Book Home

Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

Index: P

packets, TCP format: 3.4.1. Establishing the Secure Connection

PAM (Pluggable Authentication Modules): 4.3.3. PAM

5.5.1.11. PAM authentication
authentication using: 5.5.1.11. PAM authentication
configuration: 12.2.2.2. Password authentication

passphrases: 2.4.2. Generating Key Pairs with ssh-keygen

batch or cron jobs: 11.1.2.1. Storing the passphrase in the filesystem

changing: 2.4.4. If You Change Your Key

SSH1: 6.2.1. Generating RSA Keys for SSH1

choosing a secure passphrase: 10.5. Key Management

limitations: 2.5. The SSH Agent

protecting: 7.4.5.7. Backgrounding a remote command, take two

selection: 6.2.4. Selecting a Passphrase

specifying

SSH1: 6.2.1. Generating RSA Keys for SSH1

troubleshooting, prompting for passphrase of wrong key: 12.2.2.4. Public-key authentication

password authentication

SSH1: 3.4.2.1. Password authentication
troubleshooting: 12.1.2. Server Debugging

password expiration warnings: 5.6.2. Expired Account or Password

password prompting

SSH1: 7.4.5.2. Password prompting in SSH1

password prompts, suppression with batch mode: 7.4.5.4. Batch mode: suppressing prompts

PasswordAuthentication: 5.5.1.1. Password authentication

PasswordExpireWarningDays: 5.6.2. Expired Account or Password

PasswordGuesses: 5.4.3.5. Failed logins

5.4.3.5. Failed logins

PasswordPrompt: 7.4.5.3. Password prompting in SSH2

PasswordPromptHost: 7.4.5.2. Password prompting in SSH1

PasswordPromptLogin: 7.4.5.2. Password prompting in SSH1

passwords

authentication: 5.5.1.1. Password authentication

cracking: 3.11.1. Password Cracking

one-time passwords: 4.3.5. Compilation Flags

"one-time" use for authentication, SSH1: 3.4.2.5. One-time passwords

security risks: 2.4. Authentication by Cryptographic Key

3.1.3. Authentication

PASV command: 11.2.1. The FTP Protocol

PenguiNet: 13.3. Table of Products

per-account authorization files: 5.4.1.6. Per-account authorization files

configuration failure: 12.2.3.4. Per-account authorization files

per-account configuration: 4.1.5. Compile-Time Configuration

5.3. Server Configuration: An Overview
8. Per-Account Server Configuration
authentication issues: 8.1.2. Authentication Issues
authentication using PGP (SSH2): 8.2.2.1. SSH2 PGP key authentication
CVS: 8.2.6.1. Example: CVS and $LOGNAME
disabling agent forwarding: 8.2.8. Disabling Forwarding
disabling port forwarding: 8.2.8. Disabling Forwarding
"from" option (SSH1, OpenSSH): 8.2.5. Restricting Access by Host or Domain
limitations: 8.1. Limits of This Technique
precedence: 8.1.1. Overriding Serverwide Settings
public key based: 8.2. Public Key-Based Configuration
rc file: 8.4. The User rc File
recommended settings: 10.4. Per-Account Configuration
restriction of access by host or domain: 8.2.5. Restricting Access by Host or Domain
server: 0.4. Our Approach
setting idle timeouts: 8.2.7. Setting Idle Timeout
trusted-host authentication: 8.3. Trusted-Host Access Control

perfect forward secrecy: 3.4.1. Establishing the Secure Connection

permissions

for batch and cron jobs: 11.1.5.1. Least-privilege accounts
for newly created files: 5.4.2.2. Permissions for newly created files

PermitEmptyPasswords: 5.6.3. Empty Passwords

PermitRootLogin: 5.5.2.5. Root access control

PGP (Pretty Good Privacy): 1.4.2. Secure File Transfer

authentication: 5.5.1.6. PGP authentication

SSH2: 8.2.2.1. SSH2 PGP key authentication

compile-time configuration: 4.1.5.7. Authentication

key authentication

SSH2: 6.1.2. SSH2 Identities
troubleshooting: 12.2.2.5. PGP key authentication

OpenPGP compliance: 4.1.5.7. Authentication

vs. SSH: 1.6.2. Pretty Good Privacy (PGP)

