defaria.com/blogs/Status/2008/07/preshared-ssh-k.html

   1 <!DOCTYPE html>
   2 <html lang="en-us" itemscope itemtype="http://schema.org/Article">
   3   <head>
   4     <meta charset="utf-8">
   5     <meta name="description" content="Issue Gantry mentioned that we are still having issues with pre-shared key access to various systems using pswit as the log in. This email will serve to document how pre-share key access works, how we are using it here and...">
   6     <meta name="generator" content="Movable Type 5.2.3">
   7     <title>Pre-shared ssh keys - Status</title>
   8     <link rel="alternate" type="application/atom+xml" title="Recent Entries" href="http://defaria.com/blogs/Status/atom.xml">
   9     <link rel="canonical" href="http://defaria.com/blogs/Status/2008/07/preshared-ssh-k.html">
  10     <meta name="viewport" content="width=device-width,initial-scale=1">
  11     <link rel="stylesheet" href="http://defaria.com/blogs/Status/styles.css">
  12     <!--[if lt IE 9]>
  13     <link rel="stylesheet" href="http://defaria.com/blogs/Status/styles_ie.css">
  14     <script src="/mt/mt-static/support/theme_static/rainier/js/html5shiv.js"></script>
  15     <![endif]-->
  16
  17     <link rel="start" href="http://defaria.com/blogs/Status/">
  18
  19     <link rel="prev" href="http://defaria.com/blogs/Status/2008/05/post-6.html" title="RantestDB">
  20     <link rel="next" href="http://defaria.com/blogs/Status/2009/04/cpan-bundles-an.html" title="CPAN Bundles and PREFIX">
  21     <!-- Open Graph Protocol -->
  22     <meta property="og:type" content="article">
  23     <meta property="og:locale" content="en-us">
  24     <meta property="og:title" content="Pre-shared ssh keys">
  25     <meta property="og:url" content="http://defaria.com/blogs/Status/2008/07/preshared-ssh-k.html">
  26     <meta property="og:description" content="Issue Gantry mentioned that we are still having issues with pre-shared key access to various systems using pswit as the log in. This email will serve to document how pre-share key access works, how we are using it here and...">
  27     <meta property="og:site_name" content="Status">
  28     <meta property="og:image" content="/mt/mt-static/support/theme_static/rainier/img/siteicon-sample.png">
  29     <!-- Metadata -->
  30     <meta itemprop="description" content="Issue Gantry mentioned that we are still having issues with pre-shared key access to various systems using pswit as the log in. This email will serve to document how pre-share key access works, how we are using it here and...">
  31     <link itemprop="url" href="http://defaria.com/blogs/Status/2008/07/preshared-ssh-k.html">
  32     <link itemprop="image" href="/mt/mt-static/support/theme_static/rainier/img/siteicon-sample.png">
  33
  34   </head>
  35   <body>
  36     <div id="container">
  37       <div id="container-inner">
  38         <header id="header" role="banner">
  39           <div id="header-inner">
  40             <div id="header-content">
  41               <h1>
  42                 <a href="http://defaria.com/blogs/Status/">
  43
  44                   Status
  45
  46                 </a>
  47               </h1>
  48
  49             </div>
  50
  51             <nav role="navigation">
  52           <ul>
  53             <li><a href="http://defaria.com/blogs/Status/">Home</a></li>
  54
  55
  56           </ul>
  57         </nav>
  58
  59           </div>
  60         </header>
  61         <div id="content">
  62           <div id="content-inner">
  63             <ul class="breadcrumb breadcrumb-list">
  64               <li class="breadcrumb-list-item"><a href="http://defaria.com/blogs/Status/">Home</a></li>
  65               <li class="breadcrumb-list-item">Pre-shared ssh keys</li>
