Table of Contents for
SSH, The Secure Shell: The Definitive Guide, 2nd Edition

Version ebook / Retour

Cover image for bash Cookbook, 2nd Edition SSH, The Secure Shell: The Definitive Guide, 2nd Edition by Robert G. Byrnes Published by O'Reilly Media, Inc., 2005
  1. Cover
  2. SSH, the Secure Shell, 2nd Edition
  3. Preface
  4. Protect Your Network with SSH
  5. Intended Audience
  6. Reading This Book
  7. Our Approach
  8. Which Chapters Are for You?
  9. Supported Platforms
  10. Disclaimers
  11. Conventions Used in This Book
  12. Comments and Questions
  13. Safari Enabled
  14. Acknowledgments
  15. 1. Introduction to SSH
  16. What Is SSH?
  17. What SSH Is Not
  18. The SSH Protocol
  19. Overview of SSH Features
  20. History of SSH
  21. Related Technologies
  22. Summary
  23. 2. Basic Client Use
  24. A Running Example
  25. Remote Terminal Sessions with ssh
  26. Adding Complexity to the Example
  27. Authentication by Cryptographic Key
  28. The SSH Agent
  29. Connecting Without a Password or Passphrase
  30. Miscellaneous Clients
  31. Summary
  32. 3. Inside SSH
  33. Overview of Features
  34. A Cryptography Primer
  35. The Architecture of an SSH System
  36. Inside SSH-2
  37. Inside SSH-1
  38. Implementation Issues
  39. SSH and File Transfers (scp and sftp)
  40. Algorithms Used by SSH
  41. Threats SSH Can Counter
  42. Threats SSH Doesn’t Prevent
  43. Threats Caused by SSH
  44. Summary
  45. 4. Installation and Compile-Time Configuration
  46. Overview
  47. Installing OpenSSH
  48. Installing Tectia
  49. Software Inventory
  50. Replacing r-Commands with SSH
  51. Summary
  52. 5. Serverwide Configuration
  53. Running the Server
  54. Server Configuration: An Overview
  55. Getting Ready: Initial Setup
  56. Authentication: Verifying Identities
  57. Access Control: Letting People In
  58. User Logins and Accounts
  59. Forwarding
  60. Subsystems
  61. Logging and Debugging
  62. Compatibility Between SSH-1 and SSH-2 Servers
  63. Summary
  64. 6. Key Management and Agents
  65. What Is an Identity?
  66. Creating an Identity
  67. SSH Agents
  68. Multiple Identities
  69. PGP Authentication in Tectia
  70. Tectia External Keys
  71. Summary
  72. 7. Advanced Client Use
  73. How to Configure Clients
  74. Precedence
  75. Introduction to Verbose Mode
  76. Client Configuration in Depth
  77. Secure Copy with scp
  78. Secure, Interactive Copy with sftp
  79. Summary
  80. 8. Per-Account Server Configuration
  81. Limits of This Technique
  82. Public-Key-Based Configuration
  83. Hostbased Access Control
  84. The User rc File
  85. Summary
  86. 9. Port Forwarding and X Forwarding
  87. What Is Forwarding?
  88. Port Forwarding
  89. Dynamic Port Forwarding
  90. X Forwarding
  91. Forwarding Security: TCP-Wrappers and libwrap
  92. Summary
  93. 10. A Recommended Setup
  94. The Basics
  95. Compile-Time Configuration
  96. Serverwide Configuration
  97. Per-Account Configuration
  98. Key Management
  99. Client Configuration
  100. Remote Home Directories (NFS, AFS)
  101. Summary
  102. 11. Case Studies
  103. Unattended SSH: Batch or cron Jobs
  104. FTP and SSH
  105. Pine, IMAP, and SSH
  106. Connecting Through a Gateway Host
  107. Scalable Authentication for SSH
  108. Tectia Extensions to Server Configuration Files
  109. Tectia Plugins
  110. 12. Troubleshooting and FAQ
  111. Debug Messages: Your First Line of Defense
  112. Problems and Solutions
  113. Other SSH Resources
  114. 13. Overview of Other Implementations
  115. Common Features
  116. Covered Products
  117. Other SSH Products
  118. 14. OpenSSH for Windows
  119. Installation
  120. Using the SSH Clients
  121. Setting Up the SSH Server
  122. Public-Key Authentication
  123. Troubleshooting
  124. Summary
  125. 15. OpenSSH for Macintosh
  126. Using the SSH Clients
  127. Using the OpenSSH Server
  128. 16. Tectia for Windows
  129. Obtaining and Installing
  130. Basic Client Use
  131. Key Management
  132. Accession Lite
  133. Advanced Client Use
  134. Port Forwarding
  135. Connector
  136. File Transfers
  137. Command-Line Programs
  138. Troubleshooting
  139. Server
  140. 17. SecureCRT and SecureFX for Windows
  141. Obtaining and Installing
  142. Basic Client Use
  143. Key Management
  144. Advanced Client Use
  145. Forwarding
  146. Command-Line Client Programs
  147. File Transfer
  148. Troubleshooting
  149. VShell
  150. Summary
  151. 18. PuTTY for Windows
  152. Obtaining and Installing
  153. Basic Client Use
  154. File Transfer
  155. Key Management
  156. Advanced Client Use
  157. Forwarding
  158. Summary
  159. A. OpenSSH 4.0 New Features
  160. Server Features: sshd
  161. Client Features: ssh, scp, and sftp
  162. ssh-keygen
  163. B. Tectia Manpage for sshregex
  164. Regex Syntax: Egrep Patterns
  165. Regex Syntax: ZSH_FILEGLOB (or Traditional) Patterns
  166. Character Sets for Egrep and ZSH_FILEGLOB
  167. Regex Syntax: SSH Patterns
  168. Authors
  169. See Also
  170. C. Tectia Module Names for Debugging
  171. D. SSH-1 Features of OpenSSH and Tectia
  172. OpenSSH Features
  173. Tectia Features
  174. E. SSH Quick Reference
  175. Legend
  176. sshd Options
  177. sshd Keywords
  178. ssh Options
  179. scp Options
  180. ssh and scp Keywords
  181. ssh-keygen Options
  182. ssh-agent Options
  183. ssh-add Options
  184. Identity and Authorization Files, OpenSSH
  185. Identity and Authorization Files, Tectia
  186. Environment Variables
  187. Index
  188. Index
  189. Index
  190. Index
  191. Index
  192. Index
  193. Index
  194. Index
  195. Index
  196. Index
  197. Index
  198. Index
  199. Index
  200. Index
  201. Index
  202. Index
  203. Index
  204. Index
  205. Index
  206. Index
  207. Index
  208. Index
  209. Index
  210. Index
  211. Index
  212. Index
  213. About the Authors
  214. Colophon
  215. Copyright

