KEK???????SSH

1
KEK???????SSH

• ??? SS???
• 2000/11/15
• KEK ?????????????
• ????????
• ????

2
KEK???????????
??????? ?????? ??
????? PS?????? 3123SPECint95
KEKB??? KEKB?? 12803 SPECint95
?????? ????? 835 SPECint95
??????? ????????? 1200 Gflops
3
?? SSH ???????

• ???????????????????????
• ????????, ??????
• ???????????
• slogin, ssh lt-- telnet, rlogin, rsh
• sftp lt-- ftp

4
SSH???

• ???????????
• ????????
• ???????????????
• IP??????, IP????????, DNS??, ????????????????.
• X???????????
• X???????FW???????????.
• ?????????????
• proxy(?????)???????.
• ftp ? pop ?????????????????????

5
SSH??????

• ??????? Tatu Ylonen ???
• ??
• SSH Communication Security? (SSH?)?????????
• F-Secure Corporation ????
• ???????(?)????
• SSH??????????
• The Internet Engineering Task Force (IETF)

6
????SSH

• OpenSSH
• OpenBSD????????????
• SSH 1.2.12 ?????????
• 1999??????
• LSH
• GNU ???????
• OSSH
• ??????????????.
• SSH 1.2.12 ?????????
• 1999??????

7
SSH ???????????
??????? ?????
SSH 2.x 2.3.0 Version 2 (1)
SSH 1.2.x 1.2.30 Version 1
OpenSSH 2.2.0 (2000/9/7) Version 2 1
LSH 1.0.7 (2000/3/15) Version 2
OSSH 1.5.6 (2000/7/5) Version 1
8
????????????
SSH2 SSH1 OpenSSH LSH OSSH
X forward yes yes yes no ?
Port forward -L, -R -L, -R -L -L, -R ?
scp yes yes no ? yes
sftp yes no no ? no
9
PC??????
SSH2 TTSSH Win32SSH SSH-Mac NiftyTelnet
Platform Win Win Win Mac Mac
protocol ver. 2 ver. 1 ver. 1 1 2 ver. 1
User interface GUI, ssh2 GUI ssh1 GUI GUI
??? yes yes no no Available
X forward Yes yes yes ? ?
Port forward L, R L, R L, R ? ?
?????? scp2 no scp1 GUI GUI
10
SSH ??????

• ?????????
• ?????????
• ??????????????

11
????????? ( SSH1 )
??????
?????????
??????
Host-key(???)???
Session-key?????Host-key????
Private-key ???Session-key????
??????
12
?????

• ???????
• ??????, ???????
• ??????????????
• rhosts ????????? ???
• ???????????????
• rhosts??
• ?????????

13
?????????????????

• ????????
• SSH??????????1????????????
• ???????????(SSH???)???.

14
????????? RSA ????????
??????
?????????
??????
??????????????
???????????,MD5?????????
MD5?????????????????
15
X11????????
16
TCP/IP???????????

• ssh -L YHostBK HostB

17
Windows?????

• TeraTerm(Pro) TTSSH
• ??
• Windows ??????? ? ?????????????(P)???Tera Term
  Pro?(????) ??Tera Term Pro?(?????) ? ttermpro ???
• X11????????
• Windows ?X?????????????
• TeraTerm?????????????Setup???SSH Forwarding? ?
  ?Display remote X application on local..??????

18
UNIX????? - ????

• ????
• lune ssh soleil
• ????????????, ??????
• lune ssh-keygen
• ?????????????. (??!)
• private-key ?????.
• public-key ?SSH????????.

19
UNIX????? - ??????

• scp ??
• lune scp -p file1 soleil
• lune scp -p directory soleil
• ????
• lune scp -p soleil
• ???????????
• lune scp -p -c blowfish file1 soleil
• sftp
• lune sftp soleil

20
UNIX????? - ??????

• ??????????????
• ??????
• lune ssh -L 12345soleil21 soleil
• ?????????
• lune ftp localhost 12345
• Connected to localhost.
• 220 soleil FTP server ...
• Name (localhostyashiro)
• 331 Password required for yashiro.
• Password my-PW
• 230 User yashiro logged in
• ftpgt passive

21
UNIX ???????????

• Configure
• ./configure --with-libwrap/usr/ lib
• Make
• make
• make install
• Configuration
• TCP wrappers ? hosts.allow
• sshd LOCAL, .kek.jp sshdfwd-X11 LOCAL
  sshdfwd-12345 LOCAL, hostname

22
SSH ?telnet
23
??????? vs ?????
??????? ?????
?????????? ??? ???
???????? ??? ???
??????? ?? ???
???????????????? ??? ??
???????? ??? ??????
24
F-Secure vs OpenSSH