OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [suse-security] SCP-proxy / SFTP-proxy wanted

From: Dirk Schreiner (dirk.schreinertria.de)
Date: Sat Jul 19 2003 - 17:49:12 CDT


Hi *,

UPS. (But seems nobody did see ;-))
Please change Public and Private Key in the
Description. Of course WinScp is the Client
and therefore holds the Private-Key.
So the Public-Key is stored on the Gateway.

As usual this is done in known_hosts.
To force a single Command in in the Key just
add the command as shown in front of the Key
in the same Line in known_hosts.

command="ssh -l user Server.com" ...key..

Greetings
        Dirk

Dr. Christoph Wegener schrieb:

> Hi Dirk,
> well now were are only using a key pair for authentication of
> the login to the gateway. But your suggestion sounds very
> interesting. To be honest: how can I implement a command to the
> private key?
>
> Have a nice weekend...
> Christoph
>
> 18.7.2003 16:33:48, "Schreiner, Dirk" <Dirk.Schreinertria.de>
> wrote:
>
>
>>Generate a Public-Private Key pair with Passphrase for
>>each User.
>>
>>Put the Public-Key in the Home-Directory of the
>>Win-User.
>>This can be opend using pagent (Putty.)
>>
>>Put the Private-Key on the Gateway-Server, and implement
>>a single command in this Key.
>>(e.g. ssh -l user inside-host /bin/scp ;-))

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here