Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    My pfsense failed an audit by securitymetrics.com

    Scheduled Pinned Locked Moved Firewalling
    46 Posts 6 Posters 21.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J Offline
      jlepthien
      last edited by

      Also when you login as 'admin'?

      | apple fanboy | music lover | network and security specialist | in love with cisco systems |

      1 Reply Last reply Reply Quote 0
      • K Offline
        kapara
        last edited by

        I am able to get in no matter what…

        Skype ID:  Marinhd

        1 Reply Last reply Reply Quote 0
        • J Offline
          jlepthien
          last edited by

          Log in again and then do:

          • cd /root
          • cd .ssh
          • ls -la (post output, there should be a authorized_keys files after you pasted your key via GUI)

          Are you running on embedded?

          | apple fanboy | music lover | network and security specialist | in love with cisco systems |

          1 Reply Last reply Reply Quote 0
          • K Offline
            kapara
            last edited by

            Yes Embedded….

            [1.2.3-RELEASE]                                                                [root@wall.test.local]/root(1): cd /root
            [1.2.3-RELEASE]                                                                [root@wall.test.local]/root(2): cd .ssh
            [1.2.3-RELEASE]                                                                [root@wall.test.local]/root/.ssh(3): ls -la
            total 1
            drwx–----  2 root  wheel  512 Mar  4 07:49 .
            drwxr-xr-x  4 root  wheel  512 Mar  4 05:08 ..
            [1.2.3-RELEASE]                                                                [root@wall.test.local]/root/.ssh(4):

            Skype ID:  Marinhd

            1 Reply Last reply Reply Quote 0
            • J Offline
              jlepthien
              last edited by

              So there is something wrong with your install. The authorized_keys file does not get created.

              Try this:

              • /etc/rc.conf_mount_rw
              • then create the file manually with e.g. vi /root/.ssh/authorized_keys and paste in your key
              • /etc/rc.conf_mount_ro

              Then check again…

              | apple fanboy | music lover | network and security specialist | in love with cisco systems |

              1 Reply Last reply Reply Quote 0
              • K Offline
                kapara
                last edited by

                vi/root/.ssh/authorized_keys: Command not found.

                Skype ID:  Marinhd

                1 Reply Last reply Reply Quote 0
                • K Offline
                  kapara
                  last edited by

                  here is a screen shot via winscp….

                  Capture.PNG
                  Capture.PNG_thumb

                  Skype ID:  Marinhd

                  1 Reply Last reply Reply Quote 0
                  • J Offline
                    jlepthien
                    last edited by

                    vi and a [space] after that…

                    | apple fanboy | music lover | network and security specialist | in love with cisco systems |

                    1 Reply Last reply Reply Quote 0
                    • J Offline
                      jlepthien
                      last edited by

                      @kapara:

                      here is a screen shot via winscp….

                      So? That is /etc/ssh and on your box…
                      You generated the key on your windows system, didn't you?
                      The keys need to be in /root/.ssh/

                      | apple fanboy | music lover | network and security specialist | in love with cisco systems |

                      1 Reply Last reply Reply Quote 0
                      • K Offline
                        kapara
                        last edited by

                        Still no go.  Where can I find that file I created?  I can log in even though the data shows as there in advanced.

                        Skype ID:  Marinhd

                        1 Reply Last reply Reply Quote 0
                        • K Offline
                          kapara
                          last edited by

                          Found it in Winscp

                          Capture.PNG
                          Capture.PNG_thumb

                          Skype ID:  Marinhd

                          1 Reply Last reply Reply Quote 0
                          • J Offline
                            jlepthien
                            last edited by

                            Yep. So it should be there via ssh, too. If it still does not work I have no idea left what could be wrong.

                            | apple fanboy | music lover | network and security specialist | in love with cisco systems |

                            1 Reply Last reply Reply Quote 0
                            • K Offline
                              kapara
                              last edited by

                              I will reboot

                              Skype ID:  Marinhd

                              1 Reply Last reply Reply Quote 0
                              • K Offline
                                kapara
                                last edited by

                                Working. :-) Thanks

                                Skype ID:  Marinhd

                                1 Reply Last reply Reply Quote 0
                                • J Offline
                                  jlepthien
                                  last edited by

                                  Glad it is working now ;-)

                                  | apple fanboy | music lover | network and security specialist | in love with cisco systems |

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.