Suppose one is running an SSH session into a GNU/Linux box of a client and he asks to see what you are doing. How can you allow this other party to see what's going on on your session?
I'm looking to secure my server. Initially my first thought was to use iptables but then I also learnt about Fail2ban. I understand that Fail2ban is based on iptables, but it has the advantages of being able to ban IP's after a number of attempts.
Let's say I want to block FTP completely:
Should I write a separate IPtable rule to block FTP, and use Fail2ban just for SSH
Or instead simply put all rules, even the FTP blocking rule within the Fail2Ban config
Any help on this would be appreciated.
James
I am running Eclipse remotely right now, in Xming on my Windows pc, through an ssh tunnel from my laptop running Ubuntu 11.10.
As seen below, it doesn't look that bad, but it seems that my applications defaults to the standard theme when it cannot find any others for GTK+ applications.
Is there anything I can do about this? Also it would be nice if I could do something about the font settings to make it more easily readable.
I have used Puttygen to create a public and a private key, and then is ready to let TortoiseHg on Windows 7 do a clone by going to
ssh:[email protected]/somecode
but there seems to be no where to add the private key to TortoiseHg?
The file is already some where on hard disk as somefile.ppk Does someone know how to add it?
I created a pair or RSA keys using Putty key generator, The Public key is attached set on the server side.
The private key at windows client machine and being used with pageant and FileZila and working fine. Now Problem is that when I want to connect same sftp through PSFTP commandline tool, it failes.
if possible please provide steps to setup ssh key on windows client to access sftp using psftp or direct through batch file.
Hello.
I want to restrict access to certain directories to my ssh users but allow them to read files by known path from there(mostly it's meant to be done by applications). How is that possible? Are there easy ways? Thank you.
So I want to run apache benchmark but while it's running, I need to run htop to see the memory and cpu usage. How can I do that? Putty (My ssh client) won't let me type in a command until ab is done running.
Ideas?
I try advice like this that recommends adding the following to your .profile:
function tabname {
printf "\e]1;$1\a"
}
So you can type tabname brokenbox to name your tab. The problem is as soon as I also type ssh[email protected] and log in, it wipes the tab name. I want a tab name that's as persistent as the tab, not the level of session I happen to be in. Is this possible? I don't even know what layer that data lives in.
I chrooted a user to the directory /var/www/upload using ChrootDirectory /var/www/upload in my etc/ssh/sshd_config.
The permissions of all the files in var/www/upload is 755 and owner is root:upload_user.
However, I still cannot modify the files. (Getting a permission denied error.)
Is it possible if I create a subdirectory with ownership upload_user:upload_user.
Is it, by any means, possible to allow my chrooted user to write to his / directory?
I have used Puttygen to create a public and a private key, and then is ready to let TortoiseHg on Windows 7 do a clone by going to
ssh:[email protected]/somecode
but there seems to be no where to add the private key to TortoiseHg?
The file is already some where on hard disk as somefile.ppk Does someone know how to add it?
My colleagues mark folders on mac server using their macs, and sometimes tell me i've marked those folders in green. I'm wondering if there's any mean to see what colours got assigned to what folders using PC. I'm connecting to the server using smb/ssh. Solution can be either windows or linux. Please not i'm not about to change those markings, neither looking for some robust solution, just quick hack.
Hi. Everybody knows the Gnome program (I can remember the package name right now, or if it's Nautilus itself) that gives us the menu "connect to server" that we can login in a remove ftp, ssh, windows, and much more and mount it very easily. Looks pretty much like expandrive for macos.
What I need is a tool like that. But for KDE. Anyone knows?
Thanks!
I'm using http://www.hetzner.de/en/.
They send me something like that:
Your Hetzner-Server is now active. Thank you for choosing Hetzner Online as your Web Hosting partner.
You can access your server immediately via SSH2, using following details:
IP-Address: *.*.*.*
Login: "login"
Password: "password"
So, I'm trying to connect to this server in this way:
ssh login@*.*.*.*
Then I input my password, but it gives an error "permission denied".
Can anyone tel me why and how can I fix this?
I started an big operation, but I didn't start a screen session, So i can't disconnect without canceling the operation.
Is there a way to inject screen so that the operation continues and sends its output to the screen session and i can safely disconnect my ssh session?
Hi,
I switch between a Mac and Ubuntu often. On my Ubuntu box, I use an Apple Aluminum keyboard.
I'm interested in Apple's "command" key: ?
(I'm not concerned about the hardware control keys)
cmd-T opens a browser tab
cmd-C, cmd-V for copy/paste, especially in a terminal window
control-c maintains the same meaning in terminal (abort)
Just switching the control & command keys in Ubuntu would almost get me there, except for the special behaviour of the keys a terminal (Terminal is my most frequently used app).
Has it been done?
edit: using Gnome, not KDE
I don't know how SSH works and I think that's a simple question. How do I fix that exception:
com.jcraft.jsch.JSchException: UnknownHostKey: mywebsite.com.
RSA key fingerprint is 22:fb:ee:fe:18:cd:aa:9a:9c:78:89:9f:b4:78:75:b4
I know I should verify that key or something, but there is like zero documentation for Jsch. Here is my code it's really straightforward:
import com.jcraft.jsch.JSch;
import com.jcraft.jsch.Session;
public class ssh{
public static void main(String[] arg){
try{
JSch jsch = new JSch();
//create SSH connection
String host = "mywebsite.com";
String user = "username";
String password = "123456";
Session session = jsch.getSession(user, host, 22);
session.setPassword(password);
session.connect();
}
catch(Exception e){
System.out.println(e);
}
}
}
I'm trying to push a changeset from a local Mercurial repository created with TortoiseHg to a remote Git repository. I have hg-git installed and configured and it will pull just fine. But when I run the push it gives me this
Command
hg push git+ssh://git@dummyrepo:username/repo.git
Result
pushing to git+ssh://git@dummyrepo:username/repo.git
importing Hg objects into Git
creating and sending data
abort: the remote end hung up unexpectedly
There are several things I've done to get to this point. But I'm hoping to resolve this last thing because I find TortoiseHg to be much easier to work with than any of the Git tools out there (for windows.)
