Re: [despammed] Re: How to reduce sid security

2003-08-21 Thread Nicolas Velasquez O.
Hey, Sorry for the delay. Been in the same situation before. I couldn't find the place where I got the setup I have, but here it is: (server=sarge-sid, client=woody) Xwindow Server(Sid) : /etc/X11/xdm/Xservers :0 local /usr/X11R6/bin/X vt7 -nolisten tcp 192.168.0.99:1 foreign # where 192

Re: [despammed] Re: How to reduce sid security

2003-08-21 Thread Eddie J Schwartz
On Thursday 21 August 2003 02:20 pm, [EMAIL PROTECTED] (Boyd Moore) (Boyd Moore) wrote: > I will try to explain again. This is not an urgent problem, but it is > highly irritating. > > I have an older PC running Debian Stable (Woody, 2.2.20). My new PC > is running Debian Unstable (Sid, 2.4.18-b

Re: How to reduce sid security

2003-08-21 Thread Johann Koenig
On Thu, 21 Aug 2003 11:20:35 -0700 [EMAIL PROTECTED] (Boyd Moore) wrote: > I would like for these two Linux systems to completely trust each > other so I can run remote X (XDMCP), using the KDE3 service on the > faster, more up-to-date PC, for my window manager on the older PC. > You cannot do th

Re: [despammed] Re: How to reduce sid security

2003-08-21 Thread Nicolas Velasquez O.
Hey, Sorry for the delay. Been in the same situation before. I couldn't find the place where I got the setup I have, but here it is: (server=sarge-sid, client=woody) Xwindow Server(Sid) : /etc/X11/xdm/Xservers :0 local /usr/X11R6/bin/X vt7 -nolisten tcp 192.168.0.99:1 foreign # where 192

Re: [despammed] Re: How to reduce sid security

2003-08-21 Thread Eddie J Schwartz
On Thursday 21 August 2003 02:20 pm, [EMAIL PROTECTED] (Boyd Moore) (Boyd Moore) wrote: > I will try to explain again. This is not an urgent problem, but it is > highly irritating. > > I have an older PC running Debian Stable (Woody, 2.2.20). My new PC > is running Debian Unstable (Sid, 2.4.18-b

Re: How to reduce sid security

2003-08-21 Thread Johann Koenig
On Thu, 21 Aug 2003 11:20:35 -0700 [EMAIL PROTECTED] (Boyd Moore) wrote: > I would like for these two Linux systems to completely trust each > other so I can run remote X (XDMCP), using the KDE3 service on the > faster, more up-to-date PC, for my window manager on the older PC. > You cannot do th

Re: How to reduce sid security

2003-08-21 Thread Boyd Moore
I will try to explain again. This is not an urgent problem, but it is highly irritating. I have an older PC running Debian Stable (Woody, 2.2.20). My new PC is running Debian Unstable (Sid, 2.4.18-bf2.4). I am using the latter for development, and my wife uses it for her e-mail, e-bay, etc. Bo

Re: How to reduce sid security

2003-08-21 Thread Boyd Moore
I will try to explain again. This is not an urgent problem, but it is highly irritating. I have an older PC running Debian Stable (Woody, 2.2.20). My new PC is running Debian Unstable (Sid, 2.4.18-bf2.4). I am using the latter for development, and my wife uses it for her e-mail, e-bay, etc. Bo

Re: How to reduce sid security

2003-08-14 Thread David Wright
Quoting Boyd Moore ([EMAIL PROTECTED]): > Well I did have rlogin, that is it points to netkit-rlogin. I finally > got rsh to work by commenting out the ALL: PARANOID line in > hosts.deny. I thought that the hosts.allow overrode the hosts.deny, > but apparently they have reversed the priority.

