diff options
author | Colin Watson <cjwatson@debian.org> | 2003-09-01 01:28:20 +0000 |
---|---|---|
committer | Colin Watson <cjwatson@debian.org> | 2003-09-01 01:28:20 +0000 |
commit | 98fc03d946c636001a40e97082352911cb2e7f22 (patch) | |
tree | 15e29f49c3cadacdfb3441535bdc2ee93e3a0b84 /debian/templates.da | |
parent | 509e7c7f3c55082eead9c5f83093b2f082e9896b (diff) |
Debian release 3.4p1-3.
Diffstat (limited to 'debian/templates.da')
-rw-r--r-- | debian/templates.da | 157 |
1 files changed, 157 insertions, 0 deletions
diff --git a/debian/templates.da b/debian/templates.da new file mode 100644 index 000000000..c17c60039 --- /dev/null +++ b/debian/templates.da | |||
@@ -0,0 +1,157 @@ | |||
1 | Template: ssh/protocol2_only | ||
2 | Type: boolean | ||
3 | Default: true | ||
4 | Description: Allow SSH protocol 2 only | ||
5 | This version of OpenSSH supports version 2 of the ssh protocol, which is | ||
6 | much more secure. Disabling ssh 1 is encouraged, however this will slow | ||
7 | things down on low end machines and might prevent older clients from | ||
8 | connecting. | ||
9 | . | ||
10 | Also please note that keys used for protocol 1 are different so you will | ||
11 | not be able to use them if you only allow protocol 2 connections. | ||
12 | Description-da: Tillad kun SSH protokol 2 | ||
13 | Denne udgave af OpenSSH understøtter version 2 af ssh-protokollen, som er | ||
14 | betydeligt mere sikker. Det anbefales af deaktivere version 1. Dog kan det | ||
15 | sløve langsomme maskiner, og forhindre ældre klienter i at opnå forbindelse. | ||
16 | |||
17 | Template: ssh/ssh2_keys_merged | ||
18 | Type: note | ||
19 | Description: ssh2 keys merged in configuration files | ||
20 | As of version 3 OpenSSH no longer uses seperate files for ssh1 and ssh2 | ||
21 | keys. This means the authorized_keys2 and known_hosts2 files are no longer | ||
22 | needed. They will still be read in order to maintain backwards | ||
23 | compatibility | ||
24 | Description-da: ssh2-nøgler flettet i opsætningsfilerne | ||
25 | Siden version 3 har OpenSSH ikke længere separate filer for ssh1- og | ||
26 | ssh2-nøgler. Det betyder, at filerne authorized_keys2 og known_hosts2 ikke | ||
27 | længere er nødvendige. De vil stadig dog stadig blive læst for | ||
28 | bagudkompatilitetens skyld. | ||
29 | |||
30 | Template: ssh/use_old_init_script | ||
31 | Type: boolean | ||
32 | Default: false | ||
33 | Description: Do you want to continue (and risk killing active ssh sessions) ? | ||
34 | The version of /etc/init.d/ssh that you have installed, is likely to kill | ||
35 | all running sshd instances. If you are doing this upgrade via an ssh | ||
36 | session, that would be a Bad Thing(tm). | ||
37 | . | ||
38 | You can fix this by adding "--pidfile /var/run/sshd.pid" to the | ||
39 | start-stop-daemon line in the stop section of the file. | ||
40 | Description-da: Vil du fortsætte (og risikere at afbryde aktive ssh-forbindelser)? | ||
41 | Den udgave af /etc/init.d/ssh, du har installeret, vil sandsynligvis afbryde | ||
42 | alle sshd-dæmoner. Det vil være en rigtigt dårlig idé, hvis du er ved at | ||
43 | opgradering via en ssh-forbindelse. | ||
44 | . | ||
45 | Du kan afhjælpe dette ved at tilføje "--pidfile /var/run/sshd.pid" til | ||
46 | 'start-stop-daemon'-linjen i stop-afsnittet af filen. | ||
47 | |||
48 | |||
49 | Template: ssh/forward_warning | ||
50 | Type: note | ||
51 | Description: NOTE: Forwarding of X11 and Authorization disabled by default. | ||
52 | For security reasons, the Debian version of ssh has ForwardX11 and | ||
53 | ForwardAgent set to ``off'' by default. | ||
54 | . | ||
55 | You can enable it for servers you trust, either in one of the | ||
56 | configuration files, or with the -X command line option. | ||
57 | . | ||
58 | More details can be found in /usr/share/doc/ssh/README.Debian | ||
59 | Description-da: BEMÆRK: Videregivelse af X11 og adgangkontrol er som standard deaktiveret. | ||
60 | Af sikkerhedsgrunde har Debianudgaven af ssh sat ForwardX11 og ForwardAgent | ||
61 | til 'off' som standard. | ||
62 | . | ||
63 | Du kan aktivere dem for servere, du stoler på i en af opsætningsfilerne | ||
64 | eller med kommandolinjetilvalget '-X'. | ||
65 | |||
66 | Template: ssh/insecure_rshd | ||
67 | Type: note | ||
68 | Description: Warning: rsh-server is installed --- probably not a good idea | ||
69 | having rsh-server installed undermines the security that you were probably | ||
70 | wanting to obtain by installing ssh. I'd advise you to remove that | ||
71 | package. | ||
72 | Description-da: Advarsel: rsh-serveren er installeret --- sikkert ikke en god idé | ||
73 | Den sikkerhed, du nok ønskede at opnå ved at installere ssh undermineres | ||