Other SSH Products

Unfortunately we can’t cover every SSH implementation, but here are summaries to aid your explorations. Because SSH products need to remain secure, we list only products that are in active development (or at least have been updated in the past year or two) and that support the SSH-2 protocol. This means we’ve intentionally left out dozens of older SSH products with respected histories, like NiftyTelnet SSH for the Mac, Top Gun SSH for Palm, FISH for VMS, and Sergey Okhapkin’s classic Windows port of the original SSH1. Old-timers like these have their place in history, but have been supplanted by more modern implementations.

We’ve organized the products by platform. Some products are free and others are shareware or commercial, usually quite inexpensive. Additionally, many of the commercial products have free evaluation versions available, so you can try before you buy.

13.3.1 BeOS

At press time, we have found no modern SSH clients for BeOS. There are a bunch of ancient ones (2000-2002) supporting the old SSH-1 protocol: search http://www.bebits.com/ to find them.

13.3.2 Commodore Amiga

At press time, we have found no modern SSH clients for the Amiga. The closest is an Amiga port of OpenSSH (http://www.chernoff.org/amiga/, free). However, it’s a port of Version 3.0.2, which is several years out of date.

13.3.3 GNU Emacs

ssh.el (http://www.splode.com/~friedman/software/emacs-lisp/src/ssh.e l, free) is an Emacs interface for SSH client connections. It does not implement SSH itself, but invokes an external client (e.g., ssh from OpenSSH or Tectia) within Emacs.

13.3.4 Java

JavaSSH (http://javassh.org/, free), a.k.a. Java Telnet/SSH Applet, is just what it sounds like: an SSH client applet.

JSch (http://www.jcraft.com/jsch/, free), a.k.a. Java Secure Channel, is an implementation of the SSH-2 protocol.

MindTerm (http://www.mindbright.se/, commercial, but free for personal or limited commercial use) is an SSH client and terminal emulator. The same company sells Appgate Security Server, an enterprise-level security product with SSH capabilities.

SSHTerm Professional (http://www.sshtools.com/, commercial, but free for personal or limited commercial use). The same vendor also produces Maverick SSHD, an SSH server written in Java; J2SSH Maverick, a Java SSH library for programmers; and Maverick.NET, an SSH API for Microsoft’s .NET platform.

13.3.5 Macintosh OS 9

MacSSH (http://www.macssh.com/, shareware) is the premier SSH client for OS 9. It supplanted NiftyTelnet SSH, which we covered in the first edition of this book.

MacSFTP (http://www.macssh.com/, shareware) is an SFTP client by the maker of MacSSH, for copying files securely between computers.

13.3.6 Macintosh OS X

Macintosh OS X comes with OpenSSH installed. However, MacSFTP is also available. [13.3.5]

13.3.7 Microsoft Windows

Windows SSH products have exploded in number in the past few years. Frankly, there are so many commercial SSH terminal clients it’s almost ridiculous. On the other hand, it’s nice to have choices.

