Kb160

Emulab FAQ: Testbed Operations: How can I (re)create a user's ssh and ssl files?

If you need to generate new ssh keys for a user, you first need to remove the old key via the web interface, and then on boss:

	/usr/testbed/sbin/wap /usr/testbed/sbin/addpubkey -i -r

Notes:

When generating the initial ssh key, the -C option to keygen is used so that the comment field is rational. Now set to $user@$domain.
The -r option used in conjunction with -i (inituser) option forces a regeneration of the initial (unencrypted) ssh key. The user's auth_keys are files are regenerated as well.

To generate a new ssl cert (used by the event system and xmlrpc interface):

	/usr/testbed/sbin/wap /usr/testbed/sbin/mkusercert

Occasionally users will "clean up" their home directory either intentionally or unintentionally, and as a result remove their .ssh and .ssl directories. If you need to repopulate the .ssh directory:

	/usr/testbed/sbin/addpubkey -w

To repopulate the .ssl directory, you create a new cert as above:

	/usr/testbed/sbin/wap /usr/testbed/sbin/mkusercert