  66             </ul>
  67             <div id="individual-main" class="main" role="main">
  68               <article id="entry-1952" class="entry entry-asset asset hentry">
  69                 <div class="asset-header">
  70                   <h2 itemprop="name" class="asset-name entry-title">Pre-shared ssh keys</h2>
  71                   <footer class="asset-meta">
  72                     <ul class="asset-meta-list">
  73                       <li class="asset-meta-list-item">Posted on <time datetime="2008-07-30T17:25:01-08:00" itemprop="datePublished">July 30, 2008</time></li>
  74                       <li class="asset-meta-list-item">by <span class="author entry-author vcard"></span></li>
  75
  76
  77                       <li class="asset-meta-list-item">in <a itemprop="articleSection" rel="tag" href="http://defaria.com/blogs/Status/general-dynamics/">General Dynamics</a></li>
  78
  79
  80                    </ul>
  81                 </footer>
  82                 </div>
  83                 <div class="entry-content asset-content" itemprop="articleBody">
  84                   <h3>Issue</h3>
  85
  86 <p>Gantry mentioned that we are still having issues with pre-shared key access to various systems using pswit as the log in. This email will serve to document how pre-share key access works, how we are using it here and how the process is breaking down. We could attempt to script it but there are challenges and issues with that, specifically the
  87 gathering of ssh keys requires root access. Or we could simply learn how it works and follow a process, which I'll suggest.</p>
  88
  89 <h3>How pre-shared ssh access works</h3>
  90
  91 <p>In order to ssh to another machine as another user (or any user including yourself) using a pre-shared key you eed have a key to share. Therefore you need to generate an ssh key. We tend to use DSA keys as they are stronger. The process of generating an ssh key will not be discussed here but if you have one then in your home directory you'll have a file name id_dsa.pub under your .ssh directory.</p>
  92
  93 <p>The contents of this file needs to be placed into the "receiving" user's ~/.ssh/authorized_keys file. The act of doing this specifically states "I know &lt;x&gt; and I will allow him to ssh into this machine as me". So if I (p6258c) want to ssh to seast1 as pswit I need to get my DSA key (~p6258c/.ssh/id_dsa.pub) into pswit's authorized_keys file (~pswit/.ssh/authorized_keys).</p>
  94
  95 <h3>NIS domain/Windows considerations</h3>
  96
  97 <p>An additional complication here is that pswit in the RAN NIS domain != pswit in the RANTEST NIS domain. So If I wanted to be able to ssh as pswit to ranray I'd need to <b>also</b> get my DSA key (generated on the RAN NIS domain) into ~pswit/.ssh/authorized_keys. remember pswit's home directory on ranray != pswit's home directory on seast1. Both entities (the pswit user ID in RAN and the pswit user ID in RANTEST) are distinct and different users.</p>
  98
  99 <p>A further complication is that pswit on the 11 Windows machines are all local users to those Windows machines. The Windows machines are in the set (rantm50[1..7], sim[1..4]).</p>
 100
 101 <h3>Gathering ssh keys and building a combined authorzied_keys file</h3>
 102
 103 <p>So we need to collect ssh keys from multiple users, in multiple Unix NIS domains to multiple machines. In the past what I did was to gather all of the ssh keys for the users on the RAN side into an authorized_keys file named ran and then gathered all of the ssh keys for the users on the RANTEST side in an authorized_keys file named east. Normally an ssh key would say "&lt;user&gt;@&lt;machine&gt;" where &lt;machine&gt; is the machine which ssh-keygen was run. To avoid confusion I changed the comment at the end of each key to say "&lt;user&gt;@ran" or "&lt;user&gt;@east" in the respective files. Then I would concatenate the two files, ran and east, to one authorized keys file. This file was then checked into Clearcase under rantest_auto/config.</p>
