New server access procedures

From: Andrei Adamchik (aadamchi..obox.com)
Date: Sat Oct 20 2001 - 21:55:32 EDT

  • Next message: Andrei Adamchik: "Java 1.3 -> 1.4 migration"

    Guys,

    Our ObjectsStyle.org (aka logical-process.com) server was hacked couple of
    days ago, so I had to reinstall the OS and implement new security
    procedures. BTW, people that hacked it, installed (among other things)
    software that contributes CPU to genom..ome Stanford University project
    (http://genomeathome.stanford.edu/) . What a bunch of good people,
    contributing stolen stuff to the community.

    Your CVS accounts private keys were stored on the server, so they are
    considered compromised. I had to remove them all. Do not try logging to CVS
    with old keys. This document describes new, much more secure procedure to
    create CVS accounts. Once you need to access cayenne CVS, you should follow
    this rules to setup new accounts. Also anonymous CVS access is temporarily
    down. I will see if I can/should restore it. FTP server is down
    intentionally. All the downloads will be done via HTTP.

    Misha, you may implement a similar procedure for your charity CVS (if you
    ever configured one).

    CVS over SSH setup steps on Windows (tested on Windows 2000):
    =================================================

    1. Make sure you HOME variable is defined. Simple way to define it is under
    "Control Panel -> System -> Advanced -> Environment Variables" add new
    *user* variable with name HOME and value %USERPROFILE%. This will set your
    home to be "C:\Documents and Settings\username". Create ".ssh" folder under
    your home directory.

    2. Download needed binaries (ssh, cvs, etc.)
    from http://www.objectstyle.org/downloads/win_cvs_ssh.zip

    3. Unzip this file to a folder in your PATH

    4. Generate your keys. Run "puttygen.exe", create a 1024 bit key and save
    it under %HOME%/.ssh/identity . Public key will not be saved to a file -
    you will need to copy it from puttygen window to the clipboard and paste it
    in email that you should send to me ( you can use address "andrus at
    objectstyle.org") . I will put it on the server and let you know your new
    account name. (Note: difference with our previous approach is that a
    private key will never cross the internet. It was generated on your
    workstation and will stay there. BTW, you can use it to access multiple
    hosts). puttygen.exe is probably the only command line Windows tool to
    generate RSA keys. I got it from
    http://www.chiark.greenend.org.uk/~sgtatham/putty/

    ..... wait till you get your new user name from me.
    .....

    5. under %HOME%/.ssh create a file named "config" with the following content:

    Host objectstyle.org
    User your_new_user_name
    IdentityFile ~/.ssh/identity
    PasswordAuthentication no

    6. modify cvscmd.bat to change "user" in CVSROOT definition to your new name.

    Now you can use cvscmd.bat to open command line with all CVS variables
    setup. You can do "cvs co ObjectStyle" to try it... WinCvs users shoud
    define their CVSROOT, identity file and CVS_RSH appropriately.

    Enjoy.

    Andrei



    This archive was generated by hypermail 2.0.0 : Sat Oct 20 2001 - 20:49:36 EDT