Jsmart
03-05-2008, 03:30 AM
The LINUX and LUX appliances have password login disabled by default. If you set port 22 on the gateway so that you can ssh into the appliance you need to configure the appliance.
There are two methods, we recommend the key based method for security reasons.
I highly suggest you create a new user and ssh in as the user then su to root.
Key based method
1. non-root - create a user as you would on any Linux server. add your public ssh key to this users .ssh/authorized_keys file. This will allow you to log directly into the appliance through the gateway as that user and "su" using whatever password you have configured for the root user.
2. root - if you must log in as root, you will need to create a key file that gets added back to the root users .ssh/authorized_keys file on boot as we overwrite that file during configuration. You can simply put the key in a file in the /appliance directory and set a line that looks like "cat /appliance/mykey >> /root/.ssh/authorized_keys" in the /appliance/appliance.sh script as it runs on boot.
Password based method
Just simply modify the /etc/ssh/sshd_config file to allow for password authentication and use the password you have set for the user you want to log in as. This is what causes most break-ins and is not recommended for any Linux server that has access to the internet.
--Jessie
There are two methods, we recommend the key based method for security reasons.
I highly suggest you create a new user and ssh in as the user then su to root.
Key based method
1. non-root - create a user as you would on any Linux server. add your public ssh key to this users .ssh/authorized_keys file. This will allow you to log directly into the appliance through the gateway as that user and "su" using whatever password you have configured for the root user.
2. root - if you must log in as root, you will need to create a key file that gets added back to the root users .ssh/authorized_keys file on boot as we overwrite that file during configuration. You can simply put the key in a file in the /appliance directory and set a line that looks like "cat /appliance/mykey >> /root/.ssh/authorized_keys" in the /appliance/appliance.sh script as it runs on boot.
Password based method
Just simply modify the /etc/ssh/sshd_config file to allow for password authentication and use the password you have set for the user you want to log in as. This is what causes most break-ins and is not recommended for any Linux server that has access to the internet.
--Jessie