Merge branch 'main' into 'main'
Some typo fixes See merge request fedora/docs/fedora-linux-documentation/fedora-linux-sysadmin-guide!8
This commit is contained in:
commit
676e88432a
5 changed files with 9 additions and 9 deletions
|
|
@ -253,7 +253,7 @@ _variant_ and _options_ with keyboard variant and option components, which can b
|
|||
|
||||
This should work if the following conditions apply:
|
||||
|
||||
* Using gnome as the desktop envirnment
|
||||
* Using gnome as the desktop environment
|
||||
|
||||
* Your layout is not listed under Settings -> Keyboard -> Input Sources
|
||||
|
||||
|
|
|
|||
|
|
@ -648,7 +648,7 @@ Where `ssh-rsa _AAAAB5Wm._pass:attributes[{blank}]` is the contents of `ca_host_
|
|||
[[sec-Signing_SSH_Certificates]]
|
||||
=== Creating SSH Certificates
|
||||
|
||||
A certifcate is a signed public key. The user's and host's public keys must be copied to the CA server for signing by the CA server's private key.
|
||||
A certificate is a signed public key. The user's and host's public keys must be copied to the CA server for signing by the CA server's private key.
|
||||
|
||||
[IMPORTANT]
|
||||
====
|
||||
|
|
@ -750,7 +750,7 @@ HostCertificate /etc/ssh/ssh_host_rsa_key-cert.pub
|
|||
~]#{nbsp}systemctl restart sshd.service
|
||||
----
|
||||
|
||||
. On user's systems. remove keys belonging to hosts from the `~/.ssh/known_hosts` file if the user has previously logged into the host configured above. When a user logs into the host they should no longer be presented with the warning about the hosts authenticity.
|
||||
. On user's systems, remove keys belonging to hosts from the `~/.ssh/known_hosts` file if the user has previously logged into the host configured above. When a user logs into the host they should no longer be presented with the warning about the hosts authenticity.
|
||||
|
||||
To test the host certificate, on a client system, ensure the client has set up the global `/etc/ssh/known_hosts` file, as described in xref:proc-Trusting_the_Host_Signing_Key[Trusting the Host Signing Key], and that the server's public key is not in the `~/.ssh/known_hosts` file. Then attempt to log into the server over SSH as a remote user. You should not see a warning about the authenticity of the host. If required, add the [option]`-v` option to the SSH command to see logging information.
|
||||
|
||||
|
|
@ -784,7 +784,7 @@ The default behavior of OpenSSH is that a user is allowed to log in as a remote
|
|||
@cert-authority principals="name1,name2" *.example.com ssh-rsa pass:quotes[_AAAAB5Wm._]
|
||||
----
|
||||
|
||||
* On the server, create an `AuthorizedPrincipalsFile` file, either per user or glabally, and add the principles' names to the file for those users allowed to log in. Then in the `/etc/ssh/sshd_config` file, specify the file using the [command]#AuthorizedPrincipalsFile# directive.
|
||||
* On the server, create an `AuthorizedPrincipalsFile` file, either per user or globally, and add the principles' names to the file for those users allowed to log in. Then in the `/etc/ssh/sshd_config` file, specify the file using the [command]#AuthorizedPrincipalsFile# directive.
|
||||
|
||||
[[proc-Generating_a_User_Certificate]]
|
||||
.Generating a User Certificate
|
||||
|
|
@ -964,7 +964,7 @@ To view a certificate, use the [option]`-L` to list the contents. For example, f
|
|||
permit-user-rc
|
||||
----
|
||||
|
||||
To vew a host certificate:
|
||||
To view a host certificate:
|
||||
|
||||
----
|
||||
~]# ssh-keygen -L -f /etc/ssh/ssh_host_rsa_key-cert.pub
|
||||
|
|
|
|||
|
|
@ -199,8 +199,8 @@ title=Fedora (4.2.0-1.fc23.x86_64) 23 (Workstation Edition)
|
|||
|
||||
See the `grubby(8)` manual page for more command options.
|
||||
|
||||
.Adding a new entry with additionnal kernel arguments
|
||||
To add a new entry with the default kernel but with additionnal kernel arguments and make it the default entry, use:
|
||||
.Adding a new entry with additional kernel arguments
|
||||
To add a new entry with the default kernel but with additional kernel arguments and make it the default entry, use:
|
||||
|
||||
[subs="macros"]
|
||||
----
|
||||
|
|
|
|||
|
|
@ -141,7 +141,7 @@ process ID (`ID`),
|
|||
memory usage (`Memory`),
|
||||
total disk read and write (`Disk read total` and `Disk write total`),
|
||||
current disk read and write (`Disk read` and `Disk write`),
|
||||
and prioritiy (`Priority`).
|
||||
and priority (`Priority`).
|
||||
To sort the information by a specific column in ascending order, click the name of that column. Click the name of the column again to toggle the sort between ascending and descending order.
|
||||
|
||||
By default, the [application]*System Monitor* tool displays a list of processes that are owned by the current user. Selecting various options from the View menu allows you to:
|
||||
|
|
|
|||
|
|
@ -253,7 +253,7 @@ An example of the format of the default entry in the key file, `/etc/chrony.keys
|
|||
1 SHA1 HEX:A6CFC50C9C93AB6E5A19754C246242FC5471BCDF
|
||||
----
|
||||
|
||||
Where `1` is the key ID, SHA1 is the hash function to use, `HEX` is the format of the key, and `A6CFC50C9C93AB6E5A19754C246242FC5471BCDF` is the key randomly generated when [application]*chronyd* was started for the first time. The key can be given in hexidecimal or ASCII format (the default).
|
||||
Where `1` is the key ID, SHA1 is the hash function to use, `HEX` is the format of the key, and `A6CFC50C9C93AB6E5A19754C246242FC5471BCDF` is the key randomly generated when [application]*chronyd* was started for the first time. The key can be given in hexadecimal or ASCII format (the default).
|
||||
|
||||
A manual entry in the key file, used to authenticate packets from certain `NTP` servers or peers, can be as simple as the following:
|
||||
|
||||
|
|
|
|||
Reference in a new issue