Browsing articles tagged with "ssh - 3/149 - Admins Goodies"
Nov 2, 2012
tom

shouldn’t /etc/hosts.deny be intercepting this before it hits ssh logs?

I’m using a combination of /etc/hosts.deny and ufw on my ubuntu 10.04.04 server. Most days, I see failed ssh attempts from machines in the .com.cn domain, reported like so: Failed logins from: 112.114.63.139 (139.63.114.112.broad.km.yn.dynamic.163data.com.cn): 1 time However, in /etc/hosts.deny, I have this rule: ALL: .com.cn Shouldn’t this be blocking the connection before it even hits ssh? I’ve tested it via blocking my home machine, and it certainly denies me a connection right away before I […]

Continue Reading »
Oct 28, 2012
tom

Allow SSH only on one of a servers IP addresses

I have a server with several IP addresses that hosts sites on each IP address. I have one ip address that does not have a site associated with it. I want to allow SSH login only to the one IP address that does not have a site associated with it. Is this possible? If so can anyone tell me how to accomplish this? Asked by Adam Take a look at ListenAddress in your sshd_config. ListenAddress […]

Continue Reading »
Oct 26, 2012
tom

How to log into server using ssh connection (Im using helios)

My host has quoted me this: Have you checked that your php script runs OK from the command line? The cron process needs to activate the command-line version of php – /usr/bin/php – because it can’t by itself process php scripts without an interpreter running. So, I’ve set the job to run using the command-line. You can check it by logging into the server using an ssh connection and running the script like so: /usr/bin/php […]

Continue Reading »
Oct 21, 2012
tom

Safely adding SSH users to pfSense

I would like to add a user for myself to login via SSH to a pfSense box. I don’t want to just blindly go through the adduser command and inadvertently break something / open a vulnerability somewhere though. Looking at the config page in the WebUI: I can’t find where to add users or to specify their keys. What is the right way to add users that can use SSH? Can I also safely use […]

Continue Reading »
Oct 20, 2012
tom

Script to run chown on all folders and setting the owner as the folder name minus the trailing /

Some numpty ran chown -R username. in the /home folder on our webserver thinking he was in the desired folder. Needless to say the server is throwing a lot of wobbelys. We have over 200 websites and I don’t want to chown them all individually so I’m trying to make a script that will change the owner of all the folders to the folder name, without the trailing /. This is all I have so […]

Continue Reading »
Oct 20, 2012
tom

Using www-data through SSH

For development purposes I’m using www-data (on an ubuntu 11.10 server) to ssh in and fire git commands and basic stuff against the webroot. I don’t have things like command history, coloring, etc like I do when I ssh in as any other user, so I’m curious how to get this working. I’m assuming I need a `.bashrc’ file, but I’m not sure what to include or (more importantly since I could just copy the […]

Continue Reading »
Oct 20, 2012
tom

Is there any router setting that does the ssh domain forwarding?

Is there any router setting that does the ssh domain forwarding? Currently I have one static IP and have multiple machine under it and I have multiple domains point to same IP and each domain dedicated to specific machine. So I just want to access those machine via ssh. abc.com –> 192.168.1.10 bcd.com –> 192.168.1.11 dbc.com –> 192.168.1.12 I know that we can access the web requests using proxy or load balancer but how can […]

Continue Reading »
Oct 17, 2012
tom

Gitolite SSH URL Format

So I got gitolite set up. Simple. But there is one issue I am having. The SSH urls follow the format of git@host:repo. I’m used to Bitbucket / Github where the urls follow the format of git@host:user/repo. Is there a way to get the latter format using gitolite? Another question. I have my ~/.ssh/config file set up with the following entry: Host <host> User <user> IdentityFile <path/to/public/key> I don’t have any configuration specifying git as […]

Continue Reading »
Oct 10, 2012
tom

User’s rights to run a service on Vista

What rights a user needs to run cygwin sshd as a service on vista? A ssh-host-config creates user cyg_server with 5 rights: $ editrights.exe -l -u cyg_server SeAssignPrimaryTokenPrivilege SeCreateTokenPrivilege SeTcbPrivilege SeServiceLogonRight SeDenyRemoteInteractiveLogonRight But the service failed (even after reboot, reinstall and with cygwin terminal in Administrator mode): $ cygrunsrv.exe -S sshd Error 1069: The service did not start due to a logon failure Asked by Philippe Blayo You should verify that the cyg_server account has […]

Continue Reading »
Oct 10, 2012
tom

Which machines are trying to connect to my Solaris machine via SSH?

I have a Solaris machine ( Solaris 10 ) Is it possible to see from my machine ( logs ) which machines are try to connect to my machine by SSH? Asked by yael On a Solaris 10 system I have to hand ssh connections (and other auth related information) are logged to /var/log/auth.log e.g. Oct 10 15:15:46 solbase sshd[1481]: [ID 800047 auth.info] Accepted publickey for iain from 192.168.254.188 port 52197 ssh2 is a connection […]

Continue Reading »
Pages:«1234567...149»