Intermec CV30 Intermec Terminal Emulator (ITE) User Guide - Page 44

Using a Configuration File for SSH Settings, Locking Down SSH Applications, SSH Option Descriptions

Page 44 highlights

Chapter 2 - Configuring and Managing ITE SSH Option Descriptions Option SSH UserName SSH PassWord SSH Private Key SSH Key Passphrase Receive LF as CRLF Description Stored username you are prompted to enter when you choose to connect to Port 22 (SSH) instead of Port 23 (Telnet). Stored password you are prompted to enter when you choose to connect to Port 22 (SSH) instead of Port 23 (Telnet). Key file SSH uses for private key authentication. Specify the relative path from \Program Files \Intermec\ITE\SSH\, or prefix the absolute path with \. Passphrase required to access the SSH Private Key file. If blank, ITE assumes no passphrase was configured. When enabled, when ITE receives a line feed from the host, it is treated as a carriage return + line feed. This is required for proper formatting of some Linux connections, but must be disabled for correct display of some Windows-based server screens. Values 0 to 80 characters. Default is a null string. 0 to 80 characters. Default is a null string. 0 to 80 characters. Default is a null string. 0 to 80 characters. Default is a null string. Enabled or Disabled. Default is Enabled. Using a Configuration File for SSH Settings The ITE implementation of the OpenSSH client provides for additional configuration options and settings. To configure these settings, use the Open SSH configuration file located in: • \Program Files\Intermec\ITE\SSH (all computers except CV41 running Windows CE) • \System\ITEdata\ssh (CV41 running Windows CE only) If you use the configuration file, settings made in ITE (such as port number and host name) override the settings in the file. A complete description of Open SSH options and settings is beyond the scope of this manual. For more information on Open SSH client configuration options and settings, see http://www.manpagez.com/man/5/ssh_config/. Note: ITE supports public key authentication for Open SSH. This feature is configured from within ITE and not through the configuration file. Locking Down SSH Applications To prevent a user from getting to the command prompt, a telnet server can bring itself up during startup (as part of the standard services). Logging into the SSH server as a shell brings up the command prompt. On a Linux system, you can prevent this by creating a login script that executes your host application and then posts "exit" as its last command. Specifically, in the user account .pro file, append the following lines: trap 2 ./ pgmName exit 32 Intermec Terminal Emulator (ITE) User Guide

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220

Chapter 2 — Configuring and Managing ITE
32
Intermec Terminal Emulator (ITE) User Guide
Using a Configuration File for SSH Settings
The ITE implementation of the OpenSSH client provides for additional
configuration options and settings. To configure these settings, use the Open SSH
configuration file located in:
\Program Files\Intermec\ITE\SSH (all computers except CV41 running
Windows CE)
\System\ITEdata\ssh (CV41 running Windows CE only)
If you use the configuration file, settings made in ITE (such as port number and
host name) override the settings in the file.
A complete description of Open SSH options and settings is beyond the scope of
this manual. For more information on Open SSH client configuration options and
settings, see
.
Locking Down SSH Applications
To prevent a user from getting to the command prompt, a telnet server can bring
itself up during startup (as part of the standard services). Logging into the SSH
server as a shell brings up the command prompt.
On a Linux system, you can prevent this by creating a login script that executes your
host application and then posts “exit” as its last command. Specifically, in the user
account .pro file, append the following lines:
trap 2
./ pgmName
exit
SSH Option Descriptions
Option
Description
Values
SSH UserName
Stored username you are prompted to enter when you choose to
connect to Port 22 (SSH) instead of Port 23 (Telnet).
0 to 80 characters.
Default is a null string.
SSH PassWord
Stored password you are prompted to enter when you choose to
connect to Port 22 (SSH) instead of Port 23 (Telnet).
0 to 80 characters.
Default is a null string.
SSH Private Key
Key file SSH uses for private key authentication. Specify the relative
path from \Program Files
\Intermec\ITE\SSH\, or prefix the absolute path with \.
0 to 80 characters.
Default is a null string.
SSH Key Passphrase
Passphrase required to access the SSH Private Key file. If blank, ITE
assumes no passphrase was configured.
0 to 80 characters.
Default is a null string.
Receive LF as CRLF
When enabled, when ITE receives a line feed from the host, it is
treated as a carriage return + line feed. This is required for proper
formatting of some Linux connections, but must be disabled for
correct display of some Windows-based server screens.
Enabled or Disabled.
Default is Enabled.
Note:
ITE supports public key authentication for Open SSH. This feature is
configured from within ITE and not through the configuration file.