Axessh 2.6 (http://www.labf.com/axessh/, commercial) is a terminal emulator and file-transfer program supporting SSH.

Ericom PowerTerm (http://www.ericom.com/, commercial) is a whole suite of SSH products for the enterprise.

F-Secure SSH (http://www.f-secure.com/, commercial) is an SSH-based terminal emulator.

Kermit 95 (http://www.columbia.edu/kermit/k95.html, commercial) is the classic program and protocol from the 1980s, updated to support SSH by borrowing code from OpenSSH.

OpenSSH on Cygwin (http://www.cygwin.com/, free) is a port of the whole OpenSSH suite to Windows and is the subject of Chapter 14.

PenguiNet (http://www.siliconcircus.com/penguinet/, commercial) is an SSH terminal emulator and secure file-copy program.

Pragma Fortress (http://www.pragmasys.com/, commercial) is an enterprise-level SSH server.

PuTTY (http://www.chiark.greenend.org.uk/~sgtatham/putty/, free), is a small but mighty suite of SSH clients covered fully in Chapter 18.

RemotelyAnywhere (http://www.remotelyanywhere.com/, commercial) is a remote system administration package that includes an SSH server.

Secure iXplorer (http://www.i-tree.org/, commercial) is a Windows Explorer-like program for accessing remote files. It is based internally on PuTTY.

Secure KoalaTerm (http://www.foxitsoftware.com/, commercial) is an SSH terminal emulator with particular focus on terminal emulation features.

SecureCRT (http://www.vandyke.com/, commercial) is a terminal emulator with SSH support, covered in Chapter 17. SecureFX is VanDyke’s secure file-transfer program with a graphical user interface. It is not an SSH terminal program.

ShellGuard (http://www.shellguard.com/, commercial) is an SSH-capable terminal emulator with secure copy capability.

Tectia (http://www.ssh.com/, commercial) is the Windows implementation of the major product we’ve been covering throughout this whole book, from SSH Communications Security.

VShell (http://www.vandyke.com/, commercial) is an SSH server from the maker of SecureCRT.

WinSSHD (http://www.bitvise.com/winsshd.html, commercial) is an SSH server.

WiSSH (http://www.wissh.com/, commercial) is a “remote desktop” program that operates over the SSH protocol, encrypting traffic between your local machine and the remote PC.

ZOC (http://www.emtec.com/zoc/, commercial) is an SSH terminal emulator.

13.3.8 Microsoft Windows CE (PocketPC)

PocketPuTTY (http://pocketputty.duxy.net/, free) is a port of PuTTY.

PocketTTY (http://dejavusoftware.com/pocketty/) is another SSH terminal client.

13.3.9 OS/2

ZOC, the Windows client, is also available for OS/2. [13.3.7]

13.3.10 Palm OS

The only Palm implementation used to be Top Gun SSH, but it supports only the SSH-1 protocol and is quite old. Fortunately there are some new kids on the block.

pSSH (http://www.sealiesoftware.com/pssh, free) is an SSH client for PalmOS 5 and up.

TuSSH (http://www.tussh.com/) is an SSH client for PalmOS 4 and up.

13.3.11 Perl

Several free Perl modules (http://www.cpan.org/) are available that provide an SSH API for software developers:

Net::SSH::Perl

An implementation of the SSH protocol, written in Perl

Net::SSH

An SSH API that provides wrappers around the ssh command

Net::SCP

An SSH API that provides wrappers around the scp command

Net::SCP::Expect

Another wrapper around scp, this one supporting Expect (http://expect.nist.gov/) so that passwords can be passed to it programmatically

13.3.12 Unix Variants (Linux, OpenBSD, etc.)

We’ve covered OpenSSH and Tectia extensively in this book, but there are others....

Dropbear (http://matt.ucc.asn.au/dropbear/dropbear.html, free) is an SSH client and server intended to run in as little memory as possible.

Kermit (http://www.columbia.edu/kermit/ssh.html, free), the venerable communications program of long ago, has been updated with SSH protocol support.

lsh (http://www.lysator.liu.se/~nisse/lsh/, free) is an SSH-2 client (lsh) and server (lshd).

PuTTY runs on Linux as well as Windows. [13.3.7] In addition, there is an unrelated program gPutty (http://www.defora.org/index.php?page=gputty), that is a PuTTY clone for the GNOME environment.

SecPanel (http://www.pingx.net/secpanel/, free) is a graphical, point-and-click manager for SSH client connections. It’s written in the programming language tcl and invokes SSH clients from your installed OpenSSH or Tectia distribution.

13.3.13 VMS

BAMSE (http://www.free.lp.se/bamse/) is an SSH client. It has not been updated since 2002 but is supposedly the best VMS client available.