Re: need a tutorial on setuid

2017-05-07 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, May 06, 2017 at 10:40:59PM -0500, Michael Milliman wrote: > I can't see how dd could have been the culprit [...] Definitely. The file system's inner structure isn't known to dd. One possibility is that the subsequent mount is suppressing the s

Re: need a tutorial on setuid

2017-05-06 Thread Michael Milliman
I can't see how dd could have been the culprit. dd is a block for block copy and does not modify the data as it copies. I don't doubt that the setup bits were changed, but I would suggest that you look for what really changed those bits to prevent a future occurrence. 73's, de WB5VQX -- The Very Q

need a tutorial on setuid

2017-05-06 Thread Gene Heskett
Greetings all; The man page for chmod has obviously been edited to remove all useful information. My reason asking is it appears that dd, when making a clone of an sd card, seems to have removed all setuid info from the executable files. So I'm apparently going to have to restore things as the

Re: sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial

2016-09-24 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, Sep 23, 2016 at 04:41:00PM +, Stephan Beck wrote: > Thank you very much, Tomás. glad to help. [...] > But once my user's (in your terminology, steph's) public key is in the > test account's authorized_keys file, user steph can login with

Re: sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial

2016-09-23 Thread Stephan Beck
Hi Greg and Tomás (one mail for all to limit the load of this thread on the list) :-) Greg Wooledge: > On Fri, Sep 23, 2016 at 12:31:00PM +, Stephan Beck wrote: [...] > As user root: > > stephan@hostname:~$ sudo mkdir -p ~test/.ssh > stephan@hostname:~$ sudo sh -c 'cat ~stephan/.ssh/id_rsa.pu

Re: sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial

2016-09-23 Thread Stephan Beck
Thank you very much, Tomás. to...@tuxteam.de: > On Fri, Sep 23, 2016 at 12:31:00PM +, Stephan Beck wrote: >> Hi >> to...@tuxteam.de: >>> On Thu, Sep 22, 2016 at 03:35:00PM +, Stephan Beck wrote: [...] >> I have created a new user account with >> adduser --disabled-password >> What do I wan

Re: sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial

2016-09-23 Thread Stephan Beck
Stephan Beck: > Thanks, Greg. I trimmed your message just to let you know that it does > not work. To be clear: after having found my solution I did your test (only the test reproduced at the end of your message) and my solution does not work. Thanks Stephan

Re: sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial

2016-09-23 Thread Stephan Beck
Thanks, Greg. I trimmed your message just to let you know that it does not work. Greg Wooledge: > On Fri, Sep 23, 2016 at 12:31:00PM +, Stephan Beck wrote: > As user stephan, to test that it works: > > stephan@hostname:~$ ssh test@localhost id > > If your username isn't actually "stephan",

Re: RESOLVED Re: sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial

2016-09-23 Thread Stephan Beck
Hi, Stephan Beck: > Hi > > Stephan Beck: >> Hi >> >> to...@tuxteam.de: >>> On Thu, Sep 22, 2016 at 03:35:00PM +, Stephan Beck wrote: >>> >>> > >> How do I get this public key onto localhost? > > No need to reply, I'll send the answer to document my solution within > minutes. Solution (feel

Re: sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial

2016-09-23 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, Sep 23, 2016 at 12:31:00PM +, Stephan Beck wrote: > Hi > > to...@tuxteam.de: > > On Thu, Sep 22, 2016 at 03:35:00PM +, Stephan Beck wrote: > > > > > >> to...@tuxteam.de: > > > > [mumble] > > > >>> This is the bird's view. Ask if yo

RESOLVED Re: sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial

2016-09-23 Thread Stephan Beck
Hi Stephan Beck: > Hi > > to...@tuxteam.de: >> On Thu, Sep 22, 2016 at 03:35:00PM +, Stephan Beck wrote: >> >> > How do I get this public key onto localhost? No need to reply, I'll send the answer to document my solution within minutes. Stephan

