8 Replies Latest reply on Dec 18, 2012 11:27 AM by aLTeReGo

SSH certificate support

gatherworks Jan 20, 2012 6:38 AM

Hi,

When executing unix scripts or nagios scripts, ssh is used to interact with the unix servers. The only problem is that no SSH certificates are supported today.

When securing a unix server, it is common not to allow any password authentication for SSH. The only way to get SSH access is through public/private key algorithms making it very hard for hackers to hack into. Then once you have access with a secure certificate, you will need password authentication to become a root user.

Unfortunately, if you want to use APM, you have to open up your Unix server to password authentication. This makes it much easier for bots to use brute-force attacks to gain access to your servers.

By supporting SSH certificates, I would be able to use APM and not compromise the security of our servers.

Thanks!
Frik

Re: SSH certificate support

aLTeReGo Jan 20, 2012 7:23 PM (in response to gatherworks)

Thanks for the feedback gatherworks. I've heard this mentioned a few times before by other customers. We're currently tracking this feature request internally as FB87982. Other Thwackers are encouraged to chime in as well if you'd like to see similar functionality added to APM.
Like (0)

Actions
- Re: SSH certificate support
  
  gatherworks Jan 23, 2012 4:39 AM (in response to aLTeReGo)
  
  Here is an example of a recent exploit on Linux:
  http://blog.zx2c4.com/749 -- contains link to http://www.youtube.com/watch?feature=player_embedded&v=yLu4q4gMCCA
  If you watch the youtube video, you will see how a regular user is able to become root. This is why you do not want to allow password authentication for SSH.
  
  Like (0)
  
  Actions
- Re: SSH certificate support
  
  rsprim Apr 10, 2012 9:39 PM (in response to aLTeReGo)
  
  +1
  
  Like (0)
  
  Actions
Re: SSH certificate support

ser Jan 22, 2012 2:23 PM (in response to gatherworks)

+1 on this.
Like (0)

Actions
Re: SSH certificate support

jderek Apr 10, 2012 6:38 AM (in response to gatherworks)

+1
Like (0)

Actions
Re: SSH certificate support

ICE_John Jun 7, 2012 5:42 PM (in response to gatherworks)

+1
Like (0)

Actions
Re: SSH certificate support

stephen.black Jun 15, 2012 10:26 AM (in response to gatherworks)

+1
Like (0)

Actions
- Re: SSH certificate support
  
  aLTeReGo Dec 18, 2012 11:27 AM (in response to stephen.black)
  
  In the latest SAM 5.5 beta it is now possible to utilize SSH Private Key certificates for authentication with Linux/Unix and Nagios Script Monitors. If you'd like to participate in the latest SAM beta you can sign-up here to download to give it a try.
  
  Like (0)
  
  Actions

Go to original post