Kenneth at 17:50, 12 March 2021

2021-03-12T17:50:42Z

New page

== Chocolatey ==

<pre>
Set-ExecutionPolicy Bypass -Scope Process -Force
[System.Net.ServicePointManager]::SecurityProtocol = 3072
iex ((New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))

$env:chocolateyUseWindowsCompression = 'true'
choco install -y openssh -params '"/SSHServerFeature"'
</pre>

=== Config ===

C:\ProgramData\ssh

sshd_config:
AuthorizedKeysFile .ssh/authorized_keys

<pre>
Match Group administrators
AuthorizedKeysFile __PROGRAMDATA__/ssh/administrators_authorized_keys
</pre>

=== SSH Keys ===

Place the keys in
C:\ProgramData\ssh\administrators_authorized_keys

Fix the permissions with Powershell:
<pre>
$acl = Get-Acl C:\ProgramData\ssh\administrators_authorized_keys
$acl.SetAccessRuleProtection($true, $false)
$administratorsRule = New-Object system.security.accesscontrol.filesystemaccessrule("Administrators","FullControl","Allow")
$systemRule = New-Object system.security.accesscontrol.filesystemaccessrule("SYSTEM","FullControl","Allow")
$acl.SetAccessRule($administratorsRule)
$acl.SetAccessRule($systemRule)
$acl | Set-Acl
</pre>

ref: https://www.concurrency.com/blog/may-2019/key-based-authentication-for-openssh-on-windows

== Ansible ==

<pre>
- name: Install openssh
win_chocolatey:
name: openssh
package_params: /SSHServerFeature
state: present
tags: openssh
</pre>

ref: https://curiousdba.netlify.app/post/windowsopenssh/

Windows/SSH - Revision history

Kenneth at 17:50, 12 March 2021