summaryrefslogtreecommitdiff
blob: 33ad5fe1c013b22e13a2888dde56ea6e5985dda6 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"POT-Creation-Date: 2010-10-21 23:56+0600\n"
"PO-Revision-Date: 2010-10-21 23:46+0600\n"
"Last-Translator: Automatically generated\n"
"Language-Team: none\n"
"Language: ru\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(title):6
msgid "Gentoo Linux Keychain Guide"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(author:title):8
msgid "Author"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(mail:link):9
msgid "eric.brown@dnbrown.net"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(mail):9
msgid "Eric Brown"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(author:title):11
#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(author:title):14
msgid "Editor"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(mail:link):12
msgid "vanquirius@gentoo.org"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(mail):12
msgid "Marcelo Góes"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(mail:link):15
msgid "nightmorph"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(abstract):18
msgid ""
"This document describes how to use ssh shared keys along with the keychain "
"program. It assumes basic knowledge of public key cryptography."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(version):27
msgid "1.6"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(date):28
msgid "2010-04-21"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(title):31
msgid "Background"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(title):33
msgid "The problem at hand"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):36
msgid ""
"So you have all of these lovely Gentoo machines running <c>sshd</c>, but "
"it's a little inconvenient for you to keep typing in all of those login "
"passwords, right? Or maybe you have a script or cron-job that needs a "
"convenient way to use an ssh connection. Either way, there is a solution to "
"this problem, and it begins with public key authentication."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(title):47
msgid "How does public key authentication work?"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):50
msgid ""
"Assume we have a client that wants to connect to sshd on a server. The "
"client first generates a key pair and gives the public key to the server. "
"Afterwards, whenever the client attempts to connect, the server sends a "
"challenge that is encrypted with that public key. Only the holder of the "
"corresponding private key (the client) is able to decrypt it, so as you "
"might have guessed, the correct response leads to successful authentication."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(title):63
msgid "How to use public key authentication"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(title):65
msgid "Generating your key pair"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):68
msgid ""
"The first step is to create your key pair. To do this, we will use the "
"<c>ssh-keygen</c> command as follows:"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre:caption):73
msgid "Generating the key pair"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre):73
#, no-wrap
msgid ""
"\n"
"$ <i>ssh-keygen -t dsa</i>\n"
"<comment>(Just accept the default values, and make sure to enter a strong passphrase)</comment>\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(warn):78
msgid ""
"Be sure to choose a strong passphrase, especially if this key is used for "
"root logons!"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):83
msgid ""
"You should now have a private key in <path>~/.ssh/id_dsa</path> and a public "
"key in <path>~/.ssh/id_dsa.pub</path>. We are ready to copy the public key "
"over to the remote host."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(title):92
msgid "Preparing the server"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):95
msgid ""
"We will be copying the <path>~/.ssh/id_dsa.pub</path> file over to the "
"server that runs sshd. We will also be adding it to the <path>~/.ssh/"
"authorized_keys</path> file that belongs the connecting user on that server. "
"Here's an example of how to do that if you already have ssh access to the "
"server."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre:caption):103
msgid "Copying the public key to the server"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre):103
#, no-wrap
msgid ""
"\n"
"$ <i>scp ~/.ssh/id_dsa.pub server_user@server:~/myhost.pub</i>\n"
"$ <i>ssh server_user@server \"cat ~/myhost.pub &gt;&gt; ~/.ssh/authorized_keys\"</i>\n"
"$ <i>ssh server_user@server \"cat ~/.ssh/authorized_keys\"</i>\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):109
msgid ""
"The output from that last line should show you the contents of the <path>~/."