 104
 105 <h3>Dissemination</h3>
 106
 107 <p>Since the home directory for pswit is always the same home directory for all machines in the RAN domain, and since the same is true in the RANTEST domain, we need only set authorized_keys twice, once in RAN and once in RANTEST, for the Unix side. However we need to also disseminate keys to 11 Windows boxes. Here's, effectively, how I do that.</p>
 108
 109 <div class="code">
 110 <pre>$ machines="\
 111 &gt;  ranray\
 112 &gt;  seast1\
 113 &gt;  rantm501\
 114 &gt;  rantm502\
 115 &gt;  rantm503\
 116 &gt;  rantm504\
 117 &gt;  rantm505\
 118 &gt;  rantm506\
 119 &gt;  rantm507\
 120 &gt;  sim1\
 121 &gt;  sim2\
 122 &gt;  sim3\
 123 &gt;  sim4\
 124 &gt; "
 125
 126 $for machine in $machines; do
 127   scp -q authorized_keys <a class="moz-txt-link-abbreviated" href="mailto:pswit@$machine:.ssh">pswit@$machine:.ssh</a>
 128 done
 129 </pre>
 130 </div>
 131
 132 <p>This disseminates the authorized_keys file to all the appropriate machines.</p>
 133
 134 <h3>Current state</h3>
 135
 136 <p>Currently, gathering up all authorized_keys files in a reverse fashion to the above, we have:</p>
 137
 138 <table align="center" border="1" cellpadding="2" cellspacing="0"
 139  width="75%">
 140   <tbody>
 141     <tr>
 142       <th bgcolor="teal" valign="top"><font color="#ffffff">Region/Machine<br>
 143       </font></th>
 144       <th bgcolor="teal" valign="top"><font color="#ffffff"># of Entries<br>
 145       </font></th>
 146       <th bgcolor="teal" valign="top"><font color="#ffffff">Comments<br>
 147       </font></th>
 148     </tr>
 149     <tr>
 150       <td align="center" valign="top">master<br>
 151       </td>
 152       <td align="center" valign="top">92<br>
 153       </td>
 154       <td valign="top">Master authorized_keys file from Clearcase<br>
 155       </td>
 156     </tr>
 157     <tr>
 158       <td align="center" valign="top">ran<br>
 159       </td>
 160       <td align="center" valign="top">95<br>
 161       </td>
 162       <td valign="top">authorized_keys file from RAN<br>
 163       </td>
 164     </tr>
 165     <tr>
 166       <td align="center" valign="top">rantm501<br>
 167       </td>
 168       <td align="center" valign="top">92<br>
 169       </td>
 170       <td valign="top"><br>
 171       </td>
 172     </tr>
 173     <tr>
 174       <td align="center" valign="top">rantm502</td>
 175       <td align="center" valign="top">92</td>
 176       <td valign="top"><br>
 177       </td>
 178     </tr>
 179     <tr>
 180       <td align="center" valign="top">rantm503</td>
 181       <td align="center" valign="top">92</td>
 182       <td valign="top"><br>
 183       </td>
 184     </tr>
 185     <tr>
 186       <td align="center" valign="top">rantm504</td>
 187       <td align="center" valign="top">92</td>
 188       <td valign="top"><br>
 189       </td>
 190     </tr>
 191     <tr>
 192       <td align="center" valign="top">rantm505</td>
 193       <td align="center" valign="top">92</td>
 194       <td valign="top"><br>
 195       </td>
 196     </tr>
 197     <tr>
 198       <td align="center" valign="top">rantm506</td>
 199       <td align="center" valign="top">92</td>
 200       <td valign="top"><br>
 201       </td>
 202     </tr>
 203     <tr>
 204       <td align="center" valign="top">rantm507</td>
 205       <td align="center" valign="top">92</td>
 206       <td valign="top"><br>
 207       </td>
 208     </tr>
 209     <tr>
