This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
wiki:advanced:authentication:passwordless-ssh [2011/01/12 15:21] dali |
wiki:advanced:authentication:passwordless-ssh [2013/03/08 13:31] (current) |
||
---|---|---|---|
Line 1: | Line 1: | ||
====== Passwordless authentication using ssh-keys ====== | ====== Passwordless authentication using ssh-keys ====== | ||
- | ===== Linux ===== | + | ===== Linux client ===== |
You'll need to generate a SSH key via the ssh-keygen command. Please choose which key you want to generate (we recommend dsa): | You'll need to generate a SSH key via the ssh-keygen command. Please choose which key you want to generate (we recommend dsa): | ||
<code> | <code> | ||
- | $ ssh-keygen -t rsa'' | + | $ ssh-keygen -t rsa |
</code> | </code> | ||
Line 36: | Line 36: | ||
After the transfer you can add the path to the private part of the key to the session preferences inside x2goclient. x2goclient should now establish the connection without asking for a password by simply clicking on the session card view. | After the transfer you can add the path to the private part of the key to the session preferences inside x2goclient. x2goclient should now establish the connection without asking for a password by simply clicking on the session card view. | ||
- | ===== Windows ===== | + | ===== Windows client ===== |
Start a command prompt and navigate to the x2goclient folder, in this example it is **C:\Program Files\x2goclient**. | Start a command prompt and navigate to the x2goclient folder, in this example it is **C:\Program Files\x2goclient**. | ||
- | First we generate a DSA key pair (do not use a password phrase if you want SSO): | + | First we generate a DSA key pair (use an empty password phrase if you want SSO): |
<code dos> | <code dos> | ||
C:\Program Files\x2goclient>ssh-keygen.exe -t dsa | C:\Program Files\x2goclient>ssh-keygen.exe -t dsa | ||
</code> | </code> | ||
- | :!: ssh-keygen.exe prints the path to the key file(s), you will need that later. | + | :!: ssh-keygen.exe prints the path to the key file(s), you will need that in the next step. |
- | This will create following files: | + | You'll need to transfer the public key file to the wanted server. You can do this using the scp.exe command with the path that ssh-keygen.exe printed (make sure you transfer the id_dsa**.pub** file): |
- | <code text> | + | |
- | id_dsa | + | |
- | id_dsa.pub | + | |
- | </code> | + | |
- | + | ||
- | You'll need to transfer the public part of the key to the wanted server. You can do this using the scp.exe command with the path to the key file that ssh-keygen.exe printed: | + | |
<code dos> | <code dos> | ||
- | C:\Program Files\x2goclient>scp.exe /cygdrive/C/DOCUME~1/<username>/.x2go/.ssh/id_dsa.pub username@remoteserver:.ssh/ | + | C:\Program Files\x2goclient>scp.exe /cygdrive/C/DOCUME~1/<username>/.x2go/.ssh/id_dsa.pub username@remoteserver: |
</code> | </code> | ||
Line 64: | Line 58: | ||
</code> | </code> | ||
- | Go to your .ssh folder, add the public key to your authorized_keys2 file and then remove the file: | + | Go to your .ssh folder, add the contents of the public key file to your authorized_keys file and then remove the public key file: |
<code bash> | <code bash> | ||
cd ~/.ssh | cd ~/.ssh | ||
- | cat id_dsa.pub >> authorized_keys2 | + | cat ~/id_dsa.pub >> authorized_keys |
- | rm id_dsa.pub | + | rm ~/id_dsa.pub |
</code> | </code> | ||
You can now add the path to the id_dsa file (the private part of the key) to the session preferences inside x2goclient. x2goclient should now establish the connection without asking for a password by simply clicking on the session card view. | You can now add the path to the id_dsa file (the private part of the key) to the session preferences inside x2goclient. x2goclient should now establish the connection without asking for a password by simply clicking on the session card view. | ||
- | You can also create a desktop shortcut which starts the session with the client window hidden; in x2goclient select Session -> Create session icon on desktop ... -> select session. | + | You can also create a desktop shortcut which starts the session with the client window hidden; in x2goclient select Session -> "Create session icon on desktop..." -> select session from the list and click the "Create session icon on desktop..."-button. |
:!: The path to x2goclient.exe in the shortcut may be wrong, edit the shortcut and remove "bin\" from the path and the working directory. | :!: The path to x2goclient.exe in the shortcut may be wrong, edit the shortcut and remove "bin\" from the path and the working directory. | ||