Re: OpenSSH configuration question

[Hans Insulander <hin@stacken.kth.se>]

Joey McAlerney <joey@silicondefense.com> writes:

> I am running sshd with RhostsRSAAuthentication turned on.  When I pass
> through a firewall during an ssh, the source port gets bumped up to a
> non-privilaged range, so sshd won't allow the connection.  From what I
> gather from the man pages (and I'm hoping I haven't missed anything),
> there is not option to add to the sshd config file to allow connections
> from non-privilaged ports.
> 
> The only way around this that I can think of is to change the ipnat
> rules in the firewall.  I'm not really the administrator of that box, so
> would like to avoid this.
> 
> Any thoughts?

Can't you use RSA keys in your homedirectory? To use do the following:

1. On your local machine, generate keys with 'ssh-keygen'
2. Copy the generated public ~/.ssh/identity.pub from your local machine
   to ~/.ssh/authorized_keys on the remote machine
3. Then start an authentication agent with 'eval `ssh-agent`' (bash syntax)
4. Authenticate to the auth agent with 'ssh-add'

This is better and more secure IMO.

-- 
--- Hans Insulander <hin@stacken.kth.se>, SM0UTY -----------------------
This is my .signature. There are many like it, but this one is mine.