 210       <td align="center" valign="top">seast1<br>
 211       </td>
 212       <td align="center" valign="top">97</td>
 213       <td valign="top">authorized_keys file from RANTEST<br>
 214       </td>
 215     </tr>
 216     <tr>
 217       <td align="center" valign="top">sim1<br>
 218       </td>
 219       <td align="center" valign="top">93<br>
 220       </td>
 221       <td valign="top"><br>
 222       </td>
 223     </tr>
 224     <tr>
 225       <td align="center" valign="top">sim2<br>
 226       </td>
 227       <td align="center" valign="top">92<br>
 228       </td>
 229       <td valign="top"><br>
 230       </td>
 231     </tr>
 232     <tr>
 233       <td align="center" valign="top">sim3<br>
 234       </td>
 235       <td align="center" valign="top">92<br>
 236       </td>
 237       <td valign="top"><br>
 238       </td>
 239     </tr>
 240     <tr>
 241       <td align="center" valign="top">sim4<br>
 242       </td>
 243       <td align="center" valign="top">92<br>
 244       </td>
 245       <td valign="top"><br>
 246       </td>
 247     </tr>
 248   </tbody>
 249 </table>
 250
 251 <p>The way to have pre-shared ssh key access working the best is for each Region/Machine to have the same amount of entries (actually the exact same authorized_keys file). But we can see that people are indiscriminately changing the authorized_keys file only in certain places causing confusion and causing the process to break down.</p>
 252
 253 <h3>Suggested process</h3>
 254
 255 <p>When somebody reports that they are having a problem with ssh access using a pre-shared key to become pswit on another machine they should submit a help desk ticket. The way to resolve the help desk ticket is to:</p>
 256
 257 <ol>
 258   <li>Generate this user's DSA ssh key (if required) on both the RAN
 259 and the RANTEST NIS domains</li>
 260   <li>Change the host name associated with the key to "ran" or "east"
 261 as appropriate</li>
 262   <li>Open a WOR in the RANTEST_Auto project and create a view</li>
 263   <li>Checkout the rantest_tools/config/authorized_keys file and edit
 264 it appending the two DSA ssh keys</li>
 265   <li>Checkin and deliver the WOR</li>
 266   <li>Either execute the above code to disseminate the new
 267 authorized_keys file or perhaps we could write a simple script to do it.<br>
 268   </li>
 269 </ol>
 270
 271 <p>Comments?</p>
 272
 273                 </div>
 274                 <nav class="page-navigation entry-navigation pagination content-nav">
 275                   <ul class="page-navigation-list">
 276
 277                     <li class="page-navigation-list-item page-navigation-prev"><a rel="prev" href="http://defaria.com/blogs/Status/2008/05/post-6.html" title="RantestDB">Previous entry</a></li>
 278
 279
 280                     <li class="page-navigation-list-item page-navigation-next"><a rel="next" href="http://defaria.com/blogs/Status/2009/04/cpan-bundles-an.html" title="CPAN Bundles and PREFIX">Next entry</a></li>
 281
 282                   </ul>
 283                 </nav>
 284                 <!--
 285 <aside id="zenback" class="zenback feedback">
 286   Please paste Zenback script code here.
 287 </aside>
 288 -->
 289
 290
 291               </article>
 292             </div>
 293             <aside class="widgets related" role="complementary">
 294               <nav class="widget-search widget">
 295   <div class="widget-content">
 296     <form method="get" id="search" action="http://defaria.com/mt/mt-search.cgi">
 297       <div>
 298         <input type="text" name="search" value="" placeholder="Search...">
 299
 300         <input type="hidden" name="IncludeBlogs" value="8">
 301
 302         <input type="hidden" name="limit" value="20">
 303         <button type="submit" name="button">
