RE: Using Key Pairs on OpenSSH on Win2k3
"Robert Denton" <[email protected]> Thu, 29 May 2008 09:52:48 -0700
| Newsgroups | gmane.network.ssh.windows |
|---|---|
| Organization | Headsprout |
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. -------------4e2f3b6bcc7dd9ca275ec8f96ca19eb2 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Good ideas! Based on the results below I'd say I have not really added = Subversion/bin to the path like I thought I did. Is there another way t= o accomplish this=3F echoing gets: $ echo $PATH=20 /bin:/cygdrive/c/WINDOWS/system32:/cygdrive/c/WINDOWS:cygdrive/c/Program= \ Files/Subversion/bin when foo.bat is in system32, fooing gets: $ foo.bat C:\Program Files\copSSH\home\admin>echo "Foo just ran fine."=20 "Foo just ran fine." However.... when I moved foo.bat to the Subversion/bin directory I get: $ foo.bat -bash: /cygdrive/c/WINDOWS/system32/foo.bat: No such file or directory Thus, based on these tests, it would appear that bash does not know that= I have added subversion/bin to the path. =20 Robert=20 =5F=5F=5F=5F=5F =20 From: Travis, Shane (GE Healthcare) [mailto:[email protected]] To: Robert Denton [mailto:[email protected]] Sent: Thu, 29 May 2008 09:29:34 -0700 Subject: RE: Using Key Pairs on OpenSSH on Win2k3 =20 =20 instead of 'svn' try running the command 'echo $PATH' to be sure that = it is really being set like you think it is. Always check your base = assumptions. =20 =20 If it is being set correctly, then make a one-line program called 'foo= ' and put it somewhere you think it will be seen, and run that -- all = that 'foo' should do is echo 'Foo ran just fine.' And run that. =20 =20 One of those two steps may help. =20 =20 --=20 Shane Travis <[email protected]>=20 Lead Service System Designer=20 GE Healthcare IITS - Centricity Pharmacy=20 T: 306 667 7942 F: 306 933 0111 =20 =20 =20 =5F=5F=5F=5F=5F =20 From: [email protected] [mailto:[email protected]] On Behalf Of = Robert Denton Sent: Thursday, May 29, 2008 10:26 AM To: [email protected] Subject: RE: Using Key Pairs on OpenSSH on Win2k3 =20 Hi there. This continues to baffle. I have edited the profile file= as you have recommended, as well as issued the more correct: PATH=3D"$PATH:/cygdrive/c/Program\ Files/Subversion/Subversion/bin" but I still get: admin@development ~ $ svn -bash: svn: command not found I even added a shortcut to svn.exe in windows/system32. All to no a= vail. If this is not a path issue what else could it be=3F If it w= ere a permissions problem I do not think I'd be getting the command not = found error. Robert=20 =5F=5F=5F=5F=5F =20 From: Welsh, Armand [mailto:[email protected]] To: [email protected] Sent: Wed, 28 May 2008 16:42:11 -0700 Subject: RE: Using Key Pairs on OpenSSH on Win2k3 =20 okay, so once you SSH into devserver, then you from within devserv= er you are running the svnclient. =20 =20 Assuming you are using the default configuration of copSSH, then y= our bash path comes from: =20 =20 /etc/profile =20 =20 you can edit this file to modify the EXPORT command if you wish to= change the PATH. My default /etc/profile looks like this: = =20 =20 $ cat /etc/profile =20 # If you wish to change the path for all users, it is recommende= d you edit # /etc/bash.bashrc =20 =20 syspath=3D`/bin/cygpath -S` winpath=3D`/bin/cygpath -W` export PATH=3D"/bin:$syspath:$winpath" umask 027 =20 =20 # Set a default prompt of: user@host and current=5Fdirec= tory PS1=3D'\[\033]0;\w\007 \033[32m\]\u@\h \[\033[33m\w\033[0m\] $ ' =20 Since you're probably running the default install, it should be th= e same. Just ignore the recomendation of editing /etc/bash.bashrc= since the file doesn't exist on a default copSSH install, and edi= ting the export here works just as well for such a simple installa= tion. =20 =20 See if that resolve your path issue. I recommend you change it as= follows: =20 =20 $ vi /etc/profile =20 # If you wish to change the path for all users, it is recommende= d you edit # /etc/bash.bashrc =20 =20 syspath=3D`/bin/cygpath -S` winpath=3D`/bin/cygpath -W` export PATH=3D"/bin:$syspath:$winpath:cygdrive/c/Program\ = Files/Subversion/bin" umask 027 =20 =20 # Set a default prompt of: user@host and current=5Fdirec= tory PS1=3D'\[\033]0;\w\007 \033[32m\]\u@\h \[\033[33m\w\033[0m\] $ ' =20 Also, I am not a bash pro, but I believe the proper form of the ba= sh command for setting the path is: =20 PATH=3D"$PATH:/cygdrive/c/Program\ Files/Subversion/Subversion/bin= " =20 =20 By specifying the $PATH=3D you are actually causing the shell to t= hink you want to execute the contents of $PATH, which is why you a= re receiving a No such file or directory upon the set command (it'= s a syntax error issue). =20 =20 Regards, =20 Armand =20 =20 =20 =5F=5F=5F=5F=5F =20 From: [email protected] [mailto:[email protected]] On = Behalf Of Robert Denton Sent: Wednesday, May 28, 2008 4:25 PM To: [email protected] Subject: RE: Using Key Pairs on OpenSSH on Win2k3 =20 Trying to append to the path seems to not work, also: admin@development ~ $ $PATH =3D $PATH:/cygdrive/c/Program\ Files/Subversion/bin/ -bash: /bin:/cygdrive/c/WINDOWS/system32:/cygdrive/c/WINDOWS: No s= uch file or directory This might be a key element in solving this problem. I say this si= nce if I could actually issue the svn co command from a ssh session, = then I should (in theory) be able to select 'p' for permanent, and ma= ke this problem go away. Robert=20 =5F=5F=5F=5F=5F =20 From: Robert Denton [mailto:[email protected]] To: [email protected] Sent: Wed, 28 May 2008 15:56:32 -0700 Subject: RE: Using Key Pairs on OpenSSH on Win2k3 Okay, let me see if I can explain my set up a little bit. And y= ou might be right about there being no connection between openss= h and the ssl used to connect to the https server, but here goes= : user@svnserver ---(ssh)---> admin@devserver ---(https)--= -> svnserver Seems weird to do it that way, but in order to maintain a mirro= r of our code on the dev server we need to issue an 'update' com= mand to the svn client on the dev server where we want the mirro= r, and this is triggered by a process on the svn server itself. = The first part seems to be working with one weird exception: If I log onto the devserver and launch a command prompt, the com= mand 'svn' is known by virtue of path. Oddly, if I ssh to that s= erver as the same user, the command 'ssh' is not known. Does Cygwin (or = OpenSSH) maintain it's own path variable=3F If so, where is it = kept=3F Robert=20 =5F=5F=5F=5F=5F =20 From: Welsh, Armand [mailto:[email protected]] To: [email protected] Sent: Wed, 28 May 2008 14:33:24 -0700 Subject: RE: Using Key Pairs on OpenSSH on Win2k3 =20 I don't think the copSSH and the https based activities are re= lated. Regarding the connection to the other server (via http= s), how is this connection established=3F I need more informa= tion to understand the issue. Are you connecting (via ssh) to= the server, and then on the server using wget or other comman= d line util to get something from a web server=3F If you are = using an SSH tunnel to connect to the https server using the s= sh server as a middle point then I would need to know what cli= ent libraries on your client computer are used to establish the = https session. =20 =20 Armand =20 =5F=5F=5F=5F=5F =20 From: [email protected] [mailto:[email protected]] O= n Behalf Of Robert Denton Sent: Wednesday, May 28, 2008 12:49 PM To: [email protected] Subject: Re: Using Key Pairs on OpenSSH on Win2k3 =20 So I took your advice and installed CopSSH instead and it is w= orking as desired, with one minor snag. First, the application I = am using this for is to connect to the copssh server and run some = commands. One of the commands involves