CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Check Point SecurePlatform (SPLAT)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-05-28
Member
 
Join Date: 2006-10-05
Location: Rennes, FRANCE
Posts: 34
Rep Power: 0
aenima has an average reputation (10+)
Default RSA Authentication between SPLAT

Hi all,

I m trying to establish RSA authentication between a SmartCenter and a firewall module in order to scp a file from the firewall to the SmartCenter (on SmartCenter : scp adm@firewall:/var/CPbackup/backups/filename.tgz .).

Here is what i have done on the firewall :
1/ Adduser bob (password is different from admin & expert)
2/ vi /etc/passwd
bob:x:0:0::/home/bob:/bin/bash
3/ vi /etc/ssh/sshd_config
RSAAuthentication yes
PubkeyAuthentication yes
AuthorizedKeysFile .ssh/authorized_keys
4/ service sshd restart
5/ echo bob >>/etc/scpusers

Here is what i have done on the SmartCenter :
1/ ssh-keygen -t rsa
2/ scp /root/.ssh/id_rsa.pub bob@firewall:
3/ ssh bob@firewall (password required ;-))
& cat id_rsa.pub >>/home/bob/.ssh/authorized_keys

when trying ssh bob@firewall, password is still required ..... what's wrong ???

Thanks in advance.
Reply With Quote
  #2 (permalink)  
Old 2008-05-28
Member
 
Join Date: 2006-10-05
Location: Rennes, FRANCE
Posts: 34
Rep Power: 0
aenima has an average reputation (10+)
Default Re: RSA Authentication between SPLAT

Hi aenima !

/root/.ssh/authorized_keys should have mode 600 (rw-------).
Reply With Quote
  #3 (permalink)  
Old 2008-05-28
Member
 
Join Date: 2006-10-05
Location: Rennes, FRANCE
Posts: 34
Rep Power: 0
aenima has an average reputation (10+)
Default Re: RSA Authentication between SPLAT

Thanks aenima, working fine now !!!!!!!!!

Sorry guyz, it took me 2 hours to figure it out .... have to take a break :-)
Reply With Quote
  #4 (permalink)  
Old 2008-05-28
Senior Member
 
Join Date: 2006-01-25
Posts: 1,005
Rep Power: 4
melipla has an average reputation (10+)
Default Re: RSA Authentication between SPLAT

Quote:
Originally Posted by aenima View Post
Thanks aenima, working fine now !!!!!!!!!

Sorry guyz, it took me 2 hours to figure it out .... have to take a break
I like how you answered your own post without even letting on it was you. Very clever. :)

2 hours is actually pretty good time. My record time for a SR w/CP Support is just over a year (I'm working on a second one now, which I expect will go longer).
__________________
Its all in the documentation.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 11:29.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0