openssh

Description:

An open source implementation of SSH protocol versions 1 and 2

Changes on AnNyung:

  1. X 의존성 제거
  2. 서버 기본 설정 변경 (/etc/ssh/sshd_config)
    • KeyRegenerationInterval 0
    • UseDNS no
    • GSSAPIAuthentication no
    • X11Forwarding no
    • Banner /etc/issue.net
    • AcceptEnv 에 USER_LANG 환경 변수 추가
  3. 클라이언트 기본 설정 변경 (/etc/ssh/ssh_config)
    • GSSAPIAuthentication no
    • ForwardX11Trusted no
    • SendEnv 에 USER_LANG 환경 변수 추가
  4. Banner 지시자에 지정된 파일(/etc/issue.net_)에 Magic Cookie 지원
  5. ssh client에서 IDN 지원
    [root@an3 ~]$ ssh 청와대.com -v
    OpenSSH_6.6.1, OpenSSL 1.0.1e-fips 11 Feb 2013
    debug1: Reading configuration data /etc/ssh/ssh_config
    debug1: /etc/ssh/ssh_config line 49: Applying options for *
    debug1: Connecting to 청와대.com [211.234.63.232] port 22.
    ^C
    [root@an3 ~]$
    
  6. host key check skip 옵션 추가 (-H)
    • 아래 예제는 둘다 동일한 방법임.
      [oops@an3 ~]$ ssh -H test.com
      [oops@an3 ~]$ ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no test.com
      

Sub packages:

  • openssh-clients - An open source SSH client applications
  • openssh-keycat - A mls keycat backend for openssh
  • openssh-ldap - A LDAP support for open source SSH server daemon
  • openssh-server - An open source SSH server daemon
  • openssh-server-sysvinit - The SysV initscript to manage the OpenSSH server.
  • pam_ssh_agent_auth - PAM module for authentication with ssh-agent

results matching ""

    No results matching ""