RE: Using Key Pairs on OpenSSH on Win2k3
"Robert Denton" <[email protected]> Wed, 28 May 2008 15:56:32 -0700
| Newsgroups | gmane.network.ssh.windows |
|---|---|
| Organization | Headsprout |
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. -------------0bbca2b7cfcf125baadd021ae19d0ba3 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Okay, let me see if I can explain my set up a little bit. And you might= be right about there being no connection between openssh and the ssl us= ed to connect to the https server, but here goes: user@svnserver ---(ssh)---> admin@devserver ---(https)---> svnserver Seems weird to do it that way, but in order to maintain a mirror of our= code on the dev server we need to issue an 'update' command to the svn = client on the dev server where we want the mirror, and this is triggered= by a process on the svn server itself. The first part seems to be work= ing with one weird exception: If I log onto the devserver and launch a command prompt, the command 'sv= n' is known by virtue of path. Oddly, if I ssh to that server as the sam= e user, the command 'ssh' is not known. Does Cygwin (or OpenSSH) maintai= n it's own path variable=3F If so, where is it kept=3F Robert=20 =5F=5F=5F=5F=5F =20 From: Welsh, Armand [mailto:[email protected]] To: [email protected] Sent: Wed, 28 May 2008 14:33:24 -0700 Subject: RE: Using Key Pairs on OpenSSH on Win2k3 =20 I don't think the copSSH and the https based activities are related. = Regarding the connection to the other server (via https), how is this = connection established=3F I need more information to understand the i= ssue. Are you connecting (via ssh) to the server, and then on the ser= ver using wget or other command line util to get something from a web = server=3F If you are using an SSH tunnel to connect to the https serv= er using the ssh server as a middle point then I would need to know wh= at client libraries on your client computer are used to establish the = https session. =20 =20 Armand =20 =5F=5F=5F=5F=5F =20 From: [email protected] [mailto:[email protected]] On Behalf Of Robe= rt Denton Sent: Wednesday, May 28, 2008 12:49 PM To: [email protected] Subject: Re: Using Key Pairs on OpenSSH on Win2k3 =20 So I took your advice and installed CopSSH instead and it is working a= s desired, with one minor snag. First, the application I am using this = for is to connect to the copssh server and run some commands. One of = the commands involves connection to a different server via https. Whe= n I do this I get prompted to accept the certificate. Choosing 'p' fo= r permanent has no effect. Advice I have gotten from other forums is that I need to download Como= do's Trusted Root Certificate and append it to the end of the ca-bundl= e.crt that is used by OpenSSH. Unfortunately a search of the system y= ields no such file. Where does CopSSH place this file=3F And do you = agree that this is the recommended course of action=3F Robert =5F=5F=5F=5F=5F =20 From: Welsh, Armand [mailto:[email protected]] To: [email protected] Sent: Thu, 22 May 2008 09:17:19 -0700 Subject: Re: Using Key Pairs on OpenSSH on Win2k3 Robert, Before I look into potential causes, the first I would like to know = is: are you using copSSH, the Cygwin installation with the openSSH p= ackage installed, or the "openSSH for Windows" project from source f= orge=3F Why do I ask=3F Al three are openSSH from the cygwin project the fol= lowing conditions: Cygwin is the thick install proding the option to turn you windows b= ox into a GNU Linux like operating system (via the bash or other she= ll and some special mappers built into cygwin). The cygwin project i= nstalls a basic configuration of openSSH which works well on older windo= ws systems, but requires specific things be done to get the SSH serv= er to work 100% on windows 2003 and Vista. CopSSH is a pre-packaged minimal installation of Cygwin with a coupl= e minor enhancement patches that installs Cygwin, openSSH, configure= s you computer (even vista and win2k3) so that openSSH works without= any tweaking at all. "OpenSSH for Windows" is a dead sourceforge project that is almost i= dentical to copSSH, except that development on the project has stopp= ed a long time ago, and this package requires more tweaking of the s= sh settings and the server that the other options, and is running ve= ry old ssh code that should not be used anymore in my opinion. If you want the easy solution, install copSSH and everything will wo= rk. If you want to get what you have working and you did not install= copSSH then we can offer assistance with making all the appropriate = changes, but it will take more time to get SSH services up and running = with public keys, but you will have the option of using any piece of= the cygwin project easily. Armand =20 -------------0bbca2b7cfcf125baadd021ae19d0ba3 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <!DOCTYPE html PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'> <html> <head> <meta http-equiv=3D'Content-Type' content=3D'text/html;charset=3Dus-asc= ii'> <style>BODY{font:10pt Tahoma, Verdana, sans-serif;}</style> </head> <body> Okay, let me see if I can explain my set up a little bit. And you = might be right about there being no connection between openssh and the s= sl used to connect to the https server, but here goes:<br><br>user@svnse= rver ---(ssh)---> admin@devserver ---(https)---> svnserver<br><br>= Seems weird to do it that way, but in order to maintain a mirror o= f our code on the dev server we need to issue an 'update' command to the= svn client on the dev server where we want the mirror, and