Engima2 enable ssh key access only

[birdman]

It's running busybox, so the ssh is dropbear.

Not quite sure why I though the former meant the latter.

Anyway - I (think) I've worked out a way to do it.

1. Create a .ssh directory for root.
2. Put an authorized_keys file in . This should contain the public copy of the key you wish to authenticate with (one line starting ssh-rsa.....).
3. Then change the /etc/default/dropbear file to contain:

   DROPBEAR_EXTRA_ARGS="-g"

For this to persists over any reflashes you'll need to add /etc/default/dropbear and /home/root/.ssh to the backup file list.

[Alankellyeire]

Not quite sure why I though the former meant the latter.

Anyway - I (think) I've worked out a way to do it.

1. Create a .ssh directory for root.
2. Put an authorized_keys file in . This should contain the public copy of the key you wish to authenticate with (one line starting ssh-rsa.....).
3. Then change the /etc/default/dropbear file to contain:

   DROPBEAR_EXTRA_ARGS="-g"

For this to persists over any reflashes you'll need to add /etc/default/dropbear and /home/root/.ssh to the backup file list.

no luck bud.

this has me baffled. on the man page it says dropbearconvert is needed to convert the private key either openssh or dropbear to the other. since mac and Ubuntu use openssh shouldn't i need to use it.

im going to keep searching, if i find a solution or anything helpful ill post it here.

thanks

[birdman]

this has me baffled. on the man page it says dropbearconvert is needed to convert the private key either openssh or dropbear to the other. since mac and Ubuntu use openssh shouldn't i need to use it.

You don't need to convert any keys.

Oh. and I forgot to add the final point above.

Restart* dropbear, or reboot the system (which will achieve the same thing):

*

/etc/init.d/dropbear restart

[Alankellyeire]

I have been restarting after every settings change but still no luck. I try again when I finish work and I'll post all the commands Im using.

Can you connect to your box using keys generated using openssh? Like I'm trying to do?

[birdman]

Can you connect to your box using keys generated using openssh? Like I'm trying to do?

Yes, I just copy the id_rsa.pub file from the account I want to connect to root to /home/root/.ssh/authorized_keys.

Having done that and restarted dropbear with a "-g" option the result is:

Account with that id_rsa.pub

[parent]: slogin root@et8000
root@et8000:~#

Account without that id_rsa.pub

tester@parent ~ $ slogin root@et8000
root@et8000's password: 
Permission denied, please try again.

It still prompts for a password, so that you don't know why it's not letting you in.

if I wanted to allow multiple accounts to connect I'd just catenate all of their id_rsa.pub files into the authorized_keys file.