connection to a differen= t server via https. When I do this I get prompted to accept t= he certificate. Choosing 'p' for permanent has no e= ffect. Advice I have gotten from other forums is that I need to downl= oad Comodo's Trusted Root Certificate and append it to the end= of the ca-bundle.crt that is used by OpenSSH. Unfortunately = a search of the system yields no such file. Where does CopSSH= place this file=3F And do you agree that this is the recomme= nded course of action=3F Robert =5F=5F=5F=5F=5F =20 From: Welsh, Armand [mailto:[email protected]] To: [email protected] Sent: Thu, 22 May 2008 09:17:19 -0700 Subject: Re: Using Key Pairs on OpenSSH on Win2k3 Robert, Before I look into potential causes, the first I would like = to know is: are you using copSSH, the Cygwin installation wi= th the openSSH package installed, or the "openSSH for Window= s" project from source forge=3F Why do I ask=3F Al three are openSSH from the cygwin project= the following conditions: Cygwin is the thick install proding the option to turn you w= indows box into a GNU Linux like operating system (via the bash = or other shell and some special mappers built into cygwin). The cygw= in project installs a basic configuration of openSSH which w= orks well on older windows systems, but requires specific th= ings be done to get the SSH server to work 100% on windows 2= 003 and Vista. CopSSH is a pre-packaged minimal installation of Cygwin with= a couple minor enhancement patches that installs Cygwin, op= enSSH, configures you computer (even vista and win2k3) so th= at openSSH works without any tweaking at all. "OpenSSH for Windows" is a dead sourceforge project that is = almost identical to copSSH, except that development on the p= roject has stopped a long time ago, and this package requires = more tweaking of the ssh settings and the server that the other = options, and is running very old ssh code that should not be used = anymore in my opinion. If you want the easy solution, install copSSH and everything= will work. If you want to get what you have working and you= did not install copSSH then we can offer assistance with ma= king all the appropriate changes, but it will take more time to = get SSH services up and running with public keys, but you will have = the option of using any piece of the cygwin project = easily. Armand =20 -------------4e2f3b6bcc7dd9ca275ec8f96ca19eb2 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <!DOCTYPE html PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'> <html> <head> <meta http-equiv=3D'Content-Type' content=3D'text/html;charset=3Dus-asc= ii'> <style>BODY{font:10pt Tahoma, Verdana, sans-serif;}</style> </head> <body> Good ideas! Based on the results below I'd say I have not really a= dded Subversion/bin to the path like I thought I did. Is there ano= ther way to accomplish this=3F<br><br>echoing gets:<br><br>$ echo $PATH = <br>/bin:/cygdrive/c/WINDOWS/system32:/cygdrive/c/WINDOWS:cygdrive/c/Pro= gram\ Files/Subversion/bin<br><br>when foo.bat is in system32, fooing ge= ts:<br><br>$ foo.bat<br><br>C:\Program Files\copSSH\home\admin>echo "= Foo just ran fine." <br>"Foo just ran fine."<br><br>However.... wh= en I moved foo.bat to the Subversion/bin directory I get:<br><br>$ foo.b= at<br>-bash: /cygdrive/c/WINDOWS/system32/foo.bat: No such file or direc= tory<br><br>Thus, based on these tests, it would appear that bash does n= ot know that I have added subversion/bin to the path. <br><br>Robe= rt <br><blockquote style=3D"border-left: 2px solid rgb(0, 0, 255); paddi= ng-left: 5px; margin-left: 5px; margin-right: 0px;"><hr><b>From:</b> Tra= vis, Shane (GE Healthcare) [mailto:[email protected]]<br><b>To:</b> Ro= bert Denton [mailto:[email protected]]<br><b>Sent:</b> Thu, 29 May 2= 008 09:29:34 -0700<br><b>Subject:</b> RE: Using Key Pairs on OpenSSH on = Win2k3<br><br> <div><font color=3D"#0000ff" face=3D"Arial"></font> </div> <div><span class=3D"386332716-29052008"><font color=3D"#0000ff" face=3D"= Arial">instead of=20 'svn' try running the command 'echo $PATH' to be sure that it is really = being=20 set like you think it is. Always check your base=20 assumptions.