User Tools

Site Tools


wiki:advanced:authentication:passwordless-gpg-card

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision Both sides next revision
wiki:advanced:authentication:passwordless-gpg-card [2010/01/12 21:52]
h1 created
wiki:advanced:authentication:passwordless-gpg-card [2010/01/15 19:44]
h1
Line 2: Line 2:
 1. GPG card configuration: 1. GPG card configuration:
  
-''user@x2goclient$ gpg --card-edit''+<code> 
 +user@x2goclient$ gpg --card-edit 
 +</code>
  
 +<file>
 Application ID ...: D2760001240102000000000000420000 Application ID ...: D2760001240102000000000000420000
 Version ..........: 2.0 Version ..........: 2.0
Line 23: Line 26:
 Authentication key: [none] Authentication key: [none]
 General key info..: [none] General key info..: [none]
 +</file>
  
 +<code>
 Command> admin Command> admin
 +</code>
 +<file>
 Admin commands are allowed Admin commands are allowed
 +</file>
  
 +<code>
 Command> sex Command> sex
 +</code>
 +<file>
 Sex ((M)ale, (F)emale or space): M Sex ((M)ale, (F)emale or space): M
 gpg: 3 Admin PIN attempts remaining before card is permanently locked gpg: 3 Admin PIN attempts remaining before card is permanently locked
  
 Admin PIN Admin PIN
 +</file>
  
 +<code>
 Command> login Command> login
 +</code>
 +
 +<file>
 Login data (account name): beispielb Login data (account name): beispielb
 +</file>
  
 +<code>
 Command> generate Command> generate
 +</code>
 +
 +<file>
 Make off-card backup of encryption key? (Y/n) n Make off-card backup of encryption key? (Y/n) n
  
Line 91: Line 112:
 sub   1024R/C7151669 2009-09-24 sub   1024R/C7151669 2009-09-24
 sub   1024R/593801C0 2009-09-24 sub   1024R/593801C0 2009-09-24
 +</file>
  
 +<code>
 Command> quit Command> quit
 +</code>
  
 IMPORTANT: login Name is a name of user on remote system IMPORTANT: login Name is a name of user on remote system
 +
  
 2. Configuring ssh connection 2. Configuring ssh connection
Line 104: Line 128:
 x2goclient pinentry-x2go is required x2goclient pinentry-x2go is required
  
-user@x2goclient$ gpg-agent --enable-ssh-support --daemon + 
---pinentry-program /usr/bin/pinentry-x2go+<code> 
 +user@x2goclient$ gpg-agent --enable-ssh-support --daemon --pinentry-program /usr/bin/pinentry-x2go 
 +</code> 
 + 
 +<file>
 GPG_AGENT_INFO=/tmp/gpg-Xh4lY7/S.gpg-agent:24620:1; export GPG_AGENT_INFO; GPG_AGENT_INFO=/tmp/gpg-Xh4lY7/S.gpg-agent:24620:1; export GPG_AGENT_INFO;
 SSH_AUTH_SOCK=/tmp/gpg-LO41WU/S.gpg-agent.ssh; export SSH_AUTH_SOCK; SSH_AUTH_SOCK=/tmp/gpg-LO41WU/S.gpg-agent.ssh; export SSH_AUTH_SOCK;
 SSH_AGENT_PID=24620; export SSH_AGENT_PID; SSH_AGENT_PID=24620; export SSH_AGENT_PID;
 +</file>
  
 2.2. Export SSH environment variables (copy gpg-agent output in console) 2.2. Export SSH environment variables (copy gpg-agent output in console)
wiki/advanced/authentication/passwordless-gpg-card.txt · Last modified: 2014/04/14 06:08 by sunweaver