 304           <img alt="Search" src="/mt/mt-static/support/theme_static/rainier/img/search-icon.png">
 305         </button>
 306       </div>
 307     </form>
 308   </div>
 309 </nav>
 310 <nav class="widget-archive-category widget">
 311   <h3 class="widget-header">Categories</h3>
 312   <div class="widget-content">
 313
 314
 315     <ul class="widget-list">
 316
 317
 318       <li class="widget-list-item"><a href="http://defaria.com/blogs/Status/ameriquest/">Ameriquest (99)</a>
 319
 320
 321       </li>
 322
 323
 324
 325
 326       <li class="widget-list-item"><a href="http://defaria.com/blogs/Status/audience/">Audience (3)</a>
 327
 328
 329       </li>
 330
 331
 332
 333
 334       <li class="widget-list-item"><a href="http://defaria.com/blogs/Status/broadcom/">Broadcom (76)</a>
 335
 336
 337       </li>
 338
 339
 340
 341
 342       <li class="widget-list-item"><a href="http://defaria.com/blogs/Status/gpdb/">GPDB (35)</a>
 343
 344
 345       </li>
 346
 347
 348
 349
 350       <li class="widget-list-item"><a href="http://defaria.com/blogs/Status/general-dynamics/">General Dynamics (61)</a>
 351
 352
 353       </li>
 354
 355
 356
 357
 358       <li class="widget-list-item"><a href="http://defaria.com/blogs/Status/general-electric/">General Electric (13)</a>
 359
 360
 361       </li>
 362
 363
 364
 365
 366       <li class="widget-list-item"><a href="http://defaria.com/blogs/Status/hewlett-packard/">Hewlett Packard (13)</a>
 367
 368
 369       </li>
 370
 371
 372
 373
 374       <li class="widget-list-item"><a href="http://defaria.com/blogs/Status/lynuxworks/">LynuxWorks (162)</a>
 375
 376
 377       </li>
 378
 379
 380
 381
 382       <li class="widget-list-item"><a href="http://defaria.com/blogs/Status/pqa/">PQA (35)</a>
 383
 384
 385       </li>
 386
 387
 388
 389
 390       <li class="widget-list-item"><a href="http://defaria.com/blogs/Status/salira/">Salira (79)</a>
 391
 392
 393       </li>
 394
 395
 396
 397
 398       <li class="widget-list-item"><a href="http://defaria.com/blogs/Status/tellabs/">Tellabs (2)</a>
 399
 400
 401       </li>
 402
 403
 404
 405
 406       <li class="widget-list-item"><a href="http://defaria.com/blogs/Status/texas-instruments/">Texas Instruments (31)</a>
 407
 408
 409       </li>
 410
 411     </ul>
 412
 413
 414   </div>
 415 </nav>
 416
 417
 418 <nav class="widget-archive-dropdown widget">
 419   <h3 class="widget-header">Archives</h3>
 420   <div class="widget-content">
 421     <select>
 422       <option>Select a Month...</option>
 423
 424       <option value="http://defaria.com/blogs/Status/2016/02/">February 2016</option>
 425
 426
 427
 428       <option value="http://defaria.com/blogs/Status/2014/09/">September 2014</option>
 429
 430
 431
 432       <option value="http://defaria.com/blogs/Status/2014/04/">April 2014</option>
 433
 434
 435
 436       <option value="http://defaria.com/blogs/Status/2014/03/">March 2014</option>
 437
 438
 439
 440       <option value="http://defaria.com/blogs/Status/2013/02/">February 2013</option>
 441
 442
 443
 444       <option value="http://defaria.com/blogs/Status/2012/09/">September 2012</option>
 445
 446
 447
 448       <option value="http://defaria.com/blogs/Status/2012/08/">August 2012</option>
 449
 450
 451
 452       <option value="http://defaria.com/blogs/Status/2012/05/">May 2012</option>
 453
 454
 455
 456       <option value="http://defaria.com/blogs/Status/2012/04/">April 2012</option>
 457
 458
 459
 460       <option value="http://defaria.com/blogs/Status/2012/02/">February 2012</option>
 461
 462
 463
 464       <option value="http://defaria.com/blogs/Status/2012/01/">January 2012</option>
 465
 466
 467
