diff --git a/Doc/Common/glossary.xml b/Doc/Common/glossary.xml index 8cd7e74302fb8fbdc381ba5bc3c9ad535c4517e9..ce4c15f23fd5b98e6c695189a95ba4766c207576 100644 --- a/Doc/Common/glossary.xml +++ b/Doc/Common/glossary.xml @@ -494,6 +494,16 @@ </glossdef> </glossentry> + <glossentry xml:id="glo_ssh"> + <glossterm><acronym>Ssh</acronym></glossterm> + + <glossdef> + <para><link + xlink:href="http://en.wikipedia.org/wiki/Secure_Shell">Secure + shell</link></para> + </glossdef> + </glossentry> + <glossentry xml:id="glo_SVG"> <glossterm><acronym>SVG</acronym></glossterm> diff --git a/Doc/Sdi/gettingStarted.xml b/Doc/Sdi/gettingStarted.xml new file mode 100644 index 0000000000000000000000000000000000000000..b189f4d736da1e49f76994d958b4458ec21aac9f --- /dev/null +++ b/Doc/Sdi/gettingStarted.xml @@ -0,0 +1,95 @@ +<?xml version="1.0" encoding="UTF-8"?> +<chapter version="5.0" xml:id="sdiLdap" xmlns="http://docbook.org/ns/docbook" + xmlns:xlink="http://www.w3.org/1999/xlink" + xmlns:xi="http://www.w3.org/2001/XInclude" + xmlns:svg="http://www.w3.org/2000/svg" + xmlns:m="http://www.w3.org/1998/Math/MathML" + xmlns:html="http://www.w3.org/1999/xhtml" + xmlns:db="http://docbook.org/ns/docbook"> + <title>Getting started</title> + + <section xml:id="sdiAccessVm"> + <title>Accessing your virtual machine</title> + + <para>This lecture requires practical exercises. Each group will have + access to two virtual machines to mimic client provider and replication + scenarios.</para> + + <para>Access to these virtual machines is initially being controlled by + password. A client will allow you to connect:</para> + + <programlisting language="none">[goik]$ <emphasis role="bold">ssh root@sdi4a.mi.hdm-stuttgart.de</emphasis> +The authenticity of host 'sdi4a.mi.hdm-stuttgart.de (141.62.75.104)' can't be established. +ECDSA key fingerprint is b1:ee:e1:3d:db:3c:0b:06:e9:fb:b3:ae:b8:ed:e2:a8. +Are you sure you want to continue connecting (yes/no)? yes +Warning: Permanently added 'sdi4a.mi.hdm-stuttgart.de,141.62.75.104' (ECDSA) to the list of known hosts. +root@sdi4a.mi.hdm-stuttgart.de's password: +Welcome to Ubuntu 14.04.2 LTS (GNU/Linux 2.6.32-19-pve x86_64) + + * Documentation: https://help.ubuntu.com/ +Last login: Fri Mar 27 08:29:40 2015 from 192.168.1.66</programlisting> + + <para>Since password access is generally being considered insecure (e.g. + due to insufficient length or poor choice of password) we will configure + public key authentication by a public/private key pair:</para> + + <orderedlist> + <listitem> + <para>Copy your public <xref linkend="glo_ssh"/> key to your remote VM + still using password access:</para> + + <programlisting language="none">root@goiki:~# scp /ma/goik/.ssh/id_rsa.pub root@sdi4a.mi.hdm-stuttgart.de: +root@sdi4a.mi.hdm-stuttgart.de's password: +id_rsa.pub 100% 736 0.7KB/s 00:00 +</programlisting> + </listitem> + + <listitem> + <para>On the remote VM append your public key the the list of allowed + users:</para> + + <programlisting language="none">root@sdi4a:~# cat id_rsa.pub >> ~/.ssh/authorized_keys</programlisting> + </listitem> + + <listitem> + <para>You should now be able to log in by public key:</para> + + <programlisting language="none">[goik@goiki Sdi]$ ssh root@sdi4a.mi.hdm-stuttgart.de +#Welcome to Ubuntu 14.04.2 LTS (GNU/Linux 2.6.32-19-pve x86_64) + + * Documentation: https://help.ubuntu.com/ +Last login: Fri Mar 27 08:38:03 2015 from 192.168.1.66 +</programlisting> + + <para>Notice the absence of a password prompt. You may want to execute + <command>ssh</command> <option>-v</option> once to watch the log and + try to identify the key exchange.</para> + </listitem> + + <listitem> + <para>You should now disable password login. The <xref + linkend="glo_ssh"/> daemon is being configured by + <filename>/etc/ssh/sshd_config</filename>. Edit this file and look for + the following lines</para> + + <programlisting language="none">... +# Change to no to disable tunnelled clear text passwords +#PasswordAuthentication yes +...</programlisting> + + <para>As being proposed inside the comment remove the directive's + starting comment and set its value to no:</para> + + <programlisting language="none">... +# Change to no to disable tunnelled clear text passwords +PasswordAuthentication <emphasis role="bold">no</emphasis> +...</programlisting> + + <para>This value will become active on reloading the daemon's + configuration:</para> + + <programlisting language="none">root@sdi4a:~# /etc/init.d/ssh reload</programlisting> + </listitem> + </orderedlist> + </section> +</chapter> diff --git a/Doc/lectures.xml b/Doc/lectures.xml index 756ba7b7b0bfc19279640d1e251de6f1026d4b2b..b8cf6f02809d0699a5162c6dfdfd3e1cc08e708a 100644 --- a/Doc/lectures.xml +++ b/Doc/lectures.xml @@ -106,6 +106,7 @@ <title>Software defined infrastructure</title> </info> + <xi:include href="Sdi/gettingStarted.xml" xpointer="element(/1)"/> <xi:include href="Sdi/unixIntro.xml" xpointer="element(/1)"/> <xi:include href="Sdi/package.xml" xpointer="element(/1)"/>