Difference between revisions of "Passwordless SSH"

From The TinkerNet Wiki
Jump to navigation Jump to search
Line 15: Line 15:
 
<br />
 
<br />
  
=== ESXi1 ===
+
===ESXi1===
  
 
*<code>mkdir /vmfs/volumes/Admin/Utilities/ssl</code>
 
*<code>mkdir /vmfs/volumes/Admin/Utilities/ssl</code>
Line 28: Line 28:
 
*<code>ls -l</code>
 
*<code>ls -l</code>
 
*<code>cp /.ssh/* /vmfs/volumes/Admin/Utilities/ssl/ESXi0/keys</code>
 
*<code>cp /.ssh/* /vmfs/volumes/Admin/Utilities/ssl/ESXi0/keys</code>
*vi /etc/ssh/sshd_config
+
*<code>vi /etc/ssh/sshd_config</code>
  
 
  PermitRootLogin yes
 
  PermitRootLogin yes
Line 36: Line 36:
 
  # ?????? #
 
  # ?????? #
 
  ChallengeResponseAuthentication no
 
  ChallengeResponseAuthentication no
 +
 +
* <code>/etc/init.d/SSH restart</code>

Revision as of 23:22, 6 July 2020

ESXi0

  • mkdir /vmfs/volumes/Admin/Utilities/ssl
  • mkdir /vmfs/volumes/Admin/Utilities/ssl/ESXi1
  • mkdir /vmfs/volumes/Admin/Utilities/ssl/ESXi1/keys
  • mkdir /.ssh
  • cd /.ssh
  • /usr/lib/vmware/openssh/bin/ssh-keygen -t rsa -b 4096
  • ls
  • cat id_rsa.pub | ssh root@ESXi1 'cat >> /etc/ssh/keys-root/authorized_keys'
  • cd /etc/ssh/keys-root/
  • ls -l
  • cp /.ssh/* /vmfs/volumes/Admin/Utilities/ssl/ESXi1/keys


ESXi1

  • mkdir /vmfs/volumes/Admin/Utilities/ssl
  • mkdir /vmfs/volumes/Admin/Utilities/ssl/ESXi0
  • mkdir /vmfs/volumes/Admin/Utilities/ssl/ESXi0/keys
  • mkdir /.ssh
  • cd /.ssh
  • /usr/lib/vmware/openssh/bin/ssh-keygen -t rsa -b 4096
  • ls
  • cat id_rsa.pub | ssh root@ESXi0 'cat >> /etc/ssh/keys-root/authorized_keys'
  • cd /etc/ssh/keys-root/
  • ls -l
  • cp /.ssh/* /vmfs/volumes/Admin/Utilities/ssl/ESXi0/keys
  • vi /etc/ssh/sshd_config
PermitRootLogin yes
UsePAM yes
# only use PAM challenge-response (keyboard-interactive)
PasswordAuthentication no 
# ?????? #
ChallengeResponseAuthentication no
  • /etc/init.d/SSH restart