"ssh/authorized_keys</path> file. Make sure it looks correct."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(title):117
msgid "Testing the setup"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):120
msgid ""
"Theoretically, if all went well, and the ssh daemon on the server allows it, "
"we should be able to get ssh access without a password on the server now. We "
"will still need to decrypt the private key on the client with the passphrase "
"we used before, but this should not be confused with the passphrase of the "
"user account on the server."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre:caption):128
msgid "Testing the keys"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre):128
#, no-wrap
msgid ""
"\n"
"$ <i>ssh server_user@server</i>\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):132
msgid ""
"Hopefully, it asked you for your passphrase for id_dsa, and you were able to "
"gain ssh access as server_user on the server. If not, login as server_user, "
"and verify the contents of <path>~/.ssh/authorized_keys</path> to make sure "
"each entry is on a single line. You might also want to check the sshd "
"configuration to make sure that it prefers to use public key authorization "
"when available."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):140
msgid ""
"At this point, you're probably thinking, \"What's the point, I just replaced "
"one password with another?!\" Relax, the next section will show you exactly "
"how we can use this to save your precious time."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(title):150
msgid "Making public key authentication convenient"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(title):152
msgid "Typical key management with ssh-agent"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):155
msgid ""
"If you've been following along, you're probably thinking that it would be "
"great if we could somehow decrypt our private key(s) once, and gain the "
"ability to ssh freely, without any passwords. You are in luck, that is "
"exactly what the program <c>ssh-agent</c> is for."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):162
msgid ""
"The program <c>ssh-agent</c> is usually started at the beginning of your X "
"session, or from a shell startup script like <path>~/.bash_profile</path>. "
"It works by creating a unix-socket, and registering the appropriate "
"environment variables so that all subsequent applications can take advantage "
"of it's services by connecting to that socket. Clearly, it only makes sense "
"to start it in the parent process of your X session if you want to use the "
"set of decrypted private keys in all subsequent X applications."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre:caption):172
msgid "Preparing ssh-agent"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre):172
#, no-wrap
msgid ""
"\n"
"$ <i>ssh-agent</i>\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(note):176
msgid ""
"This ssh-agent will keep keys decrypted until you kill ssh-agent. If you "
"want to set a lifetime for the keys, use the -t argument as described in "
"<c>man ssh-agent</c>."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):182
msgid ""
"When you run ssh-agent, it should tell you the PID of the running ssh-agent, "
"and also set a few environment variables, namely <c>SSH_AUTH_SOCK</c> and "
"<c>SSH_AGENT_PID</c>. It should also automatically add <path>~/.ssh/id_dsa</"
"path> to it's collection and ask you for the corresponding passphrase. If "
"you have other private keys you want to add to the running ssh-agent, you "
"can use the <c>ssh-add</c> command as follows:"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre:caption):191
msgid "Adding more keys to ssh-agent"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre):191
#, no-wrap
msgid ""
"\n"
"$ <i>ssh-add somekeyfile</i>\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):195
msgid ""
"Now for the magic. Since you should now have your decrypted private key "
"ready, you should be able to ssh into the server without entering any "
"passwords."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre:caption):200
msgid "Ssh without passwords"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre):200
#, no-wrap
msgid ""
"\n"
"$ <i>ssh server</i>\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):204
msgid ""
"It would be nice to know how to shut down ssh-agent in case you need to, "
"right?"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre:caption):208
msgid "Shutting down ssh-agent"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre):208
#, no-wrap
msgid ""
"\n"
"$ <i>ssh-agent -k</i>\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(note):212
msgid ""
"If you had problems getting ssh-agent to work, it might still be running. "
"You can kill it like any other process by running <c>killall ssh-agent</c>."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):217
msgid ""
"If you want even more convenience from ssh-agent, proceed to the next "
"section on using keychain. Be sure to kill the running ssh-agent as in the "
"example above if you decide to do so."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(title):226
msgid "Squeezing the last drop of convenience out of ssh-agent"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):229
msgid ""
"Keychain will allow you to reuse an ssh-agent between logins, and optionally "
