Question on minterm functionality.

[maf at appgate.com]

On 10 dec, Paul, Pressley Abraham  wrote:
> My questions are:
> 1. I am accessing the jsp page from a local windows client machine - My
> requirement is that I need to be able to login to the unixbox by using a
> public key on the unixbox(by ssh to itself) and that public key
> shouldn't be saved on the windows machine client whatsoever when I use
> mindterm. 

MindTerm can currently only read the private key from the local
filesystem. That is the key must be available locally.

It is of course possible to modify the code to read the key remotely.
The best place to modify would be getIdentityFile() in
com/mindbright/ssh/SSHPropertyHandler.java.

Please note that making the key downloadable over the internet will
basically defeat the authentication step of SSH. That is anybody will
able to download the key and store it locally. How serious that is
depends on your security requirements and environment. This is basically
the same security level as embedding the password in the web page (which
already is supported).

> 2. In my case(where the mindterm.jar is on my unix box and the frontend
> applet is running on a windows client machine) , will mindterm be doing
> an ssh from the client computer to the unix box, or is it making the
> unix box do an ssh to itself and just displaying the results using the
> applet?

The SSH connection will be from the windows client machine to the unix
box.

	/MaF
-- 
Martin Forssen <maf at appgate.com>              Development Manager
Phone: +46 31 7744361                         AppGate Network Security AB