<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
          "http://www.docbook.org/xml/4.4/docbookx.dtd">

<article id="SSHRemoteAccess">
    <section id="Introduction">
        <title>Introduction</title>
        <indexterm>
            <primary>Shell Remote Access</primary>
        </indexterm>
        <para>
            SSH is a method for secure communications without access to a local console.  OpenSSH is feature rich supporting many different authentication mechanisms.  It can also allow users to completely bypass firewall configurations via tunneling.
        </para>
    </section>
    
    <section id="Scale">
        <title>Scale: Known configurations</title>
        <indexterm>
            <primary>Scale</primary>
        </indexterm>
        <itemizedlist>
            <listitem>
                <formalpara>
                    <title>Unknown</title>
                    <para>
                        Unknown
                    </para>
                </formalpara>
            </listitem>
        </itemizedlist>
    </section>
    
    <section>
        <title>Software Requirements</title>
        <segmentedlist>
            <?dbhtml list-presentation="table"?>
            <title>Required packages</title>
            <segtitle>Service</segtitle>
            <segtitle>Software package</segtitle>
            <segtitle>Installation command</segtitle>
            <seglistitem>
                <seg>OpenSSH Server</seg>
                <seg><package>openssh-server</package></seg>
                <seg><command><![CDATA[yum -y install openssh-server]]></command></seg>
            </seglistitem>
            <seglistitem>
                <seg>OpenSSH Client</seg>
                <seg><package>openssh-clients</package></seg>
                <seg><command><![CDATA[yum -y install clamav]]></command></seg>
            </seglistitem>
            <seglistitem>
                <seg>denyhosts</seg>
                <seg><package>denyhosts</package></seg>
                <seg><command><![CDATA[yum -y install denyhosts]]></command></seg>
            </seglistitem>
        </segmentedlist>
    </section>
    
    <section>
        <title>Configuration</title>
        <segmentedlist>
            <?dbhtml list-presentation="table"?>
            <title>Required Config Lines</title>
            <segtitle>Requirement</segtitle>
            <segtitle>Action</segtitle>
            <segtitle>Config</segtitle>
            <segtitle>Comment</segtitle>
            <seglistitem>
                <seg>Must</seg>
                <seg>Define</seg>
                <seg><command><![CDATA[Protocol 2]]></command></seg>
            </seglistitem>
            <seglistitem>
                <seg>Must</seg>
                <seg>Define</seg>
                <seg><command><![CDATA[PermitRootLogon no]]></command></seg>
            </seglistitem>
            <seglistitem>
                <seg>Must</seg>
                <seg>Define</seg>
                <seg><command><![CDATA[TCPKeepAlive yes]]></command></seg>
            </seglistitem>
            <seglistitem>
                <seg>Must</seg>
                <seg>Not Define</seg>
                <seg><command><![CDATA[Protocol 1]]></command></seg>
            </seglistitem>
            <seglistitem>
                <seg>Should</seg>
                <seg>Define</seg>
                <seg><command><![CDATA[X11Forwarding no]]></command></seg>
            </seglistitem>
            <seglistitem>
                <seg>Should</seg>
                <seg>Define</seg>
                <seg><command><![CDATA[AllowTcpForwarding no]]></command></seg>
            </seglistitem>
            <seglistitem>
                <seg>Should</seg>
                <seg>Define</seg>
                <seg><command><![CDATA[GatewayPorts no]]></command></seg>
            </seglistitem>
            <seglistitem>
                <seg>Should</seg>
                <seg>Define</seg>
                <seg><command><![CDATA[PermitTunnel no]]></command></seg>
            </seglistitem>
            <seglistitem>
                <seg>Should</seg>
                <seg>Define</seg>
                <seg><command><![CDATA[GSSAPIAuthentication]]></command></seg>
                <seg>If not using GSSAPI</seg>
            </seglistitem>
        </segmentedlist>
    </section>
</article>
