Open SSH with GSI Auth
This document covers the installation and configuration required to allow Open SSH with GSI Authentication
Installation
Grabbing Epel and OSG Packages
Install the Epel Repo (see OSG site for latest location)
Then install yum priorities,
yum install yum-priorities
Followed by
rpm -Uvh http://repo.grid.iu.edu/osg-el5-release-latest.rpm
and then...
yum install osg-ca-certs
and then...
yum -y install fetch-crl
Install gsissh
This will bring in the ssh related globus packages
yum install gsissh
Install gsi-openssh-server
yum -y install gsi-openssh-server
Configuration
gsi-sshd configuration
cd /etc/gsissh
mv sshd_config sshd_config.old
cp sshd_config.rpmnew sshd_config
/etc/init.d/gsissh reload
/etc/shadow
It standard RHEL or
CentOS? local users accounts have their password set to
!!
this will cause the logins to fail with a message like
User username not allowed because account is locked
The fix is to replace the
!!
in /etc/shadow for those users that are to login via gsissh
Authors
--
TerrenceMartin - 2012/08/08
--
TerrenceMartin - 2012/04/04