Installed TortoiseHg
Pulled down the hg-git from http://bitbucket.org/durin42/hg-git/
Configured mercurial.ini to point to the hg-git library
Pulled down dulwich source from git://git.samba.org/jelmer/dulwich.git
Compiled dulwich and put it into library.zip for TortoiseHg
Configured TortoiseHg to use TortoisePlink.exe for ssh
Added my private key to Pageant
Any ideas what I could be missing?
I'm trying to push a changeset from a local Mercurial repository created with TortoiseHg to a remote Git repository. I have hg-git installed and configured and it will pull just fine. But when I run the push it gives me this
Command
hg push git+ssh://git@dummyrepo:username/repo.git
Result
pushing to git+ssh://git@dummyrepo:username/repo.git
importing Hg objects into Git
creating and sending data
abort: the remote end hung up unexpectedly
There are several things I've done to get to this point. But I'm hoping to resolve this last thing because I find TortoiseHg to be much easier to work with than any of the Git tools out there (for windows.)
Installed TortoiseHg
Pulled down the hg-git from http://bitbucket.org/durin42/hg-git/
Configured mercurial.ini to point to the hg-git library
Pulled down dulwich source from git://git.samba.org/jelmer/dulwich.git
Compiled dulwich and put it into library.zip for TortoiseHg
Configured TortoiseHg to use TortoisePlink.exe for ssh
Added my private key to Pageant
Any ideas what I could be missing?
Since I have the new version it doesnt ask me anymore for the password I set in my ssh key file.
It asks now directly for a github username and password when I push every time.
Is this a new feature of git or changed it in the past or is there something what changed on github?
I tried to authenticate using ssh and the email and password from my ssh ke file and it worked.
Github changed to smartftp and also changed the instructions for setting up repos
https://github.com/blog/1104-credential-caching-for-wrist-friendly-git-usage
https://help.github.com/articles/create-a-repo
Saw it later, they use now https instead of the git protocol
I have some git repositories running on my server and I would like to give a friend read/write access to one. That's simple: I add him as a user, give him SSH access, and change the permissions to the repository folder.
Everything works fine; I'm able to clone the git repository using Xcode and change things (ssh://www.example.com/repo.git). However, I do not want him to have command line access. If I recall correctly, Github does not give command line access to those who SSH in.
I'm using Snow Leopard Server. Is this more of a server issue or a git issue? Do you have any idea where to begin? Setting the user's Login Shell to none (as opposed to /bin/bash) cuts off access to everything.
I am using either Windows 7 or Ubuntu 12.04 and trying to SSH into OSX 10.6.
Using Vim color schemes, I can emulate the colors on xterm-256 color on Linux and gVim on Windows. However, I would like the colors to follow through when I am SSHing onto the OSX. The default terminal, however, does not support xterm-256color.
Is there a way to have OSX use iterm2 by default, to accept all SSH requests instead of terminal.app? If not, is there a way to install xterm-256color into the default terminal?
Upgrading to Lion is out of the question at this point. Thank you!
In my home network , i have dd-wrt router in another room , which bridges wifi from main home router (linksys) to the computers wired behind dd-wrt router.
Now I cannot ssh from my laptop ( connected to linksys wifi) to the computers behind dd-wrt wifi bridge. I am able to ping the individual computers behind the dd-wrt bridge. When it comes to ssh or telnet to the computers , it is blocked.
What can I do to make dd-wrt bridge to open up all ports in the dd-wrt bridge ?
I'm located in Shanghai China and am trying to set up an SSH tunnel (or a reverse ssh tunnel?) to my brother's server located in the States. I'm using windows xp and he has a mac. We are both using wireless routers (not sure if this is relevant). He's given me the address and password (for his server, I think), and I've downloaded myentunnel (which he recommended), but am not sure what to do now. I've also downloaded the foxyproxy add-on for mozilla (my preferred browser), and am hoping there is someone out there who can help guide a newbie like me! Thanks in advance.
I got a 32-bit Debian VPS from http://linode.com and I really haven't done any sort of advanced configuration for securing it ( port 22; password enabled ).
It seems somehow there is ssh scanning going on from my IP, I'm being flagged as this is against the TOS. I've been SSHing only from my home Comcast ISP which I run Linux on.
Is this a common thing when getting a new vps? Are there any standard security configuration tips? I'm quite confused as to how my machine has been accused of this ssh scanning.
Hello all,
I am trying to connect to a SVN server in order to import my project into it with svn+ssh authentication method. I am using the NetBeans IDE (6.8) with subversion plugin installed on Windows XP SP2. I have plink installed with its path set in the Windows PATH env variable. When I use the similar looking repository URL (XXXX and YYYY replaced with sensible things)
svn+ssh://XXXX@YYYY/home/dce/svn/trunk
along with this external tunnel command
plink -l <myUserName> -i C:\\privateKey.ppk
I keep getting this error:
org.tigris.subversion.javahl.ClientException: Network connection closed unexpectedly
I searched about it on the Internet and tried many things but didn't work out. Please help if anybody has some idea what may be going wrong. Thanks a lot in advance.