Re: Passwordless Authentication (was Re: How to reduce sid security)

2003-08-14 Thread Aníbal Monsalve Salazar
On Fri, Aug 01, 2003 at 01:03:46PM +0200, [EMAIL PROTECTED] wrote: > If you can read Dutch you can use my pages right now [1]. They explain > all this in excruciating detail. OpenSSH and SSH.com interoperability > and setting up ssh-agent are explained too. Some scripts are provided to > automate a

Re: How to reduce sid security

2003-08-14 Thread Peter Cordes
On Thu, Aug 07, 2003 at 08:05:05AM -0700, Boyd Moore wrote: > > Well I did have rlogin, that is it points to netkit-rlogin. I finally > got rsh to work by commenting out the ALL: PARANOID line in > hosts.deny. You should put ALL: ALL in hosts.deny, and fix hosts.allow to allow what you want ins

Re: Passwordless Authentication (was Re: How to reduce sid security)

2003-08-14 Thread HdV
On Tue, 12 Aug 2003, [iso-8859-1] Aníbal Monsalve Salazar wrote: > What's the URL of the English version? It took me a bit longer than I had expected, but I just finished the translation. You can read it here: http://huizen.dto.tudelft.nl/devries/security/ssh2_pubkey_auth_config.html Grx HdV

Re: Passwordless Authentication (was Re: How to reduce sid security)

2003-08-14 Thread HdV
On Tue, 12 Aug 2003, [iso-8859-1] Aníbal Monsalve Salazar wrote: > What's the URL of the English version? Well, I just finished translating the iptables page and hope to have this one ready at the end of the day. The would be about 18:00 CEST (+0200). It will be available at http://huizen.dto.tu

Re: How to reduce sid security

2003-08-14 Thread Boyd Moore
[EMAIL PROTECTED] (Boyd Moore) wrote in message news:<[EMAIL PROTECTED]>... > Peter Cordes <[EMAIL PROTECTED]> wrote in message news:<[EMAIL PROTECTED]>... > > On Thu, Jul 31, 2003 at 02:17:46PM -0700, Boyd Moore wrote: > > > I have two Debian systems behind a Linksys router, with the router > > >

Re: Passwordless Authentication (was Re: How to reduce sid security)

2003-08-12 Thread HdV
On Tue, 12 Aug 2003, [iso-8859-1] An?bal Monsalve Salazar wrote: > What's the URL of the English version? It took me a bit longer than I had expected, but I just finished the translation. You can read it here: http://huizen.dto.tudelft.nl/devries/security/ssh2_pubkey_auth_config.html Grx HdV

Re: How to reduce sid security

2003-08-12 Thread Peter Cordes
On Thu, Aug 07, 2003 at 08:05:05AM -0700, Boyd Moore wrote: > > Well I did have rlogin, that is it points to netkit-rlogin. I finally > got rsh to work by commenting out the ALL: PARANOID line in > hosts.deny. You should put ALL: ALL in hosts.deny, and fix hosts.allow to allow what you want ins

Re: Passwordless Authentication (was Re: How to reduce sid security)

2003-08-12 Thread HdV
On Tue, 12 Aug 2003, [iso-8859-1] An?bal Monsalve Salazar wrote: > What's the URL of the English version? Well, I just finished translating the iptables page and hope to have this one ready at the end of the day. The would be about 18:00 CEST (+0200). It will be available at http://huizen.dto.tu

Re: Passwordless Authentication (was Re: How to reduce sid security)

2003-08-11 Thread Aníbal Monsalve Salazar
On Fri, Aug 01, 2003 at 01:03:46PM +0200, [EMAIL PROTECTED] wrote: > If you can read Dutch you can use my pages right now [1]. They explain > all this in excruciating detail. OpenSSH and SSH.com interoperability > and setting up ssh-agent are explained too. Some scripts are provided to > automate a

Re: How to reduce sid security

2003-08-08 Thread Thomas Ritter
[...] > but apparently they have reversed the priority. Now rsh, rlogin, etc. > works, but still not remote X windows. What about configuring X for network access? Wasn't X configured not to use network and sockets instead by default? -- Thomas Ritter "Those who would give up essential libert

Re: How to reduce sid security

2003-08-07 Thread David Wright
Quoting Boyd Moore ([EMAIL PROTECTED]): > Well I did have rlogin, that is it points to netkit-rlogin. I finally > got rsh to work by commenting out the ALL: PARANOID line in > hosts.deny. I thought that the hosts.allow overrode the hosts.deny, > but apparently they have reversed the priority.

