<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Blog O' Matty &#187; OpenSSH</title>
	<atom:link href="http://prefetch.net/blog/index.php/category/openssh/feed/" rel="self" type="application/rss+xml" />
	<link>http://prefetch.net/blog</link>
	<description>Blog O' Matty</description>
	<lastBuildDate>Wed, 16 May 2012 00:16:36 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
		<item>
		<title>Integrating ssh-agent into your login process</title>
		<link>http://prefetch.net/blog/index.php/2012/01/28/integrating-ssh-agent-into-your-login-process/</link>
		<comments>http://prefetch.net/blog/index.php/2012/01/28/integrating-ssh-agent-into-your-login-process/#comments</comments>
		<pubDate>Sat, 28 Jan 2012 13:35:14 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[Linux Security]]></category>
		<category><![CDATA[OpenSSH]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/?p=5308</guid>
		<description><![CDATA[Most of my readers utilize SSH keys to access remote systems. The security benefits are well known, and key-based authentication makes automating remote tasks a whole lot easier. When you use key-based authentication it becomes imperative to protect your private key, since a third party could access your systems if they were able to gain [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2012/01/28/integrating-ssh-agent-into-your-login-process/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>A couple of gotchas with the OpenSSH chroot() implementation</title>
		<link>http://prefetch.net/blog/index.php/2012/01/21/a-couple-of-gotchas-with-the-openssh-chroot-implementation/</link>
		<comments>http://prefetch.net/blog/index.php/2012/01/21/a-couple-of-gotchas-with-the-openssh-chroot-implementation/#comments</comments>
		<pubDate>Sat, 21 Jan 2012 14:09:29 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[OpenSSH]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/?p=5360</guid>
		<description><![CDATA[I previously discussed the OpenSSH Match directive, and how it can be used to chroot SSH and SFTP users. Over the past couple of months I&#8217;ve encountered some gotchas with the chroot implementation in OpenSSH. Since I had to figure these items out myself, I figured I would share my findings here so folks wouldn&#8217;t [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2012/01/21/a-couple-of-gotchas-with-the-openssh-chroot-implementation/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>How to encrypt an SSH private key</title>
		<link>http://prefetch.net/blog/index.php/2012/01/20/how-to-encrypt-an-ssh-private-key/</link>
		<comments>http://prefetch.net/blog/index.php/2012/01/20/how-to-encrypt-an-ssh-private-key/#comments</comments>
		<pubDate>Fri, 20 Jan 2012 20:55:27 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[OpenSSH]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/?p=5337</guid>
		<description><![CDATA[If you are using SSH key-based authentication you should be encrypting your private key. This ensures that if someone breaks into your server and steals your keys, they won&#8217;t be able to utilize them to access other systems. If your private key isn&#8217;t encrypted you can use the ssh-keygen utilities &#8220;-p&#8221; option to do so: [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2012/01/20/how-to-encrypt-an-ssh-private-key/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Speeding up SSH (SCP) data transfers</title>
		<link>http://prefetch.net/blog/index.php/2011/07/19/speeding-up-ssh-scp-data-transfers/</link>
		<comments>http://prefetch.net/blog/index.php/2011/07/19/speeding-up-ssh-scp-data-transfers/#comments</comments>
		<pubDate>Tue, 19 Jul 2011 14:23:54 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[Linux Networking]]></category>
		<category><![CDATA[OpenSSH]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/?p=4455</guid>
		<description><![CDATA[I&#8217;ll be the first to admit that I&#8217;m an SCP addict. It doesn&#8217;t matter what kind of data I&#8217;m working with, if it can be turned into an object that I move around with scp I&#8217;m in! One thing I&#8217;ve always noticed with scp is the dismal out of the box performance. I read quite [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2011/07/19/speeding-up-ssh-scp-data-transfers/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>A simple and easy way to restart dropped SSH sessions on Linux servers</title>
		<link>http://prefetch.net/blog/index.php/2011/03/24/a-simple-and-easy-way-to-restart-dropped-ssh-sessions-on-linux-servers/</link>
		<comments>http://prefetch.net/blog/index.php/2011/03/24/a-simple-and-easy-way-to-restart-dropped-ssh-sessions-on-linux-servers/#comments</comments>
		<pubDate>Thu, 24 Mar 2011 12:29:13 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[Linux Utilities]]></category>
		<category><![CDATA[OpenSSH]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/?p=4237</guid>