Re: sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial

2016-09-23 Thread Greg Wooledge
On Fri, Sep 23, 2016 at 12:31:00PM +, Stephan Beck wrote: > I have created a new user account with > adduser --disabled-password > What do I want to do? > I'd like to login to this account "test" from my normal user account by > ssh via pubkey authentication. My (normal) user account has its ke

sending authorized_keys to localhost from an account being created with adduser --disabled-password [was] Re: Need a tutorial

2016-09-23 Thread Stephan Beck
Hi to...@tuxteam.de: > On Thu, Sep 22, 2016 at 03:35:00PM +, Stephan Beck wrote: > > >> to...@tuxteam.de: > > [mumble] > >>> This is the bird's view. Ask if you get stuck. > > >> Sorry, Tomas, it's not Gene, it's me who has a special question > > No need to be sorry :-) Fine! :-) > >

Re: Need a tutorial

2016-09-23 Thread Dominique Dumont
On Thursday, 22 September 2016 22:27:14 CEST Gene Heskett wrote: > On Thursday, 22 September 2016 12:30:10 CEST Gene Heskett wrote: > > > If you're not sure of the syntax of ssh config file, you can use > > > > > > > > > > > > > > > cme=command not found. > > > > You need to install cme packag

Re: Need a tutorial

2016-09-22 Thread davidson
On Thu, 22 Sep 2016, Gene Heskett wrote: On Thursday 22 September 2016 08:06:34 Lars Noodén wrote: OpenSSH 6.5 or later will support it. Wheezy had 6.0 (but 6.6 is in the backports), and Jessia has 6.7, and Stretch is getting 7.3. The release notes for 6.5 just mention that it is "better" for

Re: Need a tutorial

2016-09-22 Thread Gene Heskett
On Thursday 22 September 2016 14:18:30 Dominique Dumont wrote: > On Thursday, 22 September 2016 12:30:10 CEST Gene Heskett wrote: > > If you're not sure of the syntax of ssh config file, you can use > > > > > 'cme edit ssh' to perform this task. > > > > cme=command not found. > > You need to insta

Re: Need a tutorial

2016-09-22 Thread Thomas Schmitt
Hi, Dominique Dumont wrote: > > > > If you're not sure of the syntax of ssh config file, you can use > > > > 'cme edit ssh' to perform this task. Gene Heskett wrote: > > > cme=command not found. Dominique Dumont wrote: > > You need to install cme package: > > $ sudo apt install cme Greg Wooledg

Re: Need a tutorial

2016-09-22 Thread Dominique Dumont
On Thursday, 22 September 2016 14:29:53 CEST Greg Wooledge wrote: > wooledg@wooledg:~$ apt-cache show cme > N: Unable to locate package cme > E: No packages found Ah sorry, cme package is available on testing and sid. On Jessie, cme command is delivered by libconfig-model-perl. I don't remember h

Re: Need a tutorial

2016-09-22 Thread Greg Wooledge
On Thu, Sep 22, 2016 at 08:18:30PM +0200, Dominique Dumont wrote: > On Thursday, 22 September 2016 12:30:10 CEST Gene Heskett wrote: > > If you're not sure of the syntax of ssh config file, you can use > > > > > 'cme edit ssh' to perform this task. > > > > cme=command not found. > > You need to

Re: Need a tutorial

2016-09-22 Thread Stephan Beck
Hi, Thomas Schmitt: > Hi, > > Greg Wooledge wrote: >> From whichever shell he was using to >> run adduser, he should also be able to run sudo -u test bash. > > Ah yes. This works. (One just has to accomodate to the idea of the > superuser running sudo ...) Yes, Greg and Thomas, I've just tried

Re: Need a tutorial

2016-09-22 Thread Dominique Dumont
On Thursday, 22 September 2016 12:30:10 CEST Gene Heskett wrote: > If you're not sure of the syntax of ssh config file, you can use > > > 'cme edit ssh' to perform this task. > > cme=command not found. You need to install cme package: $ sudo apt install cme This will install al required depende