</font></span></div> <div><span class=3D"386332716-29052008"><font color=3D"#0000ff" face=3D"= Arial"></font></span> </div> <div><span class=3D"386332716-29052008"><font color=3D"#0000ff" face=3D"= Arial">If it is=20 being set correctly, then make a one-line program called 'foo' and put i= t=20 somewhere you think it will be seen, and run that -- all that 'foo' shou= ld do is=20 echo 'Foo ran just fine.' And run that. </font></span></div> <div><span class=3D"386332716-29052008"><font color=3D"#0000ff" face=3D"= Arial"></font></span> </div> <div><span class=3D"386332716-29052008"><font color=3D"#0000ff" face=3D"= Arial">One of those=20 two steps may help.</font></span></div> <div><font color=3D"#0000ff" face=3D"Arial"></font> </div> <p><span><font face=3D"Arial">-- </font></span><br><span><b><font face= =3D"Arial">Shane Travis <</font></b><font face=3D"Arial"><a hre= f=3D"mailto:[email protected]">[email protected]</a>></font><b></= b></span> <br><span><font face=3D"Arial">Lead Service System Designer</f= ont></span> <br><span><font face=3D"Arial">GE Healthcare IITS - Centrici= ty=20 Pharmacy</font></span> <br><span><font face=3D"Arial">T: 306 667=20 7942 F: 306 933 0111</font></span> </p> <div> </div><br> <blockquote style=3D"border-left: 2px solid rgb(0, 0, 255); padding-left= : 5px; margin-left: 5px; margin-right: 0px;"> <div class=3D"OutlookMessageHeader" align=3D"left"> <hr> <font face=3D"Tahoma"><b>From:</b> <a href=3D"mailto:[email protected]= ">[email protected]</a> [mailto:<a href=3D"mailto:[email protected]">ssh= @erdelynet.com</a>]=20 <b>On Behalf Of </b>Robert Denton<br><b>Sent:</b> Thursday, May 29, 20= 08 10:26=20 AM<br><b>To:</b> <a href=3D"mailto:[email protected]">[email protected]= m</a><br><b>Subject:</b> RE: Using Key Pairs on=20 OpenSSH on Win2k3<br></font><br></div> <div></div>Hi there. This continues to baffle. I have edit= ed the=20 profile file as you have recommended, as well as issued the more=20 correct:<br><br><span class=3D"614182923-28052008">PATH=3D"$PATH:/cygd= rive/c/Program\=20 Files/Subversion/Subversion/bin"<br><br>but I still=20 get:<br><br><a href=3D"mailto:admin@development">admin@development</a>= ~<br>$ svn<br>-bash: svn: command not=20 found<br><br>I even added a shortcut to svn.exe in windows/system32.&n= bsp; All=20 to no avail. If this is not a path issue what else could it be= =3F If=20 it were a permissions problem I do not think I'd be getting the comman= d not=20 found error.<br><br></span><br>Robert <br> <blockquote style=3D"border-left: 2px solid rgb(0, 0, 255); padding-le= ft: 5px; margin-left: 5px; margin-right: 0px;"> <hr> <b>From:</b> Welsh, Armand [mailto:<a href=3D"mailto:Armand.Welsh@ss= cims.com">[email protected]</a>]<br><b>To:</b>=20 <a href=3D"mailto:[email protected]">[email protected]</a><br><b>Sen= t:</b> Wed, 28 May 2008 16:42:11=20 -0700<br><b>Subject:</b> RE: Using Key Pairs on OpenSSH on Win2k3<br= ><br> <div align=3D"left"><span class=3D"614182923-28052008">okay, so once= you SSH into=20 devserver, then you from within devserver you are running the=20 svnclient. </span></div> <div align=3D"left"><span class=3D"614182923-28052008"></span> = </div> <div align=3D"left"><span class=3D"614182923-28052008">Assuming you = are using the=20 default configuration of copSSH, then your bash path comes=20 from:</span></div> <div align=3D"left"><span class=3D"614182923-28052008"></span> = </div> <div align=3D"left"><span class=3D"614182923-28052008">/etc/profile<= /span></div> <div align=3D"left"><span class=3D"614182923-28052008"></span> = </div> <div