Tag Info

Hot answers tagged

4

I had a similar issue. Turned out that /etc/ssh/sshd.conf had AllowUsers line. Resolved it by adding new user to that line and restarting SSH.


3

You use the -X switch. From the man page: -X Send the specified command to a running screen session. You can use the -d or -r option to tell screen to look only for attached or detached screen sessions. Note that this command doesn't work if the session is password protected. To combine this with actually seeing the screen: ...


3

No, git doesn't have an SSH server. Why should it? It uses the system standard SSH system.


2

Does anybody know how I might begin to troubleshoot this? You know, the usual stuff from the sysadmin kitbag Use your console access to check your logs and take appropriate action. check you have correctly configured network interfaces check your firewall. check that sshd is running check your change/config management system for other recent stuff ...


2

If, for example, your IPs are 192.168.10.10 and 192.168.10.11, and you want sshd to listen to port 443 on IP1, and httpd to Listen to port 443 on IP2: Add to your /etc/ssh/sshd_config file: ListenAddress 192.168.10.10:443 and restart SSH. SSH will now listen on port 443 of IP1. Add to your httpd.conf file (assuming Apache, should be easy with other ...


2

Nothing hardcoded, simply set sysctl_nr_open via fs.nr_open=5242880 and re-do sysctl -p/login, your limit is now 5m. file-max needs to be the same value.


2

The key is per user, so if you want to use the same private key to log in as your "second user" you will have to add the public key to the "second user"'s authorized_keys-file like you seem to have done for the root user.


2

ssh tunneling is configured by the ssh-daemon itself. If the SSH daemon does not permit tunneling, you'll need to re-configure it. Typically, it's just running openssh server... and you can edit the /etc/ssh/sshd_config and add AllowTcpForwarding yes (remove AllowTcpForwarding no) and reload sshd config. As far as sftp goes, this is a slightly different ...


1

First off, a clarification. Kerberos and SSH Keys are two mutually exclusive authentication methods for SSH. You don't use Kerberos with SSH Keys. You use Kerberos instead of SSH Keys. Both allow for "passwordless" SSH logon. A bit of reading on the Kerberos protocol may be in order. With Kerberos, you need to obtain a TGT that proves you are who you say ...


1

Modifying Samba and/or NFS is not the proper solution here. Instead further restrict ssh access in /etc/ssh/sshd_config to those users which should have access by using AllowGroups/AllowUsers. You may also be interesting in using Match blocks, depending on your situation.


1

Schematic: ssh ssh A ------> B ------> C ^ ^ using A's using B's ssh key ssh key Preconditions: A is running ssh-agent; A can access B; B can access C; A's ssh public key is present in B:~/.ssh/authorized_keys B's ssh public key is present in C:~/.ssh/authorized_keys In ~/.ssh/config on A, add Host C ...


1

As c4f4t0r commented, respawn will run the command again when the script exits. By using -f it runs in the background, effectively exiting and causing upstart to respawn it. If you remove -f then it will remain in a running state that upstart can observe when it unexpectedly exits. start on (local-filesystems and net-device-up IFACE=eth0) stop on ...


1

I run remotely Clipper apps over dosemu in linux ok. Users run dosemu via ssh.


1

You can add a CIDR range to the security group that represents the superset of all IPs your ISP can allocate to you. Either that, or use the AWS API to dynamically update your security group.


1

It's fine to restrict access to your SSH server by IP address, but SSH doesn't rely on that for its security. If you disable password logins (PasswordAUthentication no) and use private key authentication only, no one can get in without your private key. It's safe. So in other words, you don't have to worry about the firewall rules if you don't want to.



Only top voted, non community-wiki answers of a minimum length are eligible