3.1 Running Commands from a Workstation or Server

After downloading an SSH-compliant client to your workstation, you can use the commands listed in Table 3-1 to accomplish tasks on the NetWare® server. The ssh, scp, and sftp client protocols have been ported to the server so you can execute these commands in server-to-server connections as well.

Table 3-1 SSH command tasks

Type

To

ssh

Connect and log into the specified server (hostname). You must provide your identity to the remote machine. See Section 3.2, Using SSH Command Options for a list of SSH command options.

For more information, see the ssh information at openssh.com on the Web.

sshd

Control how the daemon logs you in.

For options and more information, see the sshd information at openssh.com on the Web.

ssh-add

Not supported on NetWare.

ssh-agent

Not supported on NetWare. NetWare only supports password authentication.

ssh-keygen

Generate, manage, and convert authentication keys for ssh.

For more information, see ssh-keygen information at www.openssh.com on the Web.

ssh-keyscan

Not supported on NetWare.

ssh-pubuadd

Add a user plus the user’s public key to the local secret store bag.

Syntax: ssh-pubuadd [[-n FDN] [-k public_key_filename]] [-b batch_file]

where:

  • -n specifies the Fully Distinguished Name of the user in LDAP format

  • -k specifies the public key filename

  • -b specifies the name of a batch file containing multiple users, with the FDN and public key string for each user on separate lines

Usage examples:

ssh-pubuadd -n cn=admin,o=novell -k ./id_rsa.pub

ssh-pubuadd -b ./bag.batch

ssh-pubudel

Delete a user from the local secret store bag.

Syntax: ssh-pubudel [-n FDN] [-i id_number]

where:

  • -n specifies the Fully Distinguished Name of the user in LDAP format

  • -i specifies the idNum as seen from ssh-pubulist

Usage examples:

ssh-pubudel -n cn=admin,o=novell (deletes first entry found with a matching FDN)

ssh-pubudel -i 20 (deletes the entry with idNum ‘20’)

ssh-pubulist

List users in the local secret store bag.

Syntax: ssh-pubulist [-l] [-b]

where:

  • -l specifies long list, which includes idNum, FDN, and the complete public key string

  • -b specifies batch list, suitable for batch mode input

If neither option is specified, the listing defaults to short list which includes idNum, FDN, and the public key comment string.

Usage example:

ssh-pubulist -b > ./bag.batch (creates a batch listing for later batch mode input using ssh-pubuadd)

sftp

Perform secure file transfers with an FTP-like command that works over SSH1 and SSH2 protocol.

For command options and more information, see the sftp information at openssh.com on the Web.

scp

Copy files between hosts on a network. It uses ssh(1) for data transfer, and uses the same authentication and provides the same security as ssh(1). Scp asks for passwords or passphrases if they are needed for authentication.

For command options and more information, see scp information at openssh.com on the Web.

sftp-server

Use the SFTP server subsystem (started automatically by sshd). This program speaks to the server side of the SFTP protocol to stdout and expects client requests from stdin.

For more information, see ssh information at www.openssh.com on the Web.