HowToBSD » System Configuration

SSH key authentication freebsd

admin — Sat, 26 Mar 2011 17:31:26 +0000

Too difficult to imagine Unix OS’s administrator which does not use ssh protocol (Secure SHell).
In this how-to I would like to show how easy to use SSH Public Key Based Authentication.
The most useful benefits for me in key authentication:

ssh authentication without password
ssh login from shell scripts
security

There are just two steps to use ssh key authentication:
1. Generate SSH Keys on client.
2. Add public key to server.

1.Generating keys.

From user (which will run script or login on server) do command:

#ssh-keygen -t rsa Generating public/private rsa key pair. Enter file in which to save the key (/home/slim/.ssh/id_rsa): Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in /home/slim/.ssh/id_rsa. Your public key has been saved in /home/slim/.ssh/id_rsa.pub. The key fingerprint is: 6c:62:f7:11:93:2d:47:90:66:80:88:43:c4:e3:95:7e slim@slim The key's randomart image is: +--[ RSA 2048]----+ | +o. o ....o. | | = + . ++ | | . = o= o | | . . E. = | | .o S . | | . + . . | | . | | | | | +-----------------+

As result – 2 files in a ~/.ssh directory:
id_rsa – private key
id_rsa.pub – public key

2. Add public key on server.

By default public keys located in /home/user/.ssh/authorized_keys file.
So, you need to load id_rsa.pub file on server and concatenate(on server) it to authorized_keys file:

#cat id_rsa.pub >> /home/user/.ssh/authorized_keys

This will create authorized_keys if it does not exist.

That is all! Now you can try from client:

#ssh username@servername

How to use several keys for different servers read in next post.

How to change hostname on FreeBSD

admin — Sat, 26 Mar 2011 11:29:41 +0000

For change hostname to ‘howtobsd.com’ you should edit /etc/rc.conf:
hostname="howtobsd.com"

You also can change hostname without reboot by command:

#hostname howtobsd.com

but after reboot i will return on value in rc.conf

check current hostname:
hostname

Update freebsd ports collection with cvsup

admin — Sun, 12 Sep 2010 16:00:15 +0000

If you have just installed FreeBSD from CD\DVD, first that you need to do – update ports collection freebsd (update freebsd ports tree) and src files from repositories.
With cvsup update ports collection isn’t difficult. Install cvsup:

#cd /usr/ports/net/cvsup-without-gui/ #make install clean

Copy and edit supfile (I describe only ports tree upfating process. Src updating is looks same):
#cp /usr/share/examples/cvsup/ports-supfile /etc/ports-supfile #vim /etc/ports-supfile

Choose nearest mirror for you:
*default host=cvsup3.ua.FreeBSD.org

My ports-supfile looks like:

*default host=cvsup.ua.FreeBSD.org *default base=/var/db *default prefix=/usr *default release=cvs tag=. *default delete use-rel-suffix *default compress ports-all

Save file and give command updating:
#cvsup -g -L 2 /etc/ports-supfile

It is can updating a long time (specially if you have slow internet connection).
When process is finish – you will can calm install soft from the ports.