Browse Source

Adds msoc_build ssh notes

Brad Poulton 4 years ago
parent
commit
176dc52b55
1 changed files with 16 additions and 0 deletions
  1. 16 0
      ScaleFT Notes.md

+ 16 - 0
ScaleFT Notes.md

@@ -59,6 +59,22 @@ Name: 	gc-dev-proxy
 
 > :NOTE: VPN required - Ensure you are connected to the correct VPN (in this case, XDRTest) when attempting to SSH into a server. SSH into proxy server from output using the `Id:` field in the cmd `ssh e1c10ac7-f152-45f4-9c42-ba6f30ffd2db` or by hostname `ssh gc-dev-proxy`
 
+
+###  SSH without sft Using the msoc_build Key
+The ssh key used when packer builds the instance is called msoc_build. Because the servers are setup for FIPS mode, the msoc_build SSH key needs to be in "FIPS mode" before you use it. 
+
+To bypass sft and use the msoc_build key use this command.
+
+`ssh -i msoc_build_fips centos@10.80.101.126`
+
+To use the key to ssh into hosts without the VPN use these commands. ( Agent Authentication forwarding )
+
+First, add msoc_build key to your ssh agent `ssh-add msoc_build_fips`
+Then, SSH into bastion with `ssh -A centos@34.237.123.128`
+Finally, SSH into target server with `ssh centos@10.96.101.249`
+The key authentication will get passed through the proxy server and sent to the target host.  
+
+
 ### Troubleshooting SFT Client
 
 Review the cache file: /var/lib/sftd/osync