PGP signature of SSH distributions, verification: 4.1.2.2. Verifying with PGP

PgpKeyFingerprint: 5.5.1.6. PGP authentication

PgpKeyId: 5.5.1.6. PGP authentication

PgpKeyName: 5.5.1.6. PGP authentication

PgpPublicKeyFile: 5.5.1.6. PGP authentication

PgpSecretKeyFile: 5.5.1.6. PGP authentication

5.5.1.6. PGP authentication

pid file: 5.3.3. Changing the Configuration

OpenSSH: 4.3.5. Compilation Flags

PidFile: 5.4.1.3. Process ID file

5.4.2.2. Permissions for newly created files

Pine: 11.3. Pine, IMAP, and SSH

concurrent invocations: 11.3.3. Using a Connection Script
configuring use of SSH instead of rsh: 11.3.1.2. Making Pine use SSH instead of rsh
.k5login file: 11.4.5. Kerberos-4 in OpenSSH
mail relaying with SSH: 11.3.2. Mail Relaying and News Access
remote usernames: 11.3.1.2. Making Pine use SSH instead of rsh
securing IMAP authentication with SSH: 11.3.1. Securing IMAP Authentication

Pine mail reader, replacing rsh with ssh: 4.5.4. Pine

.pinerc file, configuration: 11.3.1.2. Making Pine use SSH instead of rsh

plaintext: 3.2. A Cryptography Primer

platforms, SSH implementations for: 0.6. Supported Platforms

Pluggable Authentication Modules (see PAM)

Port: 5.2.2. Running as an Ordinary User

5.4.3.1. Port number and network interface
7.4.4.1. Selecting a remote port
recommended setting: 10.3.2. /etc/sshd_config

port conflicts, avoiding: 12.1.2. Server Debugging

port forwarding: 1.4.6. Port Forwarding

3.1.5. Forwarding ( Tunneling)

9. Port Forwarding and X Forwarding

9.2. Port Forwarding

between Pine and IMAP host, security risks: 11.3.1. Securing IMAP Authentication

compile-time configuration: 4.1.5.5. TCP port forwarding

9.2.10.1. Compile-time configuration

disabling: 8.2.8. Disabling Forwarding

firewalls, bypassing: 9.2.5. Bypassing a Firewall

gateway hosts: 11.5.1. Making Transparent SSH Connections

listening port numbers: 9.2.7. The Listening Port Number

listing connections, escape sequence for: 2.3.2. The Escape Character

local compared to remote: 9.2.3. Comparing Local and Remote PortForwarding

local forwarding: 9.2.1. Local Forwarding

9.2.3.2. Local versus remote forwarding: the distinction
and GatewayPorts: 9.2.1.1. Local forwarding and GatewayPorts

localhost issues: 9.2.4. Forwarding Off-Host

multiple connections: 9.2.2. Trouble with Multiple Connections

non TCP-based protocols: 9.2. Port Forwarding

off-host: 9.2.4. Forwarding Off-Host

per-account configuration: 9.2.10.3. Per-account configuration

"bind\: Address already in use" message: 12.2.5.6. Port forwarding

recommended setting: 10.3.2. /etc/sshd_config

remote forwarding: 9.2.3.2. Local versus remote forwarding: the distinction

server configuration: 9.2.10. Configuring Port Forwarding in the Server

SMTP and NNTP connections: 11.3.2. Mail Relaying and News Access

SSH-in-SSH: 11.5.3. Another Approach: SSH-in-SSH(Port Forwarding)

suspending, escape sequence for: 2.3.2. The Escape Character

target address: 9.2.8. Choosing the Target Forwarding Address

termination: 9.2.9. Termination

TIME_WAIT: 9.2.9.1. The TIME_WAIT problem

without remote logins: 9.2.6. Port Forwarding Without a Remote Login

port numbers: 7.4.4.1. Selecting a remote port

9.2.1. Local Forwarding
encoding: 9.2.7. The Listening Port Number
listening: 9.2.7. The Listening Port Number

ports

nonprivileged, forcing: 7.4.4.2. Forcing a nonprivileged local port
remote, selecting: 7.4.4.1. Selecting a remote port