align=3D"left"><span class=3D"614182923-28052008">you can edit = this file to=20 modify the EXPORT command if you wish to change the PATH. My&n= bsp;=20 default /etc/profile looks like this:</span></div> <blockquote style=3D"margin-right: 0px;"> <div align=3D"left"><span class=3D"614182923-28052008"></span>&nbs= p;</div></blockquote> <div align=3D"left"><span class=3D"614182923-28052008">$ cat=20 /etc/profile</span></div> <blockquote style=3D"margin-right: 0px;"><span class=3D"614182923-28= 052008"> <div align=3D"left"># If you wish to change the path for all users= , it is=20 recommended you edit<br># /etc/bash.bashrc</div> <div> </div> <div align=3D"left"><span class=3D"614182923-28052008">syspath=3D`= /bin/cygpath=20 -S`<br>winpath=3D`/bin/cygpath -W`<br>export=20 PATH=3D"/bin:$syspath:$winpath"<br>umask 027</span></div> <div> </div> <div align=3D"left"><span class=3D"614182923-28052008"># Set a def= ault prompt of:=20 <a href=3D"mailto:user@host">user@host</a> and=20 current=5Fdirectory<br>PS1=3D'\[\033]0;\w\007<br>\033[32m\]\u@\h= =20 \[\033[33m\w\033[0m\]<br>$ '<br></span></div></span></blockquote> <div align=3D"left"><span class=3D"614182923-28052008">Since you're = probably running=20 the default install, it should be the same. Just ignore the=20 recomendation of editing /etc/bash.bashrc since the file doesn't exi= st on a=20 default copSSH install, and editing the export here works just as we= ll for=20 such a simple installation.</span></div> <div align=3D"left"><span class=3D"614182923-28052008"></span> = </div> <div align=3D"left"><span class=3D"614182923-28052008">See if that r= esolve your path=20 issue. I recommend you change it as follows:</span></div> <div align=3D"left"><span class=3D"614182923-28052008"></span> = </div> <div align=3D"left"><span class=3D"614182923-28052008">$ vi=20 /etc/profile</span></div> <blockquote style=3D"margin-right: 0px;"><span class=3D"614182923-28= 052008"> <div align=3D"left"># If you wish to change the path for all users= , it is=20 recommended you edit<br># /etc/bash.bashrc</div> <div> </div> <div align=3D"left"><span class=3D"614182923-28052008">syspath=3D`= /bin/cygpath=20 -S`<br>winpath=3D`/bin/cygpath -W`<br>export=20 PATH=3D"/bin:$syspath:$winpath:cygdrive/c/Program\=20 Files/Subversion/bin"<br>umask 027</span></div> <div> </div> <div align=3D"left"><span class=3D"614182923-28052008"># Set a def= ault prompt of:=20 <a href=3D"mailto:user@host">user@host</a> and=20 current=5Fdirectory<br>PS1=3D'\[\033]0;\w\007<br>\033[32m\]\u@\h= =20 \[\033[33m\w\033[0m\]<br>$ '</span><span class=3D"614182923-280520= 08"></span></div></span></blockquote> <div align=3D"left"><span class=3D"614182923-28052008">Also, I am no= t a bash pro,=20 but I believe the proper form of the bash command for setting the pa= th=20 is:</span></div> <div align=3D"left"><span class=3D"614182923-28052008">PATH=3D"$PATH= :/cygdrive/c/Program\=20 Files/Subversion/Subversion/bin"</span></div> <div align=3D"left"><span class=3D"614182923-28052008"></span> = </div> <div align=3D"left"><span class=3D"614182923-28052008">By specifying= the $PATH=3D you=20 are actually causing the shell to think you want to execute the cont= ents of=20 $PATH, which is why you are receiving a No such file or directory up= on the=20 set command (it's a syntax error issue).</span></div> <div align=3D"left"><span class=3D"614182923-28052008"></span> = </div> <div align=3D"left"><span class=3D"614182923-28052008">Regards,</spa= n></div> <div align=3D"left"><span class=3D"614182923-28052008">Armand</span>= </div> <div align=3D"left"><span class=3D"614182923-28052008"></span> = </div> <div align=3D"left"><span class=3D"614182923-28052008"></span> = </div> <div class=3D"OutlookMessageHeader" align=3D"left"> <hr> <b>From:</b> <a href=3D"mailto:[email protected]">[email protected]<= /a>=20 [mailto:<a href=3D"mailto:[email protected]">[email protected]</a>] = <b>On=20 Behalf Of </b>Robert Denton<br><b>Sent:</b> Wednesday, May 28, 2008 = 4:25=20 PM<br><b>To:</b> <a href=3D"mailto:[email protected]">ssh@erdelynet.