Re: ssh forward agent

2025-06-02 Thread Francis . Montagnac
Hi. On Mon, 02 Jun 2025 22:45:48 +0700 Frederic Muller wrote: > On 02/06/2025 21:45, francis.montag...@inria.fr wrote: >> AFAIK sudo cannot be configured to authenticate with SSH keys. > of course it can. Effectively, a search shows that this is possible by configuri

Re: ssh forward agent

2025-06-02 Thread Tim via users
On Mon, 2025-06-02 at 11:50 -0500, Ranjan Maitra via users wrote: > passwordless sudo seems quite risky to me (and seems to defeat the > purpose of sudo). Yes, and no... If I "sudo something" the password I'm going to type is my own, which I already know. Though it does offer an "are you sure" m

Re: ssh forward agent

2025-06-02 Thread Ranjan Maitra via users
On Mon Jun02'25 10:45:48PM, Frederic Muller wrote: > From: Frederic Muller > Date: Mon, 2 Jun 2025 22:45:48 +0700 > To: users@lists.fedoraproject.org > Reply-To: Community support for Fedora users > Subject: Re: ssh forward agent > > On 02/06/2025 21:45, francis.montag

Re: ssh forward agent

2025-06-02 Thread Frederic Muller
On 02/06/2025 21:45, francis.montag...@inria.fr wrote: Hi. On Mon, 02 Jun 2025 21:32:41 +0700 Frederic Muller wrote: I copied the old .ssh from my backup so it's all the same files and I do manage to ssh to the server, just not sudo su. This is thus a change in the sudo configurations

Re: ssh forward agent

2025-06-02 Thread Francis . Montagnac
Hi. On Mon, 02 Jun 2025 21:32:41 +0700 Frederic Muller wrote: > I copied the old .ssh from my backup so it's all the same files and I do > manage to ssh to the server, just not sudo su. This is thus a change in the sudo configurations, not SSH. AFAIK sudo cannot be configured to a

ssh forward agent

2025-06-02 Thread Frederic Muller
Hi! Is there something that changed in F42 making forward agent no longer working? I'm logging in using SSH key to a VPS to which I usually log in without any problem. I then sudo su, but it's asking for a password. My config is as such: Host myhost     Hostname th

Re: OT: How to select a new port number for ssh

2025-01-24 Thread Chris Adams
irewall (because Internet). > Since I am the only one who should be accessing the NAS with > ssh, and that is very rarely, I don't mind the extra hassle. That's IMHO a worse case, because if it's rarely accessed, it's that much harder to re

Re: OT: How to select a new port number for ssh

2025-01-24 Thread Ranjan Maitra via users
On Fri Jan24'25 04:54:36PM, Patrick O'Callaghan wrote: > From: Patrick O'Callaghan > Date: Fri, 24 Jan 2025 16:54:36 + > To: users@lists.fedoraproject.org > Reply-To: Community support for Fedora users > Subject: Re: OT: How to select a new port number for ssh &

Re: OT: How to select a new port number for ssh

2025-01-24 Thread Barry
> On 24 Jan 2025, at 17:17, Lester Petrie wrote: > > I want to see what happens to the log if I change the port. It is easy to scan all 64k ports to find sshd. So you should expect no change in attacks. If you leave a secured sshd on 22 the scripts tend to give up faster, which lowers the ov

Re: OT: How to select a new port number for ssh

2025-01-24 Thread Jeffrey Walton
On Fri, Jan 24, 2025 at 12:17 PM Lester Petrie wrote: > > > On 1/24/2025 12:03 PM, Chris Adams wrote: > > Once upon a time, Lester Petrie said: > >> I have a NAS I wish to change the ssh port from 22 to something > >> else. How do I go about selecting a good port

Re: OT: How to select a new port number for ssh

2025-01-24 Thread Lester Petrie
On 1/24/2025 12:03 PM, Chris Adams wrote: Once upon a time, Lester Petrie said: I have a NAS I wish to change the ssh port from 22 to something else. How do I go about selecting a good port number? If it's IPv4 and exposed to the Internet, moving to a different port isn't really