Re: How to reduce sid security

2003-08-07 Thread Thomas Ritter
[...] > but apparently they have reversed the priority. Now rsh, rlogin, etc. > works, but still not remote X windows. What about configuring X for network access? Wasn't X configured not to use network and sockets instead by default? -- Thomas Ritter "Those who would give up essential libert

Re: How to reduce sid security

2003-08-07 Thread Boyd Moore
[EMAIL PROTECTED] (Boyd Moore) wrote in message news:<[EMAIL PROTECTED]>... > Peter Cordes <[EMAIL PROTECTED]> wrote in message news:<[EMAIL PROTECTED]>... > > On Thu, Jul 31, 2003 at 02:17:46PM -0700, Boyd Moore wrote: > > > I have two Debian systems behind a Linksys router, with the router > > >

Re: Passwordless Authentication (was Re: How to reduce sid security)

2003-08-01 Thread Rob VanFleet
On Fri, Aug 01, 2003 at 11:04:32AM +0200, Kjetil Kjernsmo wrote: > On Friday 01 August 2003 04:10, Peter Cordes wrote: > > You should use ssh-keygen to create a keypair on each machine, and > > copy the public key from the machine you generated it on to the other > > machine. This allows quick pas

Re: Passwordless Authentication (was Re: How to reduce sid security)

2003-08-01 Thread Rob VanFleet
On Fri, Aug 01, 2003 at 11:04:32AM +0200, Kjetil Kjernsmo wrote: > On Friday 01 August 2003 04:10, Peter Cordes wrote: > > You should use ssh-keygen to create a keypair on each machine, and > > copy the public key from the machine you generated it on to the other > > machine. This allows quick pas

Re: Passwordless Authentication (was Re: How to reduce sid security)

2003-08-01 Thread HdV
On Fri, 1 Aug 2003, Kjetil Kjernsmo wrote: > On Friday 01 August 2003 04:10, Peter Cordes wrote: > > You should use ssh-keygen to create a keypair on each machine, and > > copy the public key from the machine you generated it on to the other > > machine. This allows quick passwordless authenticat

Re: How to reduce sid security

2003-08-01 Thread Boyd Moore
Peter Cordes <[EMAIL PROTECTED]> wrote in message news:<[EMAIL PROTECTED]>... > On Thu, Jul 31, 2003 at 02:17:46PM -0700, Boyd Moore wrote: > > I have two Debian systems behind a Linksys router, with the router > > blocking everything except returning packets. One system is debian > > "stable" (Woo

Re: Passwordless Authentication (was Re: How to reduce sid security)

2003-08-01 Thread Ted Roby
On Friday, Aug 1, 2003, at 02:17 US/Pacific, Matthijs Mohlmann wrote: I have here also key login. It's very easy. ssh-keygen -t dsa You got now two files id_dsa and id_dsa.pub. You put the id_dsa.pub in ~/.ssh/authorized_keys2 and id_dsa on your client in ~/.ssh/id_dsa. When you start now ss

Re: Passwordless Authentication (was Re: How to reduce sid security)

2003-08-01 Thread Matthijs Mohlmann
I have here also key login. It's very easy. ssh-keygen -t dsa You got now two files id_dsa and id_dsa.pub. You put the id_dsa.pub in ~/.ssh/authorized_keys2 and id_dsa on your client in ~/.ssh/id_dsa. When you start now ssh on the client to the remote he take the id_dsa key and login. :-) That's

Re: Passwordless Authentication (was Re: How to reduce sid security)

2003-08-01 Thread Jean Christophe ANDRÉ
Hi, Kjetil Kjernsmo écrivait : > I've tried to do this many times, but I've failed... Is there a Very > Verbose Guide to Passwordless Authentication with SSH somewhere...? :-) All is in the man pages! For real password-less (even for the private key, it's *bad*), try this: $ ssh-key

Re: Passwordless Authentication (was Re: How to reduce sid security)

2003-08-01 Thread Martynas Domarkas
Pn, 2003-08-01 12:04, Kjetil Kjernsmo rašė: > On Friday 01 August 2003 04:10, Peter Cordes wrote: > > You should use ssh-keygen to create a keypair on each machine, and > > copy the public key from the machine you generated it on to the other > > machine. This allows quick passwordless authenticat

Passwordless Authentication (was Re: How to reduce sid security)

