HI, George I am trying to follow the series to set up on my home mac. I have a couple of questions- 1) Does keys have anything to do with port number and ip address. Can I change port number after generating keys? Same as IP addresses? 2) if we ever install a new operating system on imac at home, do i need to do the whole thing again? If so what about on mac book? Do I need to do thing anything different apart from replacing the id_rsa file? 3) How does my mac book know which key to use, if i am trying to ssh in to two different macs like office imac and home i mac. 4) If I want to use screen sharing, or itunes do i need to make any changes?
Thanks for the great work.
http://www.georgestarcher.com georgestarcher
The quick answers. 1. Keys have nothing to do with network settings. The only relationship is private and public keys are a pair that go together. 2. Yes you have to setup software like you would any software if you reloaded your mac. The only difference is as long as you keep your keys somewhere you do not have to make new ones. Just put the public key back. The file on the mac you connect to is called authorized_keys, you copy your public key into that as shown in the video. 3. Because you would tell it which file to use. In this case you would have different private keys named differently instead of one file called id_rsa. If connecting to a mac at work make sure your IT department approves it. Otherwise you may be violating company policy and can risk your job in some places. 4. Yes as linked in the notes itunes sharing is a different process you can read about it on my blog. Screen sharing uses the vnc port 5900.
chin
Thanks George. Looking forward for some more episodes like these.
chin
Hi, George
It is me again! I am not able to succeed with keys. I am not sure wether my earlier message went through or not. 1) On which machines do you create keys? On laptops (clients) or Desktops(servers)? On some tutorials they are instructing to generate keys on laptop and place authorized keys on server. Doesn't it matter as long authorized key is on server and pvt and public keys are on laptop? 2) How do you add more than one authorized keys. Because I want to access my iMac(server) both from my mac book (client) and my mac pro(client) at work. How do i append? Is it just cut and past at the end of first authorized key? 3) Is authorized_keys2 ibetter than authorized_key?
Thanks for any help.
chin
Hi, GeorgernrnMe again. I faced one more problem. I want to ssh into my imac at home, from my mac book and mac pro from work. That means I need to keep two authorized keys in the same folder on imac. But second one is over writng the first one. When I googled it, it says we need to append the authorized keys. I am not clear what that means.rnAlso I am reading that authorized_key2 is safer than authorized_key. Is that true.rnrnThanks for all the help.rnrn
http://www.georgestarcher.com georgestarcher
It doesn't matter which machine you create the keys on. The private goes on the laptop the public on the server. The public and any other public go in the authorized_keys file. yes you can stack them, one per line. Just use authorized_keys on a mac and you will be fine.
chin
Hi, George
Everything goes well until keys are created. When I tried to login it says “permission denied(publickey)”. But everything works If I revert it to access with passwords instead of keys. I am not sure why It is causing problems with keys. In fact it asks for pass-phrase, I also can see my own banner. But denies access. Is there any criteria for the pass phrase such as number of characters. Mine 79pitha59. I am going to change it gain. Do you see this kind of pass phrase causing problems.
Thank you for your patience.
chin
Hi, GeorgernrnI am not able to get keys part working. It asks for password for pvt key, when I type it says access denied(publickey). But if I reverts back to password mode everything is fine. Is there any criteria for passphrase like number of characters. the one I used is 79pitha59. Do you see any problems with that kind of passphrase. I can see my banner but it doesn’t take my passphrase that i put for pvt key.rnrnDo i need to check anything particular in my sshd_config file?
http://www.georgestarcher.com georgestarcher
No that passphrase is not an issue. You must be missing something else fundamental. Something like the authorized_keys file not being in the .ssh subdirectory under the user account you are trying to log in as.
chin
Hi, I checked the location of authorized_keys. It is in ~/ .ssh. Any thoughts. Thanks-chin
http://www.webhostingreviewz.com/ web hosting review
I read alot about SSH, but it's first time to learn something serious.
Pingback: OpenDNS and SSH for Mac | George Starcher