Important: The information in this document is obsolete and should not be used for new development.
This appendix explains how to configure SSH access from one computer (the server) to another (the client) for a single user. This allows you to connect securely from your workstation to the computer where your repository is located.
The server’s administrator must create a user account for you on that computer. Make sure you can log in to the server.
% ssh ernest@server.apple.com |
ernest@server.apple.com's password: |
Last login: Thu Sep 30 15:56:52 2004 from xx.xx.xx.xx |
Welcome to Darwin! |
If it doesn’t already exist, create the .ssh
directory
in your home directory in the server computer.
% mkdir ~/.ssh |
% exit |
Using the ssh-keygen
command,
create a private and public key pair and store it in your home directory
in the client computer:
% ssh-keygen -t dsa |
Generating public/private dsa key pair. |
Enter file in which to save the key (/Volumes/Athene/ernest/.ssh/id_dsa: |
Enter passphrase (empty for no passphrase): |
Enter same passphrase again: |
Your identification has ben saved in /Volumes/Athene/ernest/.ssh/id_dsa. |
Your public key has been saved in /Volumes/Athene/ernest/.ssh/id_dsa.pub. |
The key fingerprint is: |
##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:## ernest@work.apple.com |
% cd ~/.ssh |
% ls |
id_dsa id_dsa.pub known_hosts |
Using the scp
command,
copy the public key file (id_dsa.pub
)
to your home directory in the server as authorized_keys
(unless
the authorized_keys
file
already exists there):
% scp id_dsa.pub ernest@server.apple.com:~/.ssh/authorized_keys |
ernest@server.apple.com's password: |
id_dsa.pub 100% 613 1.2MB/s 00:00 |
If the authorized_keys
file
if it already exists, add your public key to it using a text editor.
Ensure you can connect to the server using your passphrase:
% ssh ernest@server.apple.com |
Enter passphrase for key '/Users/ernest/.ssh/id_dsa': |
Last login: Thu Sep 30 16:06:45 2004 from xx.xx.xx.xx |
Welcome to Darwin! |
© 2004, 2006 Apple Computer, Inc. All Rights Reserved. (Last updated: 2006-11-07)