This is the old XigmaNAS forum in read only mode,
it will taken offline by the end of march 2021!



I like to aks Users and Admins to rewrite/take over important post from here into the new fresh main forum!
Its not possible for us to export from here and import it to the main forum!

GUI for SSH key-based authentication

Post/Debate your Suggestions & Requests of XigmaNAS here. This ONLY pertains to XigmaNAS.
Forum rules
Set-Up GuideFAQsForum Rules
Post Reply
biggsy
experienced User
experienced User
Posts: 79
Joined: 02 Jul 2012 10:24
Location: Sydney, Australia
Status: Offline

GUI for SSH key-based authentication

Post by biggsy »

I manually added a /root/.ssh/authorized_keys file to my XigmaNAS server.
PuTTY/KiTTY and Filezilla work fine with a key pair created through PuTTYgen.
However, the .ssh directory and the authorized_keys file are gone after the next boot.

My feature request is a GUI-based method for enabling SSH access to XigmaNAS with key-based authentication that is persistent across reboots.

Perhaps a section: System > Advanced Setup > SSH Server that:
1. provides a checkbox to enable the SSH server (default unchecked)
2. provides a checkbox to disable password authentication (default unchecked)
3. allows configuration of the port number for SSH (default 22 and independent of the SSH client config)

Under Access > Users
1. expose the admin/root user as a valid user of the system.

A section under Access > Users > Edit that:
1. provides a place to enter the contents of the authorized_keys file for the user being edited.

A change to the Services menu to show "SSH Client" and "FTP Client", rather than "SSH" and "FTP".

I hope this can be considered for a future release.

User avatar
raulfg3
Site Admin
Site Admin
Posts: 4865
Joined: 22 Jun 2012 22:13
Location: Madrid (ESPAÑA)
Contact:
Status: Offline

Re: GUI for SSH key-based authentication

Post by raulfg3 »

12.1.0.4 - Ingva (revision 7743) on SUPERMICRO X8SIL-F 8GB of ECC RAM, 11x3TB disk in 1 vdev = Vpool = 32TB Raw size , so 29TB usable size (I Have other NAS as Backup)

Wiki
Last changes

HP T510

biggsy
experienced User
experienced User
Posts: 79
Joined: 02 Jul 2012 10:24
Location: Sydney, Australia
Status: Offline

Re: GUI for SSH key-based authentication

Post by biggsy »

Hi raulfg3,

Thanks for replying but surely this mostly is for outbound SSH. Why would a private key be required?

Somewhere to enter the public key for authorized clients is needed.

cheers,
biggsy

User avatar
JoseMR
Hardware & Software Guru
Hardware & Software Guru
Posts: 1058
Joined: 16 Apr 2014 04:15
Location: PR
Contact:
Status: Offline

Re: GUI for SSH key-based authentication

Post by JoseMR »

An "Authorized keys" paste box as per user basis from the WebGUI, that will generate the required key(s) in .ssh will be nice indeed.

However one simple solution for Embedded users is to create a PostInit command that will CP or even LINK the "/mnt/mydata/.ssh" content to "/root" for example, this way you can directly work with "authorized_keys", "id_rsa", "known_hosts" etc as you like, just keep the permissions not too wide as usual.

Regards
System: FreeBSD 12 RootOnZFS Mirror, MB: Supermicro X8SI6-F, Xeon X3450, 16GB DDR3 ECC RDIMMs.
XigmaNAS RootOnZFS
Addons at GitHub
BastilleBSD
Boot Environments Intro
Resources Home Page

Post Reply

Return to “Suggestions & Requests”