		<description><![CDATA[I frequently use OpenSSH port forwards to move around my various networks, and there is nothing worse than an SSH connection dropping when you make heavy use of them. Recently I came across the autossh utility, which provides a crazy easy way to monitor ssh sessions and restart them when they are reset or dropped. [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2011/03/24/a-simple-and-easy-way-to-restart-dropped-ssh-sessions-on-linux-servers/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Chroot&#8217;ing users with openssh</title>
		<link>http://prefetch.net/blog/index.php/2009/03/15/chrooting-users-with-openssh/</link>
		<comments>http://prefetch.net/blog/index.php/2009/03/15/chrooting-users-with-openssh/#comments</comments>
		<pubDate>Sun, 15 Mar 2009 15:31:56 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[OpenSSH]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/?p=1126</guid>
		<description><![CDATA[I recently learned about the new ChrootDirectory in OpenSSH 5.2, and wanted to play around with it to see what it was capable of. To begin my quest, I started off by creating a couple of users that would be chroot&#8217;ed to their home directories when they logged into the server with sftp. Once the [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2009/03/15/chrooting-users-with-openssh/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>OpenSSH&#8217;s VPN</title>
		<link>http://prefetch.net/blog/index.php/2008/06/26/opensshs-vpn/</link>
		<comments>http://prefetch.net/blog/index.php/2008/06/26/opensshs-vpn/#comments</comments>
		<pubDate>Thu, 26 Jun 2008 20:18:42 +0000</pubDate>
		<dc:creator>mike</dc:creator>
				<category><![CDATA[OpenSSH]]></category>
		<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/?p=871</guid>
		<description><![CDATA[Most SSH clients have the ability to perform local and remote port forwarding.  This is a pretty neat use of SSH if you haven’t ever seen it before.  OpenSSH can take it one step further and provide a full VPN solution encrypting all network traffic on all ports between two machines.  This is pretty powerful [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2008/06/26/opensshs-vpn/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Respect my ~/.Xauthority !#@$!</title>
		<link>http://prefetch.net/blog/index.php/2008/04/05/respect-my-xauthority/</link>
		<comments>http://prefetch.net/blog/index.php/2008/04/05/respect-my-xauthority/#comments</comments>
		<pubDate>Sat, 05 Apr 2008 05:09:41 +0000</pubDate>
		<dc:creator>mike</dc:creator>
				<category><![CDATA[OpenSSH]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/?p=867</guid>
		<description><![CDATA[South Park is a hilarious show, and I think that Cartman is the best character.  One of Cartman&#8217;s classic lines is &#8220;YOU WILL RESPECT MY AUTHORITAH!#!&#8221; So Cartman wasn&#8217;t a unix geek and wasn&#8217;t talking about X11 Forwarding / SSH, but maybe there is a moral to the story. You have to execute some sort of [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2008/04/05/respect-my-xauthority/feed/</wfw:commentRss>
		<slash:comments>6</slash:comments>
		</item>
		<item>
		<title>Chroot capabilities in sshd</title>
		<link>http://prefetch.net/blog/index.php/2008/03/31/chroot-capabilities-in-sshd/</link>
		<comments>http://prefetch.net/blog/index.php/2008/03/31/chroot-capabilities-in-sshd/#comments</comments>
		<pubDate>Mon, 31 Mar 2008 21:23:14 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[OpenSSH]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/index.php/2008/03/31/chroot-capabilities-in-sshd/</guid>
		<description><![CDATA[I just looked over the sshd 4.9 release notes, and came across this gem: * Added chroot(2) support for sshd(8), controlled by a new option "ChrootDirectory". Please refer to sshd_config(5) for details, and please use this feature carefully. (bz#177 bz#1352) This is awesome, and should negate the need to use pam_chroot! Nice!]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2008/03/31/chroot-capabilities-in-sshd/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>When SSH permissions bite!</title>
		<link>http://prefetch.net/blog/index.php/2007/04/12/when-ssh-permissions-bite/</link>
		<comments>http://prefetch.net/blog/index.php/2007/04/12/when-ssh-permissions-bite/#comments</comments>
		<pubDate>Thu, 12 Apr 2007 08:06:12 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[OpenSSH]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/index.php/2007/04/12/when-ssh-permissions-bite/</guid>
		<description><![CDATA[Last week I set up several Linux and Solaris hosts to use key based authentication. For some reason two of the hosts continued to prompt me for a password, even though the server and client were configured correctly to used DSA keys (I was using the same config on all of the servers, so I [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2007/04/12/when-ssh-permissions-bite/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
	</channel>
</rss>

