openssh

Description:

An open source implementation of SSH protocol versions 1 and 2

Changes on AnNyung:

  1. X 의존성 제거

  2. 서버 기본 설정 변경 (/etc/ssh/sshd_config)

    • KeyRegenerationInterval 0

    • UseDNS no

    • GSSAPIAuthentication no

    • X11Forwarding no

    • Banner /etc/issue.net

    • AcceptEnv 에 USER_LANG 환경 변수 추가

  3. 클라이언트 기본 설정 변경 (/etc/ssh/ssh_config)

    • GSSAPIAuthentication no

    • ForwardX11Trusted no

    • SendEnv 에 USER_LANG 환경 변수 추가

  4. Banner 지시자에 지정된 파일(/etc/issue.net_)에 Magic Cookie 지원

  5. ssh client에서 IDN 지원

    [root@an3 ~]$ ssh 청와대.com -v
OpenSSH_6.6.1, OpenSSL 1.0.1e-fips 11 Feb 2013
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 49: Applying options for *
debug1: Connecting to 청와대.com [211.234.63.232] port 22.
^C
[root@an3 ~]$

  6. host key check skip 옵션 추가 (-H)

    • 아래 예제는 둘다 동일한 방법임.

      [oops@an3 ~]$ ssh -H test.com
[oops@an3 ~]$ ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no test.com

Sub packages:

  • openssh-clients - An open source SSH client applications

  • openssh-keycat - A mls keycat backend for openssh

  • openssh-ldap - A LDAP support for open source SSH server daemon

  • openssh-server - An open source SSH server daemon

  • openssh-server-sysvinit - The SysV initscript to manage the OpenSSH server.

  • pam_ssh_agent_auth - PAM module for authentication with ssh-agent

PreviousntpNextopenssl

Last updated