Re: Need a tutorial

2016-09-22 Thread Stephan Beck
Hi, Thomas Schmitt: > Hi, > > Greg Wooledge wrote: >> From whichever shell he was using to >> run adduser, he should also be able to run sudo -u test bash. > > Ah yes. This works. (One just has to accomodate to the idea of the > superuser running sudo ...) Yes, Greg and Thomas, I've just tried

Re: Need a tutorial

2016-09-22 Thread Bob Bernstein
On Thu, 22 Sep 2016, Greg Wooledge wrote: cme=command not found. I know nothing about this "cme" either. Yes. Qu'est-que "cme?" Some esoteric breed of editor? -- IMPORTANT: This email is intended for the use of the individual addressee(s) named above and may contain information that is co

Re: Need a tutorial

2016-09-22 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Sep 22, 2016 at 03:35:00PM +, Stephan Beck wrote: > > > to...@tuxteam.de: [mumble] > > This is the bird's view. Ask if you get stuck. > Sorry, Tomas, it's not Gene, it's me who has a special question No need to be sorry :-) But I se

Re: Need a tutorial

2016-09-22 Thread Lars Noodén
On 09/22/2016 07:30 PM, Gene Heskett wrote: > On Thursday 22 September 2016 11:16:45 Dominique Dumont wrote: ... >> Others have explained how to generate keys. Then you can simplify the >> process by setting up your ~/.ssh/config file with something like: >> > Interesting, I don't have that file, i

Re: Need a tutorial

2016-09-22 Thread Stephan Beck
Hi, Thomas Schmitt: > Hi, > > Stephan Beck wrote: >> How can you access this new account to generate an ssh key pair there? > [sorry for trimming] > Greg Wooledge wrote: >> sudo -u test bash > > Does not work for me (at least not out of the box): > > $ sudo -u test_user bash > [sudo] pass

Re: Need a tutorial

2016-09-22 Thread Greg Wooledge
On Thu, Sep 22, 2016 at 12:30:10PM -0400, Gene Heskett wrote: > On Thursday 22 September 2016 11:16:45 Dominique Dumont wrote: > > Others have explained how to generate keys. Then you can simplify the > > process by setting up your ~/.ssh/config file with something like: > > > Interesting, I don't

Re: Need a tutorial

2016-09-22 Thread Gene Heskett
On Thursday 22 September 2016 12:04:21 Lars Noodén wrote: > On 09/22/2016 06:55 PM, Gene Heskett wrote: > > Can ssh-keygen make the newer ones above? I see in a key acceptance > > conversation that it apparently can do the ecdsa. So maybe I > > shouldn't worry. > > The -t option sets the key type

Re: Need a tutorial

2016-09-22 Thread Gene Heskett
On Thursday 22 September 2016 11:16:45 Dominique Dumont wrote: > On Wednesday, 21 September 2016 10:18:55 CEST Gene Heskett wrote: > > su gene -c "sshfs gene@shop:/ /sshnet/shop" > > su gene -c "sshfs gene@lathe:/ /sshnet/lathe" > > su gene -c "sshfs gene@GO704:/ /sshnet/GO704" > > Others have exp

Re: Need a tutorial

2016-09-22 Thread Thomas Schmitt
Hi, Greg Wooledge wrote: > From whichever shell he was using to > run adduser, he should also be able to run sudo -u test bash. Ah yes. This works. (One just has to accomodate to the idea of the superuser running sudo ...) Have a nice day :) Thomas

Re: Need a tutorial

2016-09-22 Thread Gene Heskett
On Thursday 22 September 2016 09:42:18 Jude DaShiell wrote: > Also, make a list of all crypto types ssh-keygen can do and check on > the internet and eliminate the obsolete encryption types from the > types you'll use to create that key pair before creating that key > pair. > Good advice, thanks J

Re: Need a tutorial

2016-09-22 Thread Stephan Beck
Thanks, Greg. Greg Wooledge: > On Thu, Sep 22, 2016 at 03:35:00PM +, Stephan Beck wrote: >> Sorry, Tomas, it's not Gene, it's me who has a special question >> concerning ssh. >> If you create a new user account ("test"), doing as root >> adduser --disabled-password test >> >> How can you acces

