Windows Domain SSH - Revision history

Mtc at 22:25, 10 July 2015

2015-07-10T22:25:02Z

2015-06-09T23:29:37Z

2015-06-09T22:58:58Z

2015-06-09T20:33:33Z

2015-06-09T19:12:14Z

Created page with "Category:Windows"

New page

[[Category:Windows]]

@@ Line 4: / Line 4: @@
 *Create a service domain account that we will used to be able to login through ssh from a domain joined  computer
-*Making the passwd file
+*Making the passwd file for Domain users:
   mkpasswd -d > /etc/passwd
   mkgroup -g > /etc/group
 *on the local computer we need to add the Domain service account to certain groups
@@ Line 24: / Line 30: @@
 *By default it creates this user under the name cyg_server, when asked if we would like to create this user we will say no and give the ssh-host-config script another user which has the appropriate permission to allow domain logins
 *In our domain the user created for this purpose is cyg_service
-*below shows a summary of what we ill be saying yes and no too as long as with output from a setup
+*below shows a summary of what we will be saying yes and no too as long as with output from a setup
   Should privilege separation be used(yes/no)? Yes

@@ Line 4: / Line 4: @@
 *Create a service domain account that we will used to be able to login through ssh from a domain joined  computer
-*on the local computer
+*Making the passwd file
-*regedit
+ mkpasswd -d > /etc/passwd
   Local Security Policy => Security Settings => Local Policies => User Rights Assignment
 *add domain user to these groups
@@ Line 16: / Line 21: @@
 *Setup sshd
   ssh-host-config
-*We are going to answer yes to most of the default configuration, below shows a summary of what we ill be saying yes and no too as long as with output from a setup
+*We are going to answer yes to most of the default configuration, Except we will replace the user which is the service account used to run cygwin
   Should privilege separation be used(yes/no)? Yes

@@ Line 1: / Line 1: @@
 [[Category:Windows]]
+*Install Cygwin, for openssh you only need the openssh package but a few other tools will probably help(vim,wget,shutdown,rsync)
 *Create a service domain account that we will used to be able to login through ssh from a domain joined  computer
 *on the local computer
@@ Line 14: / Line 13: @@
   Log on as a service
   Replace a process level token

← Older revision		Revision as of 20:33, 9 June 2015
Line 1:		Line 1:
	[[Category:Windows]]		[[Category:Windows]]
		+
		+
		+	*Create a service domain account that we will used to be able to login through ssh from a domain joined computer
		+
		+
		+	*on the local computer
		+	*regedit
		+	Local Security Policy => Security Settings => Local Policies => User Rights Assignment
		+	*add domain user to these groups
		+	Act as part of the operating system
		+	Create a token object
		+	Deny log on through remote desktop services
		+	Log on as a service
		+	Replace a process level token