this is trig= gered by a process on the svn server itself. The first part seems = to be working with one weird exception:<br><br>If I log onto the devserv= er and launch a command prompt, the command 'svn' is known by virtue of = path. Oddly, if I ssh to that server as the same user, the command 'ssh'= is not known. Does Cygwin (or OpenSSH) maintain it's own path variable= =3F If so, where is it kept=3F<br><br>Robert <br><blockquote style= =3D"border-left: 2px solid rgb(0, 0, 255); padding-left: 5px; margin-lef= t: 5px; margin-right: 0px;"><hr><b>From:</b> Welsh, Armand [mailto:Arman= [email protected]]<br><b>To:</b> [email protected]<br><b>Sent:</b> Wed,= 28 May 2008 14:33:24 -0700<br><b>Subject:</b> RE: Using Key Pairs on Op= enSSH on Win2k3<br><br> <div align=3D"left"><span class=3D"758572821-28052008">I don't think the= copSSH=20 and the https based activities are related. Regarding the connecti= on to=20 the other server (via https), how is this connection established=3F = ; I need=20 more information to understand the issue. Are you connecting (via = ssh) to=20 the server, and then on the server using wget or other command line util= to get=20 something from a web server=3F If you are using an SSH tunnel to c= onnect to=20 the https server using the ssh server as a middle point then I would nee= d to=20 know what client libraries on your client computer are used to establish= the=20 https session.</span></div> <div align=3D"left"><span class=3D"758572821-28052008"></span> </di= v> <div align=3D"left"><span class=3D"758572821-28052008">Armand</span></di= v><br> <div class=3D"OutlookMessageHeader" align=3D"left"> <hr> <b>From:</b> <a href=3D"mailto:[email protected]">[email protected]</a> = [mailto:<a href=3D"mailto:[email protected]">[email protected]</a>] <b>O= n Behalf Of=20 </b>Robert Denton<br><b>Sent:</b> Wednesday, May 28, 2008 12:49 PM<br><b= >To:</b>=20 <a href=3D"mailto:[email protected]">[email protected]</a><br><b>Subject= :</b> Re: Using Key Pairs on OpenSSH on=20 Win2k3<br><br></div> <div></div>So I took your advice and installed CopSSH instead and it is = working=20 as desired, with one minor snag. First, the application I am using= this=20 for is to connect to the copssh server and run some commands. One = of the=20 commands involves connection to a different server via https. When= I do=20 this I get prompted to accept the certificate. Choosing 'p' for pe= rmanent=20 has no effect.<br><br>Advice I have gotten from other forums is that I n= eed to=20 download Comodo's <span style=3D"margin-top: 0px; font-family: monospace= ; font-style: normal; font-variant: normal; font-weight: normal; font-si= ze: 90%; line-height: normal; font-size-adjust: none; font-stretch: norm= al;">Trusted=20 Root Certificate and append it to the end of the ca-bundle.crt that is u= sed by=20 OpenSSH. Unfortunately a search of the system yields no such file.= =20 Where does CopSSH place this file=3F And do you agree that this is= the=20 recommended course of action=3F</span><br><br>Robert<br> <blockquote style=3D"border-left: 2px solid rgb(0, 0, 255); padding-left= : 5px; margin-left: 5px; margin-right: 0px;"> <hr> <b>From:</b> Welsh, Armand [mailto:<a href=3D"mailto:Armand.Welsh@ssci= ms.com">[email protected]</a>]<br><b>To:</b>=20 <a href=3D"mailto:[email protected]">[email protected]</a><br><b>Sent:= </b> Thu, 22 May 2008 09:17:19=20 -0700<br><b>Subject:</b> Re: Using Key Pairs on OpenSSH on=20 Win2k3<br><br>Robert,<br><br>Before I look into potential causes, the = first I=20 would like to know is: are you using copSSH, the Cygwin installation w= ith the=20 openSSH package installed, or the "openSSH for Windows" project from s= ource=20 forge=3F<br><br>Why do I ask=3F Al three are openSSH from the cygwin p= roject the=20 following conditions:<br>Cygwin is the thick install proding the optio= n to=20 turn you windows box into a GNU Linux like operating system (via the b= ash or=20 other shell and some special mappers built into cygwin). The cygwin pr= oject=20 installs a basic configuration of openSSH which works well on older wi= ndows=20 systems, but requires specific things be done to get the SSH server to= work=20 100% on windows 2003 and Vista.<br><br>CopSSH is a pre-packaged minima= l=20 installation of Cygwin with a couple minor enhancement patches that in= stalls=20 Cygwin, openSSH, configures you computer (even vista and win2k3) so th= at=20 openSSH works without any tweaking at all.<br><br>"OpenSSH for Windows= " is a=20 dead sourceforge project that is almost identical to copSSH, except th= at=20 development on the project has stopped a long time ago, and this packa= ge=20 requires more tweaking of the ssh settings and the server that the oth= er=20 options, and is running very old ssh code that should not be used anym= ore in=20 my opinion.<br><br>If you want the easy solution, install copSSH and= =20 everything will work. If you want to get what you have working and you= did not=20 install copSSH then we can offer assistance with making all the approp= riate=20 changes, but it will take more time to get SSH services up and running= with=20 public keys, but you will have the option of using any piece of the cy= gwin=20 project easily.<br><br>Armand<br><br></blockquote> </blockquote><style> BODY {FONT:10pt Tahoma,Verdana,sans-serif} </style> </body></html> -------------0bbca2b7cfcf125baadd021ae19d0ba3-- -- List Info: http://erdelynet.com/ssh-l/ List Archives: http://erdelynet.com/archive/ssh-l/ To Unsubscribe: Mail mailto:[email protected] If you are having trouble unsubscribing, visit the List Info page for help.