= com</a><br><b>Subject:</b> RE:=20 Using Key Pairs on OpenSSH on Win2k3<br><br></div> <div></div>Trying to append to the path seems to not work, also:<br>= <br><a href=3D"mailto:admin@development">admin@development</a> ~<br>$ $P= ATH =3D=20 $PATH:/cygdrive/c/Program\ Files/Subversion/bin/<br>-bash:=20 /bin:/cygdrive/c/WINDOWS/system32:/cygdrive/c/WINDOWS: No such file = or=20 directory<br><br>This might be a key element in solving this problem= . I say=20 this since if I could actually issue the svn co command from a ssh s= ession,=20 then I should (in theory) be able to select 'p' for permanent, and m= ake this=20 problem go away.<br><br>Robert <br> <blockquote style=3D"border-left: 2px solid rgb(0, 0, 255); padding-= left: 5px; margin-left: 5px; margin-right: 0px;"> <hr> <b>From:</b> Robert Denton [mailto:<a href=3D"mailto:robert@headsp= rout.com">[email protected]</a>]<br><b>To:</b>=20 <a href=3D"mailto:[email protected]">[email protected]</a><br><b>S= ent:</b>=20 Wed, 28 May 2008 15:56:32 -0700<br><b>Subject:</b> RE: Using Key P= airs on=20 OpenSSH on Win2k3<br><br>Okay, let me see if I can explain my set = up a=20 little bit. And you might be right about there being no conn= ection=20 between openssh and the ssl used to connect to the https server, b= ut here=20 goes:<br><br><a href=3D"mailto:user@svnserver">user@svnserver</a>= =20 ---(ssh)---> <a href=3D"mailto:admin@devserver">admin@devserver= </a>=20 ---(https)---> svnserver<br><br>Seems weird to do it that way, = but in=20 order to maintain a mirror of our code on the dev server we = need to=20 issue an 'update' command to the svn client on the dev server wher= e we=20 want the mirror, and this is triggered by a process on the svn ser= ver=20 itself. The first part seems to be working with one weird=20 exception:<br><br>If I log onto the devserver and launch a command= prompt,=20 the command 'svn' is known by virtue of path. Oddly, if I ssh to t= hat=20 server as the same user, the command 'ssh' is not known. Does Cygw= in (or=20 OpenSSH) maintain it's own path variable=3F If so, where is = it=20 kept=3F<br><br>Robert <br> <blockquote style=3D"border-left: 2px solid rgb(0, 0, 255); paddin= g-left: 5px; margin-left: 5px; margin-right: 0px;"> <hr> <b>From:</b> Welsh, Armand [mailto:<a href=3D"mailto:Armand.Wels= [email protected]">[email protected]</a>]<br><b>To:</b>=20 <a href=3D"mailto:[email protected]">[email protected]</a><br><b= >Sent:</b>=20 Wed, 28 May 2008 14:33:24 -0700<br><b>Subject:</b> RE: Using Key= Pairs=20 on OpenSSH on Win2k3<br><br> <div align=3D"left"><span class=3D"758572821-28052008">I don't t= hink the copSSH=20 and the https based activities are related. Regarding the= =20 connection to the other server (via https), how is this connecti= on=20 established=3F I need more information to understand the= =20 issue. Are you connecting (via ssh) to the server, and the= n on the=20 server using wget or other command line util to get something fr= om a web=20 server=3F If you are using an SSH tunnel to connect to the= https=20 server using the ssh server as a middle point then I would need = to know=20 what client libraries on your client computer are used to establ= ish the=20 https session.</span></div> <div align=3D"left"><span class=3D"758572821-28052008"></span>&n= bsp;</div> <div align=3D"left"><span class=3D"758572821-28052008">Armand</s= pan></div><br> <div class=3D"OutlookMessageHeader" align=3D"left"> <hr> <b>From:</b> <a href=3D"mailto:[email protected]">ssh@erdelynet.