"prompt for passphrases each time the user logs in. Before we get ahead of "
"ourselves though, let's emerge it first."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre:caption):235
msgid "Installing keychain"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre):235
#, no-wrap
msgid ""
"\n"
"# <i>emerge keychain</i>\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):239
msgid ""
"Assuming that was successful, we can now use keychain freely. Add the "
"following to your <path>~/.bash_profile</path> to enable it:"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre:caption):244
msgid "Enabling keychain in .bash_profile"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre):244
#, no-wrap
msgid ""
"\n"
"keychain ~/.ssh/id_dsa\n"
". ~/.keychain/$HOSTNAME-sh\n"
". ~/.keychain/$HOSTNAME-sh-gpg\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(note):250
msgid ""
"You can add more private keys to the command line as you desire. Also, if "
"you want it to ask for passphrases each time you spawn a shell, add the --"
"clear option."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(note):256
msgid ""
"If you are not using bash, check the <b>EXAMPLES</b> section of <c>man "
"keychain</c> for examples of use in other shells. The idea is to get those "
"commands to run each time you use a shell."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):262
msgid ""
"Let's test it. First make sure we killed the ssh-agent from the previous "
"section, then start up a new shell, usually by just logging in, or spawning "
"a new terminal. It should prompt you for the password for each key you "
"specified on the command line. All shells opened after that point should "
"reuse the ssh-agent, allowing you to make passwordless ssh connections over "
"and over."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(title):273
msgid "Using keychain with KDE"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):276
msgid ""
"If you are a KDE user, instead of using <path>~/.bash_profile</path>, you "
"can let KDE manage ssh-agent for you. In order to do so, you will have to "
"edit <path>/etc/kde/agent-startup.sh</path>, which is read during KDE's "
"startup, and <path>/etc/kde/shutdown/agent-shutdown.sh</path>, which is "
"executed during KDE's shutdown. Here is how you could edit those files:"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre:caption):284
msgid "Editing /etc/kde/agent-startup.sh"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre):284
#, no-wrap
msgid ""
"\n"
"if [ -x /usr/bin/ssh-agent ]; then\n"
"  eval \"$(/usr/bin/ssh-agent -s)\"\n"
"fi\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre:caption):290
msgid "Editing /etc/kde/shutdown/agent-shutdown.sh"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre):290
#, no-wrap
msgid ""
"\n"
"if [ -n \"${SSH_AGENT_PID}\" ]; then\n"
"  eval \"$(ssh-agent -k)\"\n"
"fi\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):296
msgid ""
"Now, all you have to do is launch a term of your choice, like Konsole, and "
"load the keys you would like to use. For example:"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre:caption):301
msgid "Loading ssh key"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(pre):301
#, no-wrap
msgid ""
"\n"
"$ <i>keychain ~/.ssh/id_dsa</i>\n"
"<comment>(Enter your key password)</comment>\n"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):306
msgid ""
"Your keys will be remembered until you end your KDE session or kill the ssh-"
"agent manually."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(title):316
msgid "Concluding remarks"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(title):318
msgid "Security considerations"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):321
msgid ""
"Of course, the use of ssh-agent may add a bit of insecurity to your system. "
"If another user were to use your shell while you were in the bathroom, he "
"could login to all of your servers without passwords. As a result, it is a "
"risk to the servers you are connecting to, and you should be sure to consult "
"the local security policy. If you do use it, be sure to take the appropriate "
"measures to ensure the security of your sessions."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(title):333
msgid "Troubleshooting"
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(p):336
msgid ""
"Most of this should work pretty well, but if you encounter problems, you'll "
"certainly want to know a few useful things."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(li):342
msgid ""
"If you are unable to connect without ssh-agent, consider using ssh with the "
"arguments -vvv to find out what's happening. Sometimes the server is not "
"configured to use public key authentication, sometimes it is configured to "
"ask for local passwords anyway! If that is the case, you may want to also "
"use the -o option with ssh, or change the server sshd_config."
msgstr ""

#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(li):349
msgid ""
"If you are having problems with ssh-agent or keychain, it may be that you "
"are not using a shell that understands the commands they use. Consult the "
"man pages for ssh-agent and keychain for details on working with other "
"shells."
msgstr ""

#. Place here names of translator, one per line. Format should be NAME; ROLE; E-MAIL
#: ../../gentoo/xml/htdocs/doc/en//keychain-guide.xml(None):0
msgid "translator-credits"
msgstr ""