Re: Need a tutorial

2016-09-22 Thread Gene Heskett
On Thursday 22 September 2016 08:06:34 Lars Noodén wrote: > On 09/22/2016 02:09 PM, Gene Heskett wrote: > > On Thursday 22 September 2016 03:44:28 Lars Noodén wrote: > > ... > > >> As far as the key choices go, DSA is considered deprecated, at > >> least in the more recent versions: > >> > >>"

Re: Need a tutorial

2016-09-22 Thread Greg Wooledge
On Thu, Sep 22, 2016 at 06:11:18PM +0200, Thomas Schmitt wrote: > Greg Wooledge wrote: > > sudo -u test bash > > Does not work for me (at least not out of the box): > > $ sudo -u test_user bash > [sudo] password for thomas: > Sorry, user thomas is not allowed to execute '/bin/bash' as test

Re: Need a tutorial

2016-09-22 Thread Thomas Schmitt
Hi, Stephan Beck wrote: > How can you access this new account to generate an ssh key pair there? There seems to be a bug with adduser --disabled-password . With empty password input i get: $ su test_user Password: su: Authentication failure Only this succeeds: $ su Password: # su

Re: Need a tutorial

2016-09-22 Thread Stephan Beck
I resolved it. I have to type (as root) su - test and the prompt changes. Stephan Stephan Beck: > > > to...@tuxteam.de: >> On Wed, Sep 21, 2016 at 10:18:55AM -0400, Gene Heskett wrote: > Sorry, Tomas, it's not Gene, it's me who has a special question > concerning ssh. > If you create a new

Re: Need a tutorial

2016-09-22 Thread Lars Noodén
On 09/22/2016 06:55 PM, Gene Heskett wrote: > Can ssh-keygen make the newer ones above? I see in a key acceptance > conversation that it apparently can do the ecdsa. So maybe I shouldn't > worry. The -t option sets the key type that ssh-keygen will make. These days it you can choose from DSA,

Re: Need a tutorial

2016-09-22 Thread Gene Heskett
On Thursday 22 September 2016 08:02:56 to...@tuxteam.de wrote: > On Thu, Sep 22, 2016 at 07:09:53AM -0400, Gene Heskett wrote: > > On Thursday 22 September 2016 03:44:28 Lars Noodén wrote: > > > On 09/21/2016 11:39 PM, Gene Heskett wrote: > > > > On Wednesday 21 September 2016 10:23:09 Greg Wooled

Re: Need a tutorial

2016-09-22 Thread Greg Wooledge
On Thu, Sep 22, 2016 at 03:35:00PM +, Stephan Beck wrote: > Sorry, Tomas, it's not Gene, it's me who has a special question > concerning ssh. > If you create a new user account ("test"), doing as root > adduser --disabled-password test > > How can you access this new account to generate an ssh

Re: Need a tutorial

2016-09-22 Thread Stephan Beck
to...@tuxteam.de: > On Wed, Sep 21, 2016 at 10:18:55AM -0400, Gene Heskett wrote: >> Greetings all, Dr Klepp in particular; > >> Where can I get a tut on doing the ssh keyfile login, and where can I >> find a tutorial that is essentialy what Dr. Klepp had me do about a year >> back that made

Re: Need a tutorial

2016-09-22 Thread Dominique Dumont
On Wednesday, 21 September 2016 10:18:55 CEST Gene Heskett wrote: > su gene -c "sshfs gene@shop:/ /sshnet/shop" > su gene -c "sshfs gene@lathe:/ /sshnet/lathe" > su gene -c "sshfs gene@GO704:/ /sshnet/GO704" Others have explained how to generate keys. Then you can simplify the process by setting

Re: Need a tutorial

2016-09-22 Thread Jude DaShiell
Greg Wooledge To: debian-user@lists.debian.org Subject: Re: Need a tutorial Resent-Date: Wed, 21 Sep 2016 14:23:27 + (UTC) Resent-From: debian-user@lists.debian.org On Wed, Sep 21, 2016 at 10:18:55AM -0400, Gene Heskett wrote: Where can I get a tut on doing the ssh keyfile login, and where