 468       <option value="http://defaria.com/blogs/Status/2011/10/">October 2011</option>
 469
 470
 471
 472       <option value="http://defaria.com/blogs/Status/2011/07/">July 2011</option>
 473
 474
 475
 476       <option value="http://defaria.com/blogs/Status/2010/09/">September 2010</option>
 477
 478
 479
 480       <option value="http://defaria.com/blogs/Status/2010/08/">August 2010</option>
 481
 482
 483
 484       <option value="http://defaria.com/blogs/Status/2010/04/">April 2010</option>
 485
 486
 487
 488       <option value="http://defaria.com/blogs/Status/2010/03/">March 2010</option>
 489
 490
 491
 492       <option value="http://defaria.com/blogs/Status/2010/02/">February 2010</option>
 493
 494
 495
 496       <option value="http://defaria.com/blogs/Status/2009/05/">May 2009</option>
 497
 498
 499
 500       <option value="http://defaria.com/blogs/Status/2009/04/">April 2009</option>
 501
 502
 503
 504       <option value="http://defaria.com/blogs/Status/2008/07/">July 2008</option>
 505
 506
 507
 508       <option value="http://defaria.com/blogs/Status/2008/05/">May 2008</option>
 509
 510
 511
 512       <option value="http://defaria.com/blogs/Status/2008/04/">April 2008</option>
 513
 514
 515
 516       <option value="http://defaria.com/blogs/Status/2008/03/">March 2008</option>
 517
 518
 519
 520       <option value="http://defaria.com/blogs/Status/2008/02/">February 2008</option>
 521
 522
 523
 524       <option value="http://defaria.com/blogs/Status/2008/01/">January 2008</option>
 525
 526
 527
 528       <option value="http://defaria.com/blogs/Status/2007/12/">December 2007</option>
 529
 530
 531
 532       <option value="http://defaria.com/blogs/Status/2007/11/">November 2007</option>
 533
 534
 535
 536       <option value="http://defaria.com/blogs/Status/2007/10/">October 2007</option>
 537
 538
 539
 540       <option value="http://defaria.com/blogs/Status/2007/09/">September 2007</option>
 541
 542
 543
 544       <option value="http://defaria.com/blogs/Status/2007/08/">August 2007</option>
 545
 546
 547
 548       <option value="http://defaria.com/blogs/Status/2007/07/">July 2007</option>
 549
 550
 551
 552       <option value="http://defaria.com/blogs/Status/2007/06/">June 2007</option>
 553
 554
 555
 556       <option value="http://defaria.com/blogs/Status/2007/05/">May 2007</option>
 557
 558
 559
 560       <option value="http://defaria.com/blogs/Status/2007/04/">April 2007</option>
 561
 562
 563
 564       <option value="http://defaria.com/blogs/Status/2007/03/">March 2007</option>
 565
 566
 567
 568       <option value="http://defaria.com/blogs/Status/2007/01/">January 2007</option>
 569
 570
 571
 572       <option value="http://defaria.com/blogs/Status/2006/12/">December 2006</option>
 573
 574
 575
 576       <option value="http://defaria.com/blogs/Status/2006/11/">November 2006</option>
 577
 578
 579
 580       <option value="http://defaria.com/blogs/Status/2006/10/">October 2006</option>
 581
 582
 583
 584       <option value="http://defaria.com/blogs/Status/2006/09/">September 2006</option>
 585
 586
 587
 588       <option value="http://defaria.com/blogs/Status/2006/07/">July 2006</option>
 589
 590
 591
 592       <option value="http://defaria.com/blogs/Status/2006/06/">June 2006</option>
 593
 594
 595
 596       <option value="http://defaria.com/blogs/Status/2006/05/">May 2006</option>
 597
 598
 599
 600       <option value="http://defaria.com/blogs/Status/2006/04/">April 2006</option>
 601
 602
 603
 604       <option value="http://defaria.com/blogs/Status/2006/03/">March 2006</option>
 605
 606
 607
 608       <option value="http://defaria.com/blogs/Status/2006/02/">February 2006</option>
 609
 610
 611
 612       <option value="http://defaria.com/blogs/Status/2006/01/">January 2006</option>