pre-image-resistance of hash functions: 3.2.3. Hash Functions

precedence, serverwide configuration: 5.3.2. Command-Line Options

--prefix: 4.1.5.2. Installation, files, and directories

7.5.8. Locating the ssh Executable
recommended setting: 10.2. Compile-Time Configuration

PrintMotd: 5.6.1. Welcome Messages for the User

privacy: 3.1.1. Privacy (Encryption)

private keys: 2.4.1. A Brief Introduction to Keys

6.1. What Is an Identity?
importance of secrecy: 2.4.2. Generating Key Pairs with ssh-keygen
plaintext authentication, batch or cron jobs: 11.1.2.2. Using a plaintext key

privileged ports: 1.6.1. rsh Suite (R-Commands)

3.4.2.3. Trusted-host authentication (Rhosts and RhostsRSA)

PRNG (pseudo-random number generators): 3.7. Randomness

progress indicator: 6.2.2. Generating RSA/DSA Keys for SSH2

protocols

IPSEC: 1.6.4. IPSEC

SSH: 1.3. The SSH Protocol

version strings: 3.4.1. Establishing the Secure Connection

SSH-1: 3.4. Inside SSH-1

authentication methods: 3.4.2. Client Authentication
compared to SSH-2: 3.5.1. Protocol Differences (SSH-1 Versus SSH-2)

SSH-2, modules: 3.5.1. Protocol Differences (SSH-1 Versus SSH-2)

proxies (see SOCKS)

proxy: 4.1.5.8. SOCKS proxy support

proxy keys: 9.3.5.4. SSH and authentication spoofing

ProxyCommand: 7.4.6.3. SOCKS in OpenSSH

pseudo-random number generators (PRNG): 3.7. Randomness

pty (pseudo-terminal) allocation: 7.4.5.5. Pseudo-terminal allocation (TTY/PTY/PTTY)

PubKeyAuthentication: 5.5.1.2. Public-key authentication

public exponent, RSA key parameter: 2.4.3. Installing a Public Key on an SSH ServerMachine

public-key authentication: 5.5.1.2. Public-key authentication

disadvantages, under SSH1: 3.4.2.2. Public-key authentication

per-account configuration: 8.2. Public Key-Based Configuration

SSH1: 3.4.2.2. Public-key authentication

troubleshooting: 12.1.2. Server Debugging

12.2.2.4. Public-key authentication
checking file permissions: 12.2.2.4. Public-key authentication

typos in key files: 12.2.2.4. Public-key authentication

public-key certificates: 3.5.1.3. Key/identity binding

public-key cryptography: 3.2.2. Public- and Secret-Key Cryptography

public-key encryption algorithms: 3.9.1.1. Rivest-Shamir-Adleman (RSA)

public-key files

installing on remote host: 12.2.2.4. Public-key authentication
naming in SSH2: 6.2.2. Generating RSA/DSA Keys for SSH2

public keys: 2.4.1. A Brief Introduction to Keys

6.1. What Is an Identity?

comment fields

changing: 6.2.1. Generating RSA Keys for SSH1

6.2.2. Generating RSA/DSA Keys for SSH2

SSH1: 6.2.1. Generating RSA Keys for SSH1

deriving from private keys: 6.2.2. Generating RSA/DSA Keys for SSH2

hosts: 5.5.1.5. Fetching public keys of known hosts

installing in remote account: 2.4.3. Installing a Public Key on an SSH ServerMachine

12.1.2. Server Debugging

line break problem: 12.2.2.4. Public-key authentication

RSA keylength (SSH1): 6.2.1. Generating RSA Keys for SSH1

syntax, authorization files (SSH1): 8.2.1. SSH1 Authorization Files

verification of ownership: 3.5.1.3. Key/identity binding

PublicHostKeyFile: 5.4.1.1. Host key files

PuTTY: 13.3. Table of Products

Symbols | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z