{"id":17,"date":"2015-06-10T15:12:41","date_gmt":"2015-06-10T14:12:41","guid":{"rendered":"http:\/\/jjtronics.com\/wordpress\/?p=17"},"modified":"2016-11-09T11:32:34","modified_gmt":"2016-11-09T10:32:34","slug":"materiel-informatique","status":"publish","type":"post","link":"https:\/\/www.jjtronics.com\/wordpress\/2015\/06\/10\/materiel-informatique\/","title":{"rendered":"Comment se connecter par ssh sans mot de passe (Utilisation de votre key ssh)"},"content":{"rendered":"<p>Bonjour,<\/p>\n<p>Une petite note rapide vous permettant de vous connecter a vos serveur SSH sans taper de mot de passe<\/p>\n<p>Pour cela il y a une solution simple et s\u00e9curis\u00e9 :<\/p>\n<p>-Cr\u00e9er\u00a0une cl\u00e9 priv\u00e9e et une cl\u00e9 publique crypt\u00e9es<\/p>\n<p>-Ajouter votre cl\u00e9 publique \u00e0 la liste des cl\u00e9s autoris\u00e9es du serveur distant afin de permettre l\u2019authentification.<\/p>\n<p>&nbsp;<\/p>\n<p>Nous allons donc commencer par g\u00e9n\u00e9rer les cl\u00e9s :<\/p>\n<p>-Sous Mac\/Linux :<\/p>\n<pre class=\"lang:default decode:true \" title=\"ssh-keygen\">ssh-keygen -t rsa -b 2048<\/pre>\n<p>les cl\u00e9s seront enregistr\u00e9es dans \u2018.shh\u2019 du r\u00e9pertoire de d\u00e9part de l\u2019utilisateur (ici sur Mac :\u00a0\/Users\/VotreUser\/.ssh\/).<\/p>\n<p>Je vous conseille donc \u00e0 la premi\u00e8re question de laisser le r\u00e9pertoire par d\u00e9faut<\/p>\n<p>A la question de la paraphrase, n&rsquo;entrez rien (sauf si vous voulez taper un mot de passe \u00e0 chaque fois)<\/p>\n<p>Vos deux key (public et priv\u00e9)\u00a0ont maintenant \u00e9t\u00e9 cr\u00e9\u00e9s (dans le dossier \u2018~\/.ssh\/\u2019) :<\/p>\n<ul>\n<li>\u2018id_rsa\u2019 (ou \u2018id_dsa\u2019 dans le cas d\u2019une cl\u00e9 DSA) : contient la cl\u00e9 priv\u00e9e et ne doit pas \u00eatre d\u00e9voil\u00e9 ou mis \u00e0 disposition<\/li>\n<li>\u2018id_rsa.pub\u2019 (ou \u2018id_dsa.pub\u2019 dans le cas d\u2019une cl\u00e9 DSA) : contient la cl\u00e9 publique, c\u2019est elle qui sera mise sur le serveur dont l\u2019acc\u00e8s est voulu.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>Il faut ensuite <strong>d\u00e9poser la cl\u00e9 publique sur le serveur distant que vous souhaitez joindre en ssh :<\/strong><\/p>\n<ul>\n<li>Depuis un Mac (ssh-copy-id n\u2019est pas disponible sur OS X)\n<div>\n<div id=\"highlighter_9592\" class=\"syntaxhighlighter shell\">\n<pre class=\"lang:default decode:true\">cat ~\/.ssh\/id_rsa.pub | ssh user@serveur.fr\u00a0 \"cat &gt;&gt; ~\/.ssh\/authorized_keys\"<\/pre>\n<\/div>\n<\/div>\n<\/li>\n<li>Sous Linux :\n<div>\n<div id=\"highlighter_937340\" class=\"syntaxhighlighter shell\">\n<pre class=\"lang:default decode:true\">ssh-copy-id -i ~\/.ssh\/id_dsa.pub user@serveur.fr<\/pre>\n<p>Et voil\u00e0, c\u2019est normalement la derni\u00e8re fois que l\u2019on vous demandera votre mot de passe !!<\/p>\n<\/div>\n<\/div>\n<p>&nbsp;<\/li>\n<\/ul>\n<p><strong>Quel est l\u2019int\u00e9r\u00eat de d\u00e9finir une \u2018passphrase\u2019 ?<\/strong><\/p>\n<p>Si quelqu\u2019un r\u00e9cup\u00e8re votre cl\u00e9 priv\u00e9, il peut alors se connecter \u00e0 toutes les machines o\u00f9 la clef publique a \u00e9t\u00e9 d\u00e9pos\u00e9e.<\/p>\n<p>Si vous ne voulez pas retapez votre \u2018passphrase\u2019 \u00e0 chaque connection, le mieux, au lieu de ne pas en utiliser est d\u2019utiliser le cache ssh-agent.<\/p>\n<p>Sur Mac, vous pouvez ajouter la cl\u00e9 priv\u00e9e \u00e0 votre Trousseau, comme cela pas besoin de syst\u00e9matiquement retaper votre phrase magique :<\/p>\n<pre class=\"lang:default decode:true \">ssh-agent\r\nssh-add -K<\/pre>\n<p>Et si un jour vous avez besoin de modifier votre \u2018passphrase\u2019 :<\/p>\n<pre class=\"lang:default decode:true \">ssh-keygen -p<\/pre>\n<p>&nbsp;<\/p>\n<p>Et voil\u00e0, vous pouvez formater votre cerveau de tous vos mot de passes !!!<\/p>\n<p>Des soucis, des erreurs ? N&rsquo;h\u00e9sitez pas \u00e0 m&rsquo;en parler.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Bonjour, Une petite note rapide vous permettant de vous connecter a vos serveur SSH sans taper de mot de passe [&#038;hellip<\/p>\n","protected":false},"author":1,"featured_media":388,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":true,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[2,8,5],"tags":[86,87,88,100,110,91,102,112,111],"class_list":["post-17","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux","category-macosx","category-linux-shell","tag-hardware-2","tag-linux-2","tag-mac","tag-o","tag-os","tag-os-x","tag-ssd","tag-ssh","tag-x"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/www.jjtronics.com\/wordpress\/wp-content\/uploads\/2013\/01\/ssh_0602.gif","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p6YUVZ-h","jetpack-related-posts":[],"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/www.jjtronics.com\/wordpress\/wp-json\/wp\/v2\/posts\/17","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jjtronics.com\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jjtronics.com\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jjtronics.com\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jjtronics.com\/wordpress\/wp-json\/wp\/v2\/comments?post=17"}],"version-history":[{"count":6,"href":"https:\/\/www.jjtronics.com\/wordpress\/wp-json\/wp\/v2\/posts\/17\/revisions"}],"predecessor-version":[{"id":389,"href":"https:\/\/www.jjtronics.com\/wordpress\/wp-json\/wp\/v2\/posts\/17\/revisions\/389"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.jjtronics.com\/wordpress\/wp-json\/wp\/v2\/media\/388"}],"wp:attachment":[{"href":"https:\/\/www.jjtronics.com\/wordpress\/wp-json\/wp\/v2\/media?parent=17"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jjtronics.com\/wordpress\/wp-json\/wp\/v2\/categories?post=17"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jjtronics.com\/wordpress\/wp-json\/wp\/v2\/tags?post=17"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}