Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Opennav

 


Panel

RHEL 6 / CentOS 6 / Scientific Linux 6 Neither RHEL, CentOS nor Scientific Linux (RHEL/CentOS/SL 6) does not ship with a version of OpenSSH that is compatible with Moonshot (they ship with a non-Moonshot-enabled v5. 3 of OpenSSH). To get Moonshot support for it, you must install a specific Moonshot-enabled version (v5. 9). We have a precompiled version available in our repositories.

Contents

Table of Contents

...

Info

Following the instructions on this page will give you a Moonshot-enabled OpenSSH Server only.


Numbered Headings

System Preparation

Add the Moonshot libraries

If you have not already done so, you first need to follow the instructions on how to install the Install Moonshot Libraries on a RHEL / CentOS / SL 6Server.

Install the Yum priorities plug-in

  1. Install the Yum Priorities plugin to enable repository priority management: 

    Code Block
    languagebash
    $ yum install yum-plugin-priorities
    Note

    For more information on the yum-plugin-priorities package, please see https://wiki.centos.org/PackageManagement/Yum/Priorities

  2. Check that the yum-priorities plugin is enabled in your yum configuration:

    Code Block
    languagebash
    $ grep enabled /etc/yum/pluginconf.d/priorities.conf
    enabled = 1
    $ 
  3. If the plugin is not enabled, change the enabled line in /etc/yum/pluginconf.d/priorities.conf to 1.

Add the

Enable the Moonshot OpenSSH Repository

We've moved the

The OpenSSH packages

from the main Moonshot repository into

have their own

, so add the Moonshot RedHat OpenSSH repository to your system by creating a new file at 

dedicated repository, to avoid replacing system's one when not strictly required.

This repository needs to be manually enabled, by editing the /etc/yum.repos.d/moonshot

-ssh

.repo

 with the following content:

 file and setting enabled=1 for the MoonshotSSH repository.

Code Block
linenumberstrue
[Moonshot-OpenSSH
...
# Moonshot SSH repository (including sources)
[MoonshotSSH]
name=
Moonshot-OpenSSH
MoonshotSSH
baseurl=http://repository.project-moonshot.org//rpms/
centos6
centos7-openssh
/

failovermethod=priority
gpgcheck=1
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/
Moonshot
RPM-GPG-KEY-MOONSHOT
priority=1

Ensure that your hostname is correct

The channel bindings check requires that the hostname of your SSH server match the hostname people are SSHing to. That is, the output of the "hostname" and " and hostname -f" commands  commands should match the FQDN of the server. If it doesn't, change the relevant line in /etc/sysconfig/network to make it so.

Installation Instructions

  1. Install the Moonshot-enabled pre-compiled OpenSSH packages using yum. This will replace the system-provided OpenSSH:

    $
    Code Block
    languagebash
    linenumberstrue
    yum update openssh*


  2. If you have already installed the latest version of OpenSSH from the CentOS updates repository and its version is either the same or is newer than the version in our repository, you must use the yum downgrade command to switch the packages to our version:

    $
    Code Block
    languagebash
    linenumberstrue
    yum downgrade openssh*


Configuration Instructions

Note
titleUsePrivilegeSeparation

 This version of OpenSSH does not support the use of privilege separation when using Moonshot authentication. Please follow the UsePrivilegeSeparation instructions in the configuration.

Once installed, the Moonshot-enabled OpenSSH server will still need a few quick tweaks in order to turn on the Moonshot support.

Follow the configuration instructions on the OpenSSH Server page to configure the server.

...