Re: Need a tutorial

2016-09-22 Thread Lars Noodén
On 09/22/2016 02:09 PM, Gene Heskett wrote: > On Thursday 22 September 2016 03:44:28 Lars Noodén wrote: ... >> As far as the key choices go, DSA is considered deprecated, at least >> in the more recent versions: >> >> "Support for ssh-dss, ssh-dss-cert-* host and user keys >> will be run-

Re: Need a tutorial

2016-09-22 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Sep 22, 2016 at 07:09:53AM -0400, Gene Heskett wrote: > On Thursday 22 September 2016 03:44:28 Lars Noodén wrote: > > > On 09/21/2016 11:39 PM, Gene Heskett wrote: > > > On Wednesday 21 September 2016 10:23:09 Greg Wooledge wrote: > > > > ...

Re: Need a tutorial

2016-09-22 Thread Gene Heskett
On Thursday 22 September 2016 03:44:28 Lars Noodén wrote: > On 09/21/2016 11:39 PM, Gene Heskett wrote: > > On Wednesday 21 September 2016 10:23:09 Greg Wooledge wrote: > > ... > > >> man ssh-keygen > >> http://mywiki.wooledge.org/SshKeys > > > > I knew there was something about generating keys, b

Re: Need a tutorial

2016-09-22 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Sep 22, 2016 at 10:44:28AM +0300, Lars Noodén wrote: > On 09/21/2016 11:39 PM, Gene Heskett wrote: > > On Wednesday 21 September 2016 10:23:09 Greg Wooledge wrote: > ... > >> man ssh-keygen > >> http://mywiki.wooledge.org/SshKeys > > > > I kne

Re: Need a tutorial

2016-09-22 Thread Lars Noodén
On 09/21/2016 11:39 PM, Gene Heskett wrote: > On Wednesday 21 September 2016 10:23:09 Greg Wooledge wrote: ... >> man ssh-keygen >> http://mywiki.wooledge.org/SshKeys > > I knew there was something about generating keys, but not the sticky > details. If you have multiple servers or multiple remo

Re: Need a tutorial

2016-09-21 Thread Gene Heskett
On Wednesday 21 September 2016 12:24:39 to...@tuxteam.de wrote: > On Wed, Sep 21, 2016 at 10:18:55AM -0400, Gene Heskett wrote: > > Greetings all, Dr Klepp in particular; > > > > Where can I get a tut on doing the ssh keyfile login, and where can > > I find a tutorial that is essentialy what Dr. K

Re: Need a tutorial

2016-09-21 Thread Gene Heskett
On Wednesday 21 September 2016 10:23:09 Greg Wooledge wrote: > On Wed, Sep 21, 2016 at 10:18:55AM -0400, Gene Heskett wrote: > > Where can I get a tut on doing the ssh keyfile login, and where can > > I find a tutorial that is essentialy what Dr. Klepp had me do about > > a year back that made the

Re: Need a tutorial

2016-09-21 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Sep 21, 2016 at 10:18:55AM -0400, Gene Heskett wrote: > Greetings all, Dr Klepp in particular; > > Where can I get a tut on doing the ssh keyfile login, and where can I > find a tutorial that is essentialy what Dr. Klepp had me do about a yea

Need a tutorial

2016-09-21 Thread Gene Heskett
Greetings all, Dr Klepp in particular; Where can I get a tut on doing the ssh keyfile login, and where can I find a tutorial that is essentialy what Dr. Klepp had me do about a year back that made these 3 commands in my rc.local file Just Work: su gene -c "sshfs gene@shop:/ /sshnet/shop" su ge

Re: Need a tutorial

2016-09-21 Thread Greg Wooledge
On Wed, Sep 21, 2016 at 10:18:55AM -0400, Gene Heskett wrote: > Where can I get a tut on doing the ssh keyfile login, and where can I > find a tutorial that is essentialy what Dr. Klepp had me do about a year > back that made these 3 commands in my rc.local file Just Work: > > su gene -c "sshfs