Root Access

tereško

11:00 PM

whe you listed the folder, you saw something like "drwxr-xr-x"

those are permissions

Sajad

wait ...

for 700

I don't need to file name ?

just it ? chmod 700 .ssh

?

tereško

no, that second command was for the directory

ah ok

drwxr-xr-x

done

11:01 PM

this thing would translate to 755

first symbol tells you whether it is a directory

and then there are groups of 3 symbols

Sajad

ah ok

so ?

tereško

do you understand?

Sajad

!!!!!!!!!!!

yes !

I feel like a police :)

tereško

so, 600 means "only owner (sajad) can read or write this file"

Sajad

ah

my .ssh file is this now: drwx-----

tereško

11:05 PM

ok, now open a different putty window

Sajad

ok

tereško

@Sajad it's a directory. And for you to be able to open a directory it needs the X bit

Sajad

done

tereško

now, start by clicking on "SSH" in that sidebar tree of putty

and then "Auth"

found it?

Sajad

I did not get this :

now, start by clicking on "SSH" in that sidebar tree of putty

tereško

11:08 PM

Sajad

Now I have two putty window that are connect to the server

I close one of them ?

tereško

yes

Sajad

ok

tereško

open it again, but don't log in

Sajad

ah ok

tereško

11:09 PM

instead go to the part in the picture

I browse that file ?

freebsd-vm.ppk file

@tereško I did

ok

I press "open" ?

11:10 PM

no

and then you go back to "session", write in "sajad@localhost" and press "save" .. and then "open"

Sajad

where is "session" ?

tereško

at the top

Sajad

ah ok

I did

tereško

if you did all this correctly, it will be asking you for password (the one that you wrote when crating a key in puttygen)

Sajad

passphrase for key "sajad@laptop":

tereško

11:12 PM

yes, the one from putty gen

Sajad

very good !!!!

worked correctly !

tereško

so, this is called "two factor authentication"

Sajad

Now I can be connect in the server with two password

tereško

to log in as "sajad" you need to own a key and you need to know the passphrase

Sajad

which one is owner ?

tereško

11:14 PM

@Sajad what do you mean?

Sajad

@tereško for login as "sajad", is what ?

"sajad" is limited user ?

tereško

no

Sajad

look

I have two password for connectiong to server

right ?

tereško

no

Sajad

:)

I have !

one from putty key generator

tereško

11:16 PM

ok, lets complete the process, and then I will answer your questions

Sajad

one from the main password

@tereško ok

tereško

so, close the putty window where you logged in as root

Sajad

as root is the first putty ?

how can I undrestand I'm as root or as sajad ?

tereško

teresko@sigillum:~/.ssh %

this is what I see in my terminal , it tells me that I am user "teresko" on server "sigillum" and in directory "~/.ssh"

Journeyman Geek

whoami ;p

your prompt can be customised.

Sajad

11:18 PM

sajad@sajad:~ is what I see in the terminal

tereško

in both putty terminals?

Sajad

@tereško I see

@tereško Yes !

there is no root !

tereško

well, then close one of them

Sajad

ok

tereško

now, write: su

it will ask you for root password

Sajad

11:19 PM

no

tereško

?

Sajad

password:
su: Sorry

tereško

did you write the root password?

Journeyman Geek

@allquixotic java based tho?

I seem to recall its one server, many remote systems tho, which is nice

Sajad

@tereško ok done

root@sajad:/home/sajad #

tereško

11:21 PM

waht was the problem? what did you do wrong?

Journeyman Geek

@tereško: next time you walk someone through... er... everything at all, you might want to consider creating a new room ;p

4

Sajad

@tereško 'us' instead of 'su'

tereško

@JourneymanGeek true, but this room has been dead for many hours

Journeyman Geek

@tereško: cause people are too polite to interrupt ;p

tereško

@Sajad , ok, now you need to go back to sshd_config file and disable the root login again.

Sajad

11:22 PM

when I wrote 'us', it told me "command not found", and then I wrote "su" and press enter two time, never mind !

@tereško where is sshd_config ?

tereško

in /etc/ssh/ directory

Sajad

@tereško I can not find that

tereško

PermitRootLogin, I think

or AlloweRootLogin

40+ line

Sajad

what I write now ?

tereško

you should change it to "no"

Sajad

11:26 PM

root@sajad:~ #

@tereško I know, how can I open it ?

I forgot

tereško

with "ee"

Sajad

ee /etc/ssh/ directory ?

tereško

you need the filename too

Sajad

@tereško what is file name ?

sshd_config

ok

tereško

yes

Sajad

11:27 PM

ee /etc/ssh/ sshd_config ?

tereško

without the space

Sajad

ow! so sensitive !