74 | ved, at du har rsh-server installeret. Jeg vil råde dig til at fjerne | ||
75 | pakken rsh-server. | ||
76 | |||
77 | Template: ssh/insecure_telnetd | ||
78 | Type: note | ||
79 | Description: Warning: telnetd is installed --- probably not a good idea | ||
80 | I'd advise you to either remove the telnetd package (if you don't actually | ||
81 | need to offer telnet access) or install telnetd-ssl so that there is at | ||
82 | least some chance that telnet sessions will not be sending unencrypted | ||
83 | login/password and session information over the network. | ||
84 | Description-da: Advarsel: telnetd er installeret --- sikkert ikke en god idé | ||
85 | Jeg vil råde dig til enten at fjerne pakken telnetd (hvis du i virkeligheden | ||
86 | ikke har brug for at tilbyde telnet-adgang) eller installere telnetd-ssl, så | ||
87 | der i det mindste er en mulighed for, at telnet-sessioner ikke sender | ||
88 | adgangskoder og sessions-oplysninger ukrypteret over netværket. | ||
89 | |||
90 | Template: ssh/encrypted_host_key_but_no_keygen | ||
91 | Type: note | ||
92 | Description: Warning: you must create a new host key | ||
93 | There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted. OpenSSH | ||
94 | can not handle this host key file, and I can't find the ssh-keygen utility | ||
95 | from the old (non-free) SSH installation. | ||
96 | . | ||
97 | You will need to generate a new host key. | ||
98 | Description-da: Advarsel: du skal oprette en ny værtsnøgle | ||
99 | Der ligger en gammel, IDEA-krypteret /etc/ssh/ssh_host_key. OpenSSH kan | ||
100 | ikke håndtere sådan en værtsnøglefil, og jeg kan ikke finde værktøjet | ||
101 | ssh-keygen fra den gamle (ikke-frie, 'non-free') SSH-installation. | ||
102 | |||
103 | Template: ssh/SUID_client | ||
104 | Type: boolean | ||
105 | Default: false | ||
106 | Description: Do you want /usr/bin/ssh to be installed SUID root? | ||
107 | You have the option of installing the ssh client with the SUID bit set. | ||
108 | . | ||
109 | If you make ssh SUID, you will be able to use Rhosts/RhostsRSA | ||
110 | authentication, but will not be able to use socks via the LD_PRELOAD | ||
111 | trick. This is the traditional approach. | ||
112 | . | ||
113 | If you do not make ssh SUID, you will be able to use socks, but | ||
114 | Rhosts/RhostsRSA authentication will stop working, which may stop you | ||
115 | logging in to remote systems. It will also mean that the source port will | ||
116 | be above 1024, which may confound firewall rules you've set up. | ||
117 | . | ||
118 | If in doubt, I suggest you install it with SUID. If it causes problems | ||
119 | you can change your mind later by running: dpkg-reconfigure ssh | ||
120 | Description-da: Vil du have, at /usr/bin/ssh bliver installeret 'SUID root'? | ||
121 | Du har mulighed for at installere ssh-klienten med SUID-flaget sat. | ||
122 | . | ||
123 | Hvis du gør ssh SUID, vil du kunne bruge adgangskontrollen | ||
124 | Rhosts/RhostsRSA, men vil ikke kunne bruge socks med LD_PRELOAD-tricket. | ||
125 | Det vil være den almindelige fremgangsmåde. | ||
126 | . | ||
127 | Hvis du ikke gør ssh SUID, vil du kunne bruge socks, men adgangskontrol | ||
128 | med Rhosts/RhostRSA vil holde op med at virke, hvilket kan forhindre dig | ||
129 | i at logge ind på fjerne systemer. Det vil også betyde, at kildeporten | ||
130 | vil ligge over 1024, hvilket kan kollidere med eventuelle brandmure, du | ||
131 | har sat op. | ||
132 | . | ||
133 | Hvis du er i tvivl, foreslår jeg, at du installerer den med SUID. Hvis det | ||
134 | giver problemer, kan du senere ombestemme dig ved at køre: | ||
135 | 'dpkg-reconfigure ssh'. | ||
136 | |||
137 | Template: ssh/run_sshd | ||
138 | Type: boolean | ||
139 | Default: true | ||
140 | Description: Do you want to run the sshd server ? | ||
141 | This package contains both the ssh client, and the sshd server. | ||
142 | . | ||
143 | Normally the sshd Secure Shell Server will be run to allow remote logins | ||
144 | via ssh. | ||
145 | . | ||
146 | If you are only interested in using the ssh client for outbound | ||
147 | connections on this machine, and don't want to log into it at all using | ||
148 | ssh, then you can disable sshd here. | ||
149 | Description-da: Vil du køre sshd-serveren? | ||
150 | Denne pakke indeholder både ssh-klienten og sshd-serveren. | ||
151 | . | ||
152 | Normalt vil sshd sikker skalserver ('Secure Shell Server') blive aktiveret | ||
153 | og tillade fjerne brugere i at logge på via ssh. | ||
154 | . | ||
155 | Hvis du udelukkende er interesseret i at bruge ssh-klienten til udgående | ||
156 | forbindelser fra denne maskine, og ikke ønsker at tilgå denne maskine | ||
157 | udefra via ssh, kan du nu deaktivere sshd. | ||