Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #5311

Re: How to etablish an SSH2 tunnel with php ?

Show key headers only | View raw

On Mon, 02 Apr 2012 08:26:19 +0200, Une B?vue wrote:
> Le 02/04/2012 03:19, Jerry Stuckle a ?crit :
>
>>
>> Does your www-data user have access to the key files? They need to be
>> readable by www-data (but you shouldn't have to create a new key for the
>> web user).
>>
>
> not for the time being :
> .-(~)-------------------------------------(yt@D620)-
> `--> lal .ssh
> total 28
> drwxr-xr-x  2 yt yt 4096 2012-01-03 17:06 .
> drwxr-xr-x 91 yt yt 4096 2012-04-02 08:11 ..
> -rw-------  1 yt yt  998 2012-02-04 09:32 authorized_keys
> -rw-------  1 yt yt  137 2012-02-07 13:09 config
> -rw-------  1 yt yt  751 2011-12-20 09:50 id_dsa
> -rw-r--r--  1 yt yt  597 2011-12-20 09:50 id_dsa.pub
> -rw-r--r--  1 yt yt 1548 2012-01-25 08:17 known_hosts
> .-(~)--------------------------------------(yt@D620)-
> `-->
>
> afaik, i can't let them readable by all user because otherwise ssh won't 
> work (?).

That is correct. HOWEVER, authorized_keys authorizes access for ANY
public half in its lists. Which means many private keys can exist for a
single login ID, and you can create a fresh pair, for www-data, where
www-data owns the private half exclusively (in some place that is not in
$DOCROOT, but also not your own .ssh directory) for its authentication
use, just like yt owns the above id_dsa exclusively.

-- 
For their next act, they'll no doubt be buying a firewall running under
NT, which makes about as much sense as building a prison out of 
meringue.
              -- Tanuki

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

How to etablish an SSH2 tunnel with php ? Une Bévue <unbewusstsein@fai.invalid> - 2012-03-31 18:40 +0200
  Re: How to etablish an SSH2 tunnel with php ? "Mr. B-o-B" <mr.chew.baka@gmail.com> - 2012-03-31 12:35 -0500
    Re: How to etablish an SSH2 tunnel with php ? "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-04-01 00:56 +0200
    Re: How to etablish an SSH2 tunnel with php ? Une Bévue <unbewusstsein@fai.invalid> - 2012-04-01 06:51 +0200
  Re: How to etablish an SSH2 tunnel with php ? Jerry Stuckle <jstucklex@attglobal.net> - 2012-03-31 15:18 -0400
    Re: How to etablish an SSH2 tunnel with php ? Une Bévue <unbewusstsein@fai.invalid> - 2012-04-01 07:03 +0200
      Re: How to etablish an SSH2 tunnel with php ? Jerry Stuckle <jstucklex@attglobal.net> - 2012-04-01 10:00 -0400
        Re: How to etablish an SSH2 tunnel with php ? Une Bévue <unbewusstsein@fai.invalid> - 2012-04-01 16:42 +0200
          Re: How to etablish an SSH2 tunnel with php ? Jerry Stuckle <jstucklex@attglobal.net> - 2012-04-01 21:19 -0400
            Re: How to etablish an SSH2 tunnel with php ? Une Bévue <unbewusstsein@fai.invalid> - 2012-04-02 08:26 +0200
              Re: How to etablish an SSH2 tunnel with php ? Une Bévue <unbewusstsein@fai.invalid> - 2012-04-02 12:01 +0200
              Re: How to etablish an SSH2 tunnel with php ? "Peter H. Coffin" <hellsop@ninehells.com> - 2012-04-02 07:15 -0500
              Re: How to etablish an SSH2 tunnel with php ? Jerry Stuckle <jstucklex@attglobal.net> - 2012-04-02 09:04 -0400
      Re: How to etablish an SSH2 tunnel with php ? "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-04-02 12:31 +0200
        Re: How to etablish an SSH2 tunnel with php ? "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-04-02 12:54 +0200
          Re: How to etablish an SSH2 tunnel with php ? Une Bévue <unbewusstsein@fai.invalid> - 2012-04-02 13:14 +0200
            Re: How to etablish an SSH2 tunnel with php ? "Mr. B-o-B" <mr.chew.baka@gmail.com> - 2012-04-02 12:12 -0500
        Re: How to etablish an SSH2 tunnel with php ? Une Bévue <unbewusstsein@fai.invalid> - 2012-04-02 13:12 +0200
  Re: How to etablish an SSH2 tunnel with php ? Jason Playne <jason@jasonplayne.com> - 2012-04-04 01:36 -0700
    Re: How to etablish an SSH2 tunnel with php ? unbewusst.sein@fai.invalid (Une Bévue) - 2012-04-05 07:36 +0200
    Re: How to etablish an SSH2 tunnel with php ? Jerry Stuckle <jstucklex@attglobal.net> - 2012-04-05 08:10 -0400

csiph-web