Tuesday, August 6, 2013

Key Less linux root login using moba - Xterm


MobaXterm is powerful ssh client for linux and it's better then putty !!!

1) download and install mobaxterm personal edition  from website http://mobaxterm.mobatek.net/

2)log into linux box as a root .

3)generate private / public ssh key without passphrace

   #ssh-keygen -t rsa

  below three files will create under .ssh directory

   /root/.ssh/
                id_rsa   - private key
                id_rsa.pub - public key
                known_hosts - know host file

4)copy the public key to  login as a root user

 #ssh-copy-id -i /root/.ssh/id_rsa.pub root@master.linux.com

the above command will create authorized_keys file under /root/.ssh/ folder to authenticate key less ssh login

5)copy the private key in to your local windows machine

  eg : -

[root@master .ssh]# cat id_rsa
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
[root@master .ssh]#

6)open new session in mofa-xterm in windows and do  below six steps for key less authentication

   i) create a .ssh directory in home folder
          #mkdir ~/.ssh
   2) create a private authantication key file in .pem file format
          #vi ~/.ssh/master.pem
   3) copy the above step 5 private key from Begin line to end line in to ~/.ssh/master.pem

   4) just verify the key file
           #cat  ~/.ssh/master.pem
             -----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----

  5)change the file permission read and write only for user

     #chmod 600 ~/.ssh/master.pem

  6) create a login config file for ssh

     #vi ~/.ssh/config
     
      host master
      hostname 192.168.0.30
      user root
      IdentityFile ~/.ssh/master.pem

7)run below command it will take  to your linux box (192.168.0.30) without any key

    #ssh master