I set "yes" to "now" and put a # on the back of it ?

tereško

"no"

you can leave out the #

the # is for commenting out a line

Sajad

just change 'yes' to 'no', right ?

tereško

aha

Sajad

11:29 PM

@tereško ah ok

tereško

and then restart the sshd service

Sajad

restart sshd service ?

tereško

no

Sajad

I forgot that code .. how restart it ?

tereško

press arrow up several times

Sajad

11:31 PM

ow! but I closed that putty window (that I restarted one time)

tereško

try anyway

Sajad

ok

service sshd restart ?

tereško

yes

Sajad

done

all thing is fine ? and done ?

tereško

ok, the "security part" is complete

Sajad

11:33 PM

very good !

Do I close putty key Generator ?

tereško

now only way to remotely log in is using "sajad" user if you have the key and know the passphrase

yes, you can close the generator

questions?

Sajad

ok, one short question

root@sajad is owner or sajad@sajad ?

which one is better ?

Stronger

unlimited

tereško

root user has full access to everything

Sajad

aha, I got it !

tereško

is the "administrator"

Sajad

11:36 PM

@tereško I got it !

tereško

thing is, "root" user exists on all linux & bsd systems

Sajad

@tereško ah

tereško

if I want to hack your VPS, that will be user I try to break in

my VPS get bombarded by root login attempts from chine all the time

Sajad

ah ! I see

tereško

but since root login is disables in ssh config, they can try till the end of time

Sajad

11:38 PM

@tereško yes I undrestand it

tereško

and the "simple user" account requires an RSA key to log in

and the hackers don't have that

Sajad

@tereško RSA key is: that big text ?

tereško

well, yes and no

you have two keys: private and public

private key is that *.ppk file

public key is what you put in the authorized_keys file

if you want someone to give you access, you send them your public key

Sajad

I see !

tereško

remember, I posted a link from wikipedia and told you to read it later ..

Sajad

11:40 PM

@tereško ok I will

tereško

ok

Sajad

ok well, you need to sleep now, right ?

tereško

soon

lets actually install something on that box

Sajad

@tereško ok ... very well

what thing ?

tereško

php5.6

Sajad

11:41 PM

oh wait

I can open my server by browser ?

there is a IP for my server ? or domain ? :)

tereško

currently only public service that it is runnig is SSH

you need to install webserver for opening something in a web browser

Sajad

ah

webserver is like Cpanel ?

tereško

no, like apache or nginx

Sajad

ah !!!!

ok

well, how can I install php5.6 ?

tereško

to install packages on freebsd you sue "pkg" (some of the commands are here: wiki.freebsd.org/PkgPrimer)

first you need to find a name of the package: pkg search php

(there will be a alot)

Sajad

11:46 PM

I write this pkg search php in the terminal ?

tereško

yes

(when you run it first time, it will want to download a lost of packages)

Sajad

the package management tool is not yet installed on your system

do you want to fetch and install it now ?

[y/n]:

tereško

you do want to

Sajad

please wait ...

it is downloading now ?

tereško

yes

Sajad

11:47 PM

ok

tereško

it is downloading a list of all available packages and their dependencies

Sajad

alright ...

tereško

basically, it's collecting information about what you can install

did you get the big list or is it still downloading?

Sajad

no

wait

@tereško still should I wait ?

tereško

hmm .. something is different

wait a little bit more

Sajad

11:52 PM

oh !!

?

big list shown

ok

there is all version of php

tereško

now try: pkg search php56

that will give you only the list relevant to php 5.6

Sajad

11:53 PM

ah

tereško

without the dot

Sajad

ok

tereško

see the stuff ?

good

Sajad

unknown command : php56

tereško

1 min ago, by tereško

now try: pkg search php56

Anmol Raghuvanshi

11:55 PM

:)

Sajad

ok, done

tereško

you have an attention span of a goldfish

Sajad

@tereško :)

ok, I'm seeing the result

tereško

ok, now, to install stuff, the command is: pkg install <name>

try : pkg install php56

Sajad

ok

tereško

11:56 PM

it will install just php, without extensions

Sajad

ah

php has extensions ?

proceed with this action? [y/n] ?

tereško

yes, sessions are an extension, pdo is an extension

Sajad

@tereško oh ! I need them

tereško

you will install them later

Sajad

there is not a package fully ?

10 %

20 %

40 %

ow it is so fast

50 %

90 %

Anmol Raghuvanshi

11:59 PM

error ;p

Sajad

@AnmolRaghuvanshi no

Transcript for