1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
|
Configuration of sshproxy for Debian
------------------------------------
After initial installation, you need to setup an admin with
sshproxy-setup:
sshproxy-setup -c /etc/sshproxy -u sshproxy --add-admin admin
Then, restart sshproxy and login as admin with:
ssh -p 2242 admin@localhost OR
USER=admin sshproxy-ssh (if you have installed sshproxy-client)
If you want to use a MySQL database, install sshproxy-backend-mysql
package. You need to include by hand (this means to copy/paste) the
/etc/sshproxy/mysql.ini into sshproxy.conf if you opt for
dbconfig-common database configuration. You also need to alter
/etc/sshproxy/sshproxy.ini to add "mysql_db" in the plugin_list
directive and change "site_db", "client_db", "acl_db" to "mysql_db"
and restart sshproxy.
To test it, connect with "USER=admin sshproxy-ssh".
sshproxy> add_client foo
Client foo added
sshproxy> set_client_password foo
Enter the password: [bar]
Confirm the password: [bar]
Password updated
sshproxy> add_site remote
Site remote added
sshproxy> tag_site remote ip_address=127.0.0.1 port=22
ip_address = "127.0.0.1"
name = "remote"
port = "22"
sshproxy> add_site reallogin@remote
Site reallogin@remote added
sshproxy> set_site_password reallogin@remote
Enter the password: [realpassword]
Confirm the password: [realpassword]
Password updated
sshproxy> set_aclrule authenticate client.username == "foo"
sshproxy> set_aclrule authorize client.username == "foo"
sshproxy> set_aclrule shell_session client.username == "foo"
sshproxy> reload_acl_rules
True
reallogin is a real login that exists on your local
station. realpassword is the real password for this login.
Then, you should be able to connect with "USER=foo sshproxy-ssh
reallogin@remote". The password is "bar" (the first one you entered),
not the real password. You should then become connected as "reallogin"
on your local workstation.
See http://sshproxy-project.org/documentation/ for more information.
-- Vincent Bernat <bernat@debian.org>, Sun, 11 May 2008 19:03:47 +0200
|