 613
 614
 615
 616       <option value="http://defaria.com/blogs/Status/2005/12/">December 2005</option>
 617
 618
 619
 620       <option value="http://defaria.com/blogs/Status/2005/11/">November 2005</option>
 621
 622
 623
 624       <option value="http://defaria.com/blogs/Status/2005/10/">October 2005</option>
 625
 626
 627
 628       <option value="http://defaria.com/blogs/Status/2005/09/">September 2005</option>
 629
 630
 631
 632       <option value="http://defaria.com/blogs/Status/2005/08/">August 2005</option>
 633
 634
 635
 636       <option value="http://defaria.com/blogs/Status/2005/07/">July 2005</option>
 637
 638
 639
 640       <option value="http://defaria.com/blogs/Status/2005/06/">June 2005</option>
 641
 642
 643
 644       <option value="http://defaria.com/blogs/Status/2005/05/">May 2005</option>
 645
 646
 647
 648       <option value="http://defaria.com/blogs/Status/2005/04/">April 2005</option>
 649
 650
 651
 652       <option value="http://defaria.com/blogs/Status/2005/03/">March 2005</option>
 653
 654
 655
 656       <option value="http://defaria.com/blogs/Status/2005/02/">February 2005</option>
 657
 658
 659
 660       <option value="http://defaria.com/blogs/Status/2005/01/">January 2005</option>
 661
 662
 663
 664       <option value="http://defaria.com/blogs/Status/2004/12/">December 2004</option>
 665
 666
 667
 668       <option value="http://defaria.com/blogs/Status/2004/09/">September 2004</option>
 669
 670
 671
 672       <option value="http://defaria.com/blogs/Status/2004/08/">August 2004</option>
 673
 674
 675
 676       <option value="http://defaria.com/blogs/Status/2004/07/">July 2004</option>
 677
 678
 679
 680       <option value="http://defaria.com/blogs/Status/2004/06/">June 2004</option>
 681
 682
 683
 684       <option value="http://defaria.com/blogs/Status/2004/05/">May 2004</option>
 685
 686
 687
 688       <option value="http://defaria.com/blogs/Status/2004/04/">April 2004</option>
 689
 690
 691
 692       <option value="http://defaria.com/blogs/Status/2004/03/">March 2004</option>
 693
 694
 695
 696       <option value="http://defaria.com/blogs/Status/2004/02/">February 2004</option>
 697
 698
 699
 700       <option value="http://defaria.com/blogs/Status/2004/01/">January 2004</option>
 701
 702
 703
 704       <option value="http://defaria.com/blogs/Status/2003/12/">December 2003</option>
 705
 706
 707
 708       <option value="http://defaria.com/blogs/Status/2003/11/">November 2003</option>
 709
 710     </select>
 711   </div>
 712 </nav>
 713
 714
 715
 716 <div class="widget-syndication widget section">
 717   <div class="widget-content">
 718     <p><img src="http://defaria.com/mt/mt-static/images/status_icons/feed.gif" alt="Subscribe to feed" width="9" height="9" /> <a href="http://defaria.com/blogs/Status/atom.xml">Subscribe to this blog's feed</a></p>
 719
 720   </div>
 721 </div>
 722
 723             </aside>
 724           </div>
 725         </div>
 726         <footer id="footer" role="contentinfo">
 727           <div id="footer-inner">
 728             <div id="footer-content">
 729   <nav role="navigation">
 730           <ul>
 731             <li><a href="http://defaria.com/blogs/Status/">Home</a></li>
 732
 733
 734           </ul>
 735         </nav>
 736
 737   <p class="license">&copy; Copyright 2016.</p>
 738   <p class="poweredby">Powered by <a href="http://www.movabletype.org/">Movable Type</a></p>
 739 </div>
 740           </div>
 741         </footer>
 742       </div>
 743     </div>
 744     <script src="http://defaria.com/mt/mt-static/jquery/jquery.min.js"></script>
 745     <script src="http://defaria.com/blogs/Status/mt-theme-scale2.js"></script>
 746   </body>
 747 </html>