PROXIES SECURING WIRELESS NETWORKS WITH SSH SECURING WIRELESS WITH SSH AND HTTP PROXIES SECURING WIRELESS WITH SSH AND DYNAMIC PORT FORWARDING SSH CASE STUDIES CASE STUDY #1: SECURE REMOTE ACCESS THE PROBLEM SITUATION BUSINESS REQUIREMENTS CONFIGURATION SSH CLIENT CONFIGURATION SSH SERVER CONFIGURATION RESULTS CHECKLIST CASE STUDY #2: SECURE WIRELESS CONNECTIVITY THE PROBLEM CASE STUDY #3: SECURE FILE SERVERS