> -----Original Message-----
> From: GRIDPP2: Deployment and support of SRM and local storage management
> [mailto:[log in to unmask]] On Behalf Of Ross, D (Derek)
> Sent: 24 August 2005 14:39
> To: [log in to unmask]
> Subject: Re: Another item for workshop
>
> > I totally agree. I included a reference to using ssh keys in
> > the Savannah
> > bug/issue and this was also included in the list sent to the dCache
> > developers. Next week should provide some answers.
> >
> > The document:
> >
> > http://wiki.gsi.de/pub/Gridadmin/ToDo2005Apr21080327/dCache4Si
> > teAdmins.pdf
> >
> > makes reference to using ssh keys to interface with dCache,
> > but does not
> > provide any hints as to how to do this. Neither does the
> > dCache 'book'.
> >
>
> It needs to be an ssh1-rsa key, put it in /opt/d-
> cache/config/authorized_keys
At IC, we are using ssh keys to interface with dCache-admin.
Configuration on the admin-node as follows:
Generate public/private dsa key pair.
> ssh-keygen -t dsa
=====================================================================
[root@gfe02 .ssh]# ls
authorized_keys
config
id_dsa_dcachepwd
id_dsa_dcachepwd.pub
known_hosts
[root@gfe02 .ssh]# more authorized_keys
from="gfe02.hep.ph.ic.ac.uk,cmsdsk00.hep.ph.ic.ac.uk,sedsk00.hep.ph.ic.ac.uk
",command="/bin/cat
/opt/d-cache/etc/dcache.kpwd",no-port-forwarding,no-X11-forwarding,no-agent-
forwarding ssh-dss (add-id_dsa_dcachepwd.pub)
[root@gfe02 .ssh]# more config
Host dcacheadm
Hostname gfe02
user admin
Port 22223
Cipher blowfish
Protocol 1
Ciphers blowfish-cbc
[root@gfe02 .ssh]#
Configuration on the pool-node as follows:
======================================================
[root@cmsdsk00 ~]# cd .ssh
[root@cmsdsk00 .ssh]# ls
authorized_keys
id_dsa_dcachepwd
id_dsa_dcachepwd.pub
known_hosts
[root@cmsdsk00 .ssh]# more authorized_keys
ssh-dss (id_dsa_dcachepwd.pub)
=======================================
Login to the admin interface:
> ssh dcacheadm < (output-generated by the script file)
Regards,
Mona
====================================
Mona Aggarwal
Tel. (+44) 20 759 47809
Imperial College London
High Energy Physics Department
Prince Consort Road, London, SW7 2BW
====================================
|