2003-08-01 Thread Kjetil Kjernsmo
On Friday 01 August 2003 04:10, Peter Cordes wrote: > You should use ssh-keygen to create a keypair on each machine, and > copy the public key from the machine you generated it on to the other > machine. This allows quick passwordless authentication. I've tried to do this many times, but I've fai

Re: Passwordless Authentication (was Re: How to reduce sid security)

2003-08-01 Thread HdV
On Fri, 1 Aug 2003, Kjetil Kjernsmo wrote: > On Friday 01 August 2003 04:10, Peter Cordes wrote: > > You should use ssh-keygen to create a keypair on each machine, and > > copy the public key from the machine you generated it on to the other > > machine. This allows quick passwordless authenticat

Re: How to reduce sid security

2003-08-01 Thread Boyd Moore
Peter Cordes <[EMAIL PROTECTED]> wrote in message news:<[EMAIL PROTECTED]>... > On Thu, Jul 31, 2003 at 02:17:46PM -0700, Boyd Moore wrote: > > I have two Debian systems behind a Linksys router, with the router > > blocking everything except returning packets. One system is debian > > "stable" (Woo

Re: Passwordless Authentication (was Re: How to reduce sid security)

2003-08-01 Thread Ted Roby
On Friday, Aug 1, 2003, at 02:17 US/Pacific, Matthijs Mohlmann wrote: I have here also key login. It's very easy. ssh-keygen -t dsa You got now two files id_dsa and id_dsa.pub. You put the id_dsa.pub in ~/.ssh/authorized_keys2 and id_dsa on your client in ~/.ssh/id_dsa. When you start now ssh o

Re: Passwordless Authentication (was Re: How to reduce sid security)

2003-08-01 Thread Jean Christophe ANDRÉ
Hi, Kjetil Kjernsmo écrivait : > I've tried to do this many times, but I've failed... Is there a Very > Verbose Guide to Passwordless Authentication with SSH somewhere...? :-) All is in the man pages! For real password-less (even for the private key, it's *bad*), try this: $ ssh-key

Re: Passwordless Authentication (was Re: How to reduce sid security)

2003-08-01 Thread Martynas Domarkas
Pn, 2003-08-01 12:04, Kjetil Kjernsmo rašė: > On Friday 01 August 2003 04:10, Peter Cordes wrote: > > You should use ssh-keygen to create a keypair on each machine, and > > copy the public key from the machine you generated it on to the other > > machine. This allows quick passwordless authenticat

Passwordless Authentication (was Re: How to reduce sid security)

2003-08-01 Thread Kjetil Kjernsmo
On Friday 01 August 2003 04:10, Peter Cordes wrote: > You should use ssh-keygen to create a keypair on each machine, and > copy the public key from the machine you generated it on to the other > machine. This allows quick passwordless authentication. I've tried to do this many times, but I've fai

Re: How to reduce sid security

2003-07-31 Thread Peter Cordes
On Thu, Jul 31, 2003 at 02:17:46PM -0700, Boyd Moore wrote: > I have two Debian systems behind a Linksys router, with the router > blocking everything except returning packets. One system is debian > "stable" (Woody), the other "unstable" (Sid). I have read > through just about all the PAM docs an

Re: How to reduce sid security

2003-07-31 Thread Peter Cordes
On Thu, Jul 31, 2003 at 02:17:46PM -0700, Boyd Moore wrote: > I have two Debian systems behind a Linksys router, with the router > blocking everything except returning packets. One system is debian > "stable" (Woody), the other "unstable" (Sid). I have read > through just about all the PAM docs an

How to reduce sid security

2003-07-31 Thread Boyd Moore
I have two Debian systems behind a Linksys router, with the router blocking everything except returning packets. One system is debian "stable" (Woody), the other "unstable" (Sid). I have read through just about all the PAM docs and the Debian Security Docs, but still haven't been able to find out

How to reduce sid security

2003-07-31 Thread Boyd Moore
I have two Debian systems behind a Linksys router, with the router blocking everything except returning packets. One system is debian "stable" (Woody), the other "unstable" (Sid). I have read through just about all the PAM docs and the Debian Security Docs, but still haven't been able to find out