infix
infix copied to clipboard
Verify SSH public key authentication
Main Test
- Create a new private/public key pair using ssh-keygen, e.g.,
ssh-keygen -f /tmp/foobar -N "" - Verify user can fetch data using only the public key, either:
- NETCONF data, e.g., operational status
- /var/log/syslog
Optional
- Create a new user
guest, do not set a password - For the section
authorized-key, extract the relevant portions of the public key:- for
algorithmoption, extract first part of the public key, e.g.,ssh-rsa - for
key-dataoption, extract the middle part of the public key
- for
- Add the new user to an NACM group that has access to read something (limited) from the system