Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    My pfsense failed an audit by securitymetrics.com

    Scheduled Pinned Locked Moved Firewalling
    46 Posts 6 Posters 21.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J Offline
      jlepthien
      last edited by

      So there is something wrong with your install. The authorized_keys file does not get created.

      Try this:

      • /etc/rc.conf_mount_rw
      • then create the file manually with e.g. vi /root/.ssh/authorized_keys and paste in your key
      • /etc/rc.conf_mount_ro

      Then check again…

      | apple fanboy | music lover | network and security specialist | in love with cisco systems |

      1 Reply Last reply Reply Quote 0
      • K Offline
        kapara
        last edited by

        vi/root/.ssh/authorized_keys: Command not found.

        Skype ID:  Marinhd

        1 Reply Last reply Reply Quote 0
        • K Offline
          kapara
          last edited by

          here is a screen shot via winscp….

          Capture.PNG
          Capture.PNG_thumb

          Skype ID:  Marinhd

          1 Reply Last reply Reply Quote 0
          • J Offline
            jlepthien
            last edited by

            vi and a [space] after that…

            | apple fanboy | music lover | network and security specialist | in love with cisco systems |

            1 Reply Last reply Reply Quote 0
            • J Offline
              jlepthien
              last edited by

              @kapara:

              here is a screen shot via winscp….

              So? That is /etc/ssh and on your box…
              You generated the key on your windows system, didn't you?
              The keys need to be in /root/.ssh/

              | apple fanboy | music lover | network and security specialist | in love with cisco systems |

              1 Reply Last reply Reply Quote 0
              • K Offline
                kapara
                last edited by

                Still no go.  Where can I find that file I created?  I can log in even though the data shows as there in advanced.

                Skype ID:  Marinhd

                1 Reply Last reply Reply Quote 0
                • K Offline
                  kapara
                  last edited by

                  Found it in Winscp

                  Capture.PNG
                  Capture.PNG_thumb

                  Skype ID:  Marinhd

                  1 Reply Last reply Reply Quote 0
                  • J Offline
                    jlepthien
                    last edited by

                    Yep. So it should be there via ssh, too. If it still does not work I have no idea left what could be wrong.

                    | apple fanboy | music lover | network and security specialist | in love with cisco systems |

                    1 Reply Last reply Reply Quote 0
                    • K Offline
                      kapara
                      last edited by

                      I will reboot

                      Skype ID:  Marinhd

                      1 Reply Last reply Reply Quote 0
                      • K Offline
                        kapara
                        last edited by

                        Working. :-) Thanks

                        Skype ID:  Marinhd

                        1 Reply Last reply Reply Quote 0
                        • J Offline
                          jlepthien
                          last edited by

                          Glad it is working now ;-)

                          | apple fanboy | music lover | network and security specialist | in love with cisco systems |

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.