sshd not accepting ssh-rsa key auth after update on gentoo
Test shows, that ssh-rsa is available: It’s a bug. Workaround: Edit your /etc/sshd/sshd_conf: PubkeyAuthentication yesPubkeyAcceptedKeyTypes=+ssh-rsa
Tag: public
OpenBSD | ISAKMPD | x509 certificate authentication
Prepare OpenBSD Prepare the network interfaces. Delete /etc/mygate when using dhcp. Create /etc/sysctl.conf. net.inet.esp.enable=1 # Enable the ESP IPsec protocol net.inet.ah.enable=1 # Enable the AH IPsec protocol net.inet.ip.forwarding=1 # Enable IP forwarding for the host. net.inet.ipcomp.enable=1 # Optional: compress IP datagrams Create /etc/rc.conf.local isakmpd_flags=”” # Avoid keynote(4) policy checking ipsec=YES # Load ipsec.conf(5) rules Some […]
OpenBSD | SFTP with Logging and public key authentication
Some hints /example: * Add a group sftpgroup: sftpgroup:*:1001: * Add a user sftpuser1. * Add a home directory for this user, it’s the sftp data directory. Here we use /data/sftp/sftpuser1 * Chown this directory to drwxr-x— 4 root sftpgroup 512 Jan 5 12:53 sftpuser1 * Tune this user, always (!) use vipw, otherwise your […]
OpenBSD | isakmpd | Public key authentication
Prepare OpenBSD Prepare the network interfaces. Delete /etc/mygate when using dhcp. Create /etc/sysctl.conf. net.inet.esp.enable=1 # Enable the ESP IPsec protocol net.inet.ah.enable=1 # Enable the AH IPsec protocol net.inet.ip.forwarding=1 # Enable IP forwarding for the host. net.inet.ipcomp.enable=1 # Optional: compress IP datagrams Create /etc/rc.conf.local isakmpd_flags=”” # Avoid keynote(4) policy checking ipsec=YES # Load ipsec.conf(5) rules Some […]
bytes and bones 