Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Secure-Shell
[Top] [All Lists]

Re: Pubkey

Subject: Re: Pubkey
Date: Sun, 28 Nov 2004 01:29:16 +0200 (IST)
On Fri, 26 Nov 2004, Richard wrote:
what is the recommended procedure to permit the pubkey authetication in a
secure environment?

1.- The administrator creates a login account for Kate and Kate generates the
key pair. Kate uses the login account to connect to the remote host and
appends the pubkey into the authorized_keys. Kate can connect to the remote
machine with pubkey and with the login account

I think a better way is as follows:
 -- Kate creates a key pair and sends pubkey to Admin
 -- Admin verifies that it is Kate, who sends it, creates an account and adds
    the pubkey to authorized_keys
 -- Kate now is able to login using her private key and has no password at all
    (that is good since it is now impossible to guess her password)

Note that on some systems accounts are created locked and admin needs to unlock
them so that Kate can login.

-- 
Regards,
ASK

<Prev in Thread] Current Thread [Next in Thread>