595 reputation
316
bio website 2130706433
location California
age 35
visits member for 5 years, 4 months
seen 2 days ago
while(1)
{
    share(knowledge);
}

Nov
17
awarded  Caucus
Oct
24
comment Is it possible to get OpenSSH to log the public key that was used in authentication?
This thread looks relevant. It finds the matching key twice: once to determine if the key would be acceptable or not, then a second time to check the signature the client provides.
Oct
24
comment Linux ssh: allow public-key authentication without giving user read rights to private key
If you need to lock it down in this way, I assume you've taken measures to disallow users from adding new public keys to the ~/.ssh/authorized_keys file?
Oct
24
comment Linux ssh: allow public-key authentication without giving user read rights to private key
+1; I think this option provides good flexibility, in case the user needs to use SSH features other than the terminal, such as port forwarding, secure copy, etc. Even an alternate SSH client should work. The sudo option could be better for a locked-down environment, though...
Sep
30
awarded  Explainer
Sep
2
comment How can I run arbitrarily complex command using sudo over ssh?
Can we assume you've set up sudo so that it does not require a pasword prompt?
Jul
16
comment ip route get recognizes address as anycast
@pawel7318 If you don't want it any more, you should be able to remove it with ip route del anycast 1.2.3.4 dev eth0. I was just experimenting with this on Ubuntu 14.04, and it looks like there are some bugs here. For example, I don't see the anycast route when I just type ip -4 route...
Jul
16
comment ip route get recognizes address as anycast
@pawel7318, it seems like the address is marked anycast but you didn't intend that. Is that correct? what Linux distribution are you using? Can you post your network configuration files? If you restart your networking subsystem (or use the supported way to bounce your interfaces) does the problem go away? As a last resort, does rebooting affect the problem?
Jul
13
comment ip route get recognizes address as anycast
@pawel7318 it might be helpful to show the full output of ip -4 route and ip -4 addr in your question. And clarify what you mean when you say the address "doesn't work". (What, specifically, isn't working? What troubleshooting steps have you tried? Also, what Linux distribution are you using?)
Jul
11
answered ip route get recognizes address as anycast
Jun
16
awarded  Scholar
Jun
16
accepted How does Intel AMT (Active Management Technology) not interfere with the TCP/IP host stack?
Jun
15
awarded  Self-Learner
Jun
14
comment How does Intel AMT (Active Management Technology) not interfere with the TCP/IP host stack?
@kasperd thanks; I didn't know you could easily do that. I went ahead and ran the test. Not looking good for AMT...
Jun
14
answered How does Intel AMT (Active Management Technology) not interfere with the TCP/IP host stack?
Jun
14
comment How does Intel AMT (Active Management Technology) not interfere with the TCP/IP host stack?
I noticed someone voted to close this as off-topic. In that case, I'd like to ask: how is this not relevant to professional server administrators? If you're going to enable an out-of-band management technology, wouldn't you want to know if it will have an effect on your network communications?
Jun
14
asked How does Intel AMT (Active Management Technology) not interfere with the TCP/IP host stack?
Jan
30
comment SSH Error: unknown key type '-----BEGIN'
@HaukeLaging, actually yes you can, but it depends on the key type. If it's a PKCS#8 key, you are correct. But if it's a PKCS#1 key or a DSA key, you'll see something like -----BEGIN DSA PRIVATE KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,0000000000000000 before the base64 which is the giveaway. Also, if the PKCS#8 key is encrypted, the PEM header should say -----BEGIN ENCRYPTED PRIVATE KEY----- rather than just -----BEGIN PRIVATE KEY-----.
Jan
23
comment SSH Error: unknown key type '-----BEGIN'
After the BEGIN RSA PRIVATE KEY line, do the next few lines indicate that the key is encrypted, or is it just a block of base64?
Jan
23
awarded  Yearling