Orthevs Orthevs Fathom new horizons
Menü

Workshop-Wiki · Deutsch und Englisch

Authorized Keys Options

This example is a controlled SSH workshop lab. It performs local OpenSSH checks only and does not connect to production systems.

Inhaltssprache · Deutsch und EnglischGröße · 32.2 KBexamples/04-authorized-keys-options/README.md
Workshop-Beispiele als ZIP
Lernstand in der Web-App

Kapitel als gelesen markieren, Lesefortschritt sehen und Praxismodule abhaken: Diese Funktionen stehen nach Aktivierung der optionalen Web-App zur Verfügung. Der Workshop-Fortschritt ergibt sich automatisch aus den Kapiteln aller Dokumentseiten. Deine Auswahl bleibt auf diesem Gerät; es gibt kein Konto und keinen Serverabgleich. Eine Installation ist nicht erforderlich. Beim Widerruf in den Datenschutz-Einstellungen wird der Lernstand gelöscht.

Lesefortschritt0%
0%
0 / 6 Kapitel gelesen
Weitere SprachfassungGriechisch ↗

Authorized Keys Options

Focus: authorized_keys mit Einschränkungen.

Purpose

This example is a controlled SSH workshop lab. It performs local OpenSSH checks only and does not connect to production systems.

01 / 06

Documentation

02 / 06

Files

03 / 06

Run

bash
./run.sh

The script writes temporary private keys and evidence below work/. That directory is ignored by Git.

04 / 06

Review Questions

    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
    1. How does this example demonstrate authorized_keys mit Einschränkungen with safe SSH behavior?
05 / 06

Practice Appendix: Example Authorized Keys Options

This appendix is a working backlog for longer trainings, reviews and repetitions. Each task can be checked locally with OpenSSH client tools, test keys and sample configurations.

A001. authorized_keys mit Einschränkungen

  • Task: verify fingerprint and connect the observation explicitly to authorized_keys mit Einschränkungen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A002. OpenSSH

  • Task: evaluate configuration and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A003. Trust

  • Task: justify risk and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A004. Security

  • Task: explain error path and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A005. authorized_keys mit Einschränkungen

  • Task: classify log line and connect the observation explicitly to authorized_keys mit Einschränkungen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A006. OpenSSH

  • Task: document trust model and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A007. Trust

  • Task: plan rotation and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A008. Security

  • Task: restrict access and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A009. authorized_keys mit Einschränkungen

  • Task: review forwarding and connect the observation explicitly to authorized_keys mit Einschränkungen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A010. OpenSSH

  • Task: describe recovery path and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A011. Trust

  • Task: verify fingerprint and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A012. Security

  • Task: evaluate configuration and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A013. authorized_keys mit Einschränkungen

  • Task: justify risk and connect the observation explicitly to authorized_keys mit Einschränkungen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A014. OpenSSH

  • Task: explain error path and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A015. Trust

  • Task: classify log line and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A016. Security

  • Task: document trust model and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A017. authorized_keys mit Einschränkungen

  • Task: plan rotation and connect the observation explicitly to authorized_keys mit Einschränkungen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A018. OpenSSH

  • Task: restrict access and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A019. Trust

  • Task: review forwarding and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A020. Security

  • Task: describe recovery path and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A021. authorized_keys mit Einschränkungen

  • Task: verify fingerprint and connect the observation explicitly to authorized_keys mit Einschränkungen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A022. OpenSSH

  • Task: evaluate configuration and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A023. Trust

  • Task: justify risk and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A024. Security

  • Task: explain error path and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A025. authorized_keys mit Einschränkungen

  • Task: classify log line and connect the observation explicitly to authorized_keys mit Einschränkungen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A026. OpenSSH

  • Task: document trust model and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A027. Trust

  • Task: plan rotation and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A028. Security

  • Task: restrict access and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A029. authorized_keys mit Einschränkungen

  • Task: review forwarding and connect the observation explicitly to authorized_keys mit Einschränkungen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A030. OpenSSH

  • Task: describe recovery path and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A031. Trust

  • Task: verify fingerprint and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A032. Security

  • Task: evaluate configuration and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A033. authorized_keys mit Einschränkungen

  • Task: justify risk and connect the observation explicitly to authorized_keys mit Einschränkungen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A034. OpenSSH

  • Task: explain error path and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A035. Trust

  • Task: classify log line and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A036. Security

  • Task: document trust model and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A037. authorized_keys mit Einschränkungen

  • Task: plan rotation and connect the observation explicitly to authorized_keys mit Einschränkungen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A038. OpenSSH

  • Task: restrict access and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A039. Trust

  • Task: review forwarding and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A040. Security

  • Task: describe recovery path and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A041. authorized_keys mit Einschränkungen

  • Task: verify fingerprint and connect the observation explicitly to authorized_keys mit Einschränkungen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A042. OpenSSH

  • Task: evaluate configuration and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A043. Trust

  • Task: justify risk and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A044. Security

  • Task: explain error path and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A045. authorized_keys mit Einschränkungen

  • Task: classify log line and connect the observation explicitly to authorized_keys mit Einschränkungen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A046. OpenSSH

  • Task: document trust model and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A047. Trust

  • Task: plan rotation and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A048. Security

  • Task: restrict access and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A049. authorized_keys mit Einschränkungen

  • Task: review forwarding and connect the observation explicitly to authorized_keys mit Einschränkungen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A050. OpenSSH

  • Task: describe recovery path and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
06 / 06

SSH · Orthevs Academy

31 Module als durchgängiger Lernpfad.

Die Reihenfolge bleibt unverändert: von der Laborgrundstruktur über fachliche Grundlagen und Betriebsmodelle bis zum abschließenden Troubleshooting. Die technischen Verzeichnisnamen werden bewusst beibehalten.

Praxismodule

Orthevs als App

Orthevs installieren

Die Orthevs Web-App kann auf unterstützten Mobilgeräten und Desktop-Browsern installiert werden.

iPhone und iPad

Öffnen Sie Orthevs in Safari. Tippen Sie auf Teilen, dann auf ‚Zum Home-Bildschirm‘. Aktivieren Sie gegebenenfalls ‚Als Web-App öffnen‘ und tippen Sie auf ‚Hinzufügen‘.

Android

Für die Web-App öffnen Sie das Browsermenü und wählen ‚App installieren‘ oder ‚Zum Startbildschirm hinzufügen‘. Bestätigen Sie die Installation.

Desktop-Browser

Öffnen Sie das Browsermenü oder das Installationssymbol in der Adressleiste und wählen Sie ‚App installieren‘ beziehungsweise ‚Zum Dock hinzufügen‘.

Die Web-App-Installation hängt vom Browser ab. Falls kein Installationsdialog erscheint, nutzen Sie die angezeigten Schritte im Browser.