= com</a>=20 [mailto:<a href=3D"mailto:[email protected]">[email protected]</= a>] <b>On=20 Behalf Of </b>Robert Denton<br><b>Sent:</b> Wednesday, May 28, 2= 008=20 12:49 PM<br><b>To:</b> <a href=3D"mailto:[email protected]">ssh@= erdelynet.com</a><br><b>Subject:</b>=20 Re: Using Key Pairs on OpenSSH on Win2k3<br><br></div> <div></div>So I took your advice and installed CopSSH instead an= d it is=20 working as desired, with one minor snag. First, the applic= ation I=20 am using this for is to connect to the copssh server and run som= e=20 commands. One of the commands involves connection to a dif= ferent=20 server via https. When I do this I get prompted to accept = the=20 certificate. Choosing 'p' for permanent has no=20 effect.<br><br>Advice I have gotten from other forums is that I = need to=20 download Comodo's <span style=3D"margin-top: 0px; font-family: m= onospace; font-style: normal; font-variant: normal; font-weight: normal;= font-size: 90%; line-height: normal; font-size-adjust: none; font-stret= ch: normal;">Trusted=20 Root Certificate and append it to the end of the ca-bundle.crt t= hat is=20 used by OpenSSH. Unfortunately a search of the system yiel= ds no=20 such file. Where does CopSSH place this file=3F And = do you=20 agree that this is the recommended course of=20 action=3F</span><br><br>Robert<br> <blockquote style=3D"border-left: 2px solid rgb(0, 0, 255); padd= ing-left: 5px; margin-left: 5px; margin-right: 0px;"> <hr> <b>From:</b> Welsh, Armand [mailto:<a href=3D"mailto:Armand.We= [email protected]">[email protected]</a>]<br><b>To:</b>=20 <a href=3D"mailto:[email protected]">[email protected]</a><br>= <b>Sent:</b>=20 Thu, 22 May 2008 09:17:19 -0700<br><b>Subject:</b> Re: Using K= ey Pairs=20 on OpenSSH on Win2k3<br><br>Robert,<br><br>Before I look into= =20 potential causes, the first I would like to know is: are you u= sing=20 copSSH, the Cygwin installation with the openSSH package insta= lled, or=20 the "openSSH for Windows" project from source forge=3F<br><br>= Why do I=20 ask=3F Al three are openSSH from the cygwin project the follow= ing=20 conditions:<br>Cygwin is the thick install proding the option = to turn=20 you windows box into a GNU Linux like operating system (via th= e bash=20 or other shell and some special mappers built into cygwin). Th= e cygwin=20 project installs a basic configuration of openSSH which works = well on=20 older windows systems, but requires specific things be done to= get the=20 SSH server to work 100% on windows 2003 and Vista.<br><br>CopS= SH is a=20 pre-packaged minimal installation of Cygwin with a couple mino= r=20 enhancement patches that installs Cygwin, openSSH, configures = you=20 computer (even vista and win2k3) so that openSSH works without= any=20 tweaking at all.<br><br>"OpenSSH for Windows" is a dead source= forge=20 project that is almost identical to copSSH, except that develo= pment on=20 the project has stopped a long time ago, and this package requ= ires=20 more tweaking of the ssh settings and the server that the othe= r=20 options, and is running very old ssh code that should not be u= sed=20 anymore in my opinion.<br><br>If you want the easy solution, i= nstall=20 copSSH and everything will work. If you want to get what you h= ave=20 working and you did not install copSSH then we can offer assis= tance=20 with making all the appropriate changes, but it will take more= time to=20 get SSH services up and running with public keys, but you will= have=20 the option of using any piece of the cygwin project=20 easily.<br><br>Armand<br><br></blockquote></blockquote></block= quote></blockquote></blockquote> </blockquote><style> BODY {FONT:10pt Tahoma,Verdana,sans-serif} </style> </body></html> -------------4e2f3b6bcc7dd9ca275ec8f96ca19eb2-- -- List Info: http://erdelynet.com/ssh-l/ List Archives: http://erdelynet.com/archive/ssh-l/ To Unsubscribe: Mail mailto:[email protected] If you are having trouble unsubscribing, visit the List Info page for help.