kacy's Home In Cyberspace

Generate a Public/Private GPG Key Pair

Published by

Kaci Agoun

on

I’ve had problems generating a GPG Key Pair, finaly found that it was because I was trying to generate the key with another user than the one I was logged with…

You must have a console opened to be able to generate the key.

…and a little script found here to automatically launch the gpg-agent :

#!/bin/bash

# Decide wether to start gpg-agent daemon.
# Create necessary symbolic link in $HOME/.gnupg/S.gpg-agent

SOCKET=S.gpg-agent
PIDOF=`pidof gpg-agent`
RETVAL=$?

if [ "$RETVAL" -eq 1 ]; then
        echo "Starting gpg-agent daemon."
        eval `gpg-agent --daemon`
else
        echo "Daemon gpg-agent already running."
fi

# Nasty way to find gpg-agent's socket file...
GPG_SOCKET_FILE=`find /tmp/gpg-* -name $SOCKET 2> /dev/null`
echo "Updating socket file link."
cp -fs $GPG_SOCKET_FILE $HOME/.gnupg/S.gpg-agent

Another little usefull command generating GPG Key Pair (this entropy stuff whatever…) is :

sudo dd if=/dev/sda of=/dev/zero

When you get “We need to generate a lot of random bytes. It is a good idea to perform <blabla>” open another shell and launch the command, it will accelerate the generation…

Leave a Reply

Your email address will not be published. Required fields are marked *

Salut,

Bienvenue

Ce blog est un bloc-note de choses et d’autres techniques 🙂

Let’s connect !

sssd on centos 7

I’ve just reinstalled a centos7 VM, and I wanted to plug ldap authentification so that my ldap users could login

Here are the instructions to do so :

yum -y install sssd
echo "[domain/default]
id_provider = ldap
auth_provider = ldap
chpass_provider = ldap
sudo_provider = ldap
ldap_uri = ldaps://ldap.example.com:636
ldap_default_bind_dn = uid=the_user,cn=users,dc=example,dc=com
ldap_default_authtok = l3passw0rd
ldap_default_authtok_type = password
ldap_id_use_start_tls = True
ldap_tls_reqcert = never
ldap_search_base = dc=example,dc=com
ldap_sudo_search_base = ou=wheel,dc=example,dc=com
ldap_netgroup_search_base = dc=example,dc=com
cache_credentials = True
enumerate = True
autofs_provider = ldap
override_homedir = /home/%u
default_shell = /bin/bash

[sssd]
services = nss, sudo, pam, autofs
config_file_version = 2
domains = default

[nss]
filter_users = root,ldap,named,avahi,haldaemon,dbus,radiusd,news,nscd

[pam]

[sudo]

[autofs]

[ssh]
" > /etc/sssd/sssd.conf
chmod 600 /etc/sssd/sssd.conf
chown root:root /etc/sssd/sssd.conf
authconfig --enablesssd --enablesssdauth --enablemkhomedir --enablelocauthorize --update
systemctl restart sssd.service

Et voila !

…le 14 March 2019 à 13h32

Recent posts