Re: OT: How to select a new port number for ssh

2025-01-24 Thread Chris Adams
Once upon a time, Lester Petrie said: > I have a NAS I wish to change the ssh port from 22 to something > else. How do I go about selecting a good port number? If it's IPv4 and exposed to the Internet, moving to a different port isn't really doesn't do much to secure it; i

Re: OT: How to select a new port number for ssh

2025-01-24 Thread Patrick O'Callaghan
On Fri, 2025-01-24 at 11:40 -0500, Lester Petrie wrote: > I have a NAS I wish to change the ssh port from 22 to something else. > How do I go about selecting a good port number? Look at the standard ports in /etc/services and choose something different. Depending on access control to t

OT: How to select a new port number for ssh

2025-01-24 Thread Lester Petrie
I have a NAS I wish to change the ssh port from 22 to something else. How do I go about selecting a good port number? Thanks. -- Lester Petrie -- ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le

Re: [FC8] ssh and CAC card???

2024-09-17 Thread Tim via users
Tim: >> Serious understatement... 17 years old Samuel Sieb: > It was a spam email. Did you see what was right at the end? I saw a link to what looks like a link for some memory, though didn't click it, and still haven't. That, in itself, doesn't jump out at me as spam, people do sometimes refe

Re: [FC8] ssh and CAC card???

2024-09-17 Thread Samuel Sieb
On 9/17/24 12:07 AM, Tim via users wrote: On Mon, 2024-09-16 at 20:25 +, Jack Hicks wrote: 7. Try Updating the System Fedora 8 is quite old, and some experimental features might not have been fully supported or stable at the time. Serious understatement... 17 years old It was a spam em

Re: [FC8] ssh and CAC card???

2024-09-17 Thread Tim via users
On Mon, 2024-09-16 at 20:25 +, Jack Hicks wrote: > 7. Try Updating the System > Fedora 8 is quite old, and some experimental features might not have > been fully supported or stable at the time. Serious understatement... 17 years old -- uname -rsvp Linux 3.10.0-1160.119.1.el7.x86_64 #1 S

[SOLVED] Re: can't ssh into fedora lxc-container

2024-08-26 Thread Mike Wright
setup. I also posted earlier about ssh accepting my key but kicking me out because PAM lacked some [preauth] thing. ssh'ing into the debian hosted fedora 40 proceeds without complaint. Sorry for the noise ( methinks the ubuntu box is about to ride off into the sunset. Alas, I kne

Re: Can't ssh into fedora container (lxc): redux

2024-08-25 Thread Jeffrey Walton
On Sun, Aug 25, 2024 at 11:30 PM Mike Wright wrote: > > Now that sshd is working as a service I tried to ssh in and got bounced > out. Trying again with ssh -v FED ( container's name ) yields: > > debug1: Server accepts key: /home/mike/... > > journalctl -xeu sshd show

Can't ssh into fedora container (lxc): redux

2024-08-25 Thread Mike Wright
Hi all, Now that sshd is working as a service I tried to ssh in and got bounced out. Trying again with ssh -v FED ( container's name ) yields: debug1: Server accepts key: /home/mike/... journalctl -xeu sshd shows: FED unix_chkpwd[881]: could not obtain user info (mike) FED sshd[735]:

can't ssh into fedora lxc-container

2024-08-25 Thread Mike Wright
Hi gurus, I've installed f40 as an lxc container named FED. Default image comes without an ssh server so I "dnf install openssh-server -y" followed by "systemctl start sshd". It fails. journalctl -xeu sshd shows this: "FED (sshd)[636]: sshd.service: Re

Re: Secondary SSH

2024-08-24 Thread Samuel Sieb
On 8/24/24 12:31 AM, Jeffrey Walton wrote: On Sat, Aug 24, 2024 at 3:24 AM Samuel Sieb wrote: On 8/23/24 3:17 PM, Dave Close wrote: Jeffrey Walton wrote: At this point, I would visit each machine and: mkdir -p ~/.ssh chown -R dclose:dclose ~/.ssh chmod -R o-rwx ~/.ssh That

Re: Secondary SSH

2024-08-24 Thread Jeffrey Walton
On Sat, Aug 24, 2024 at 3:24 AM Samuel Sieb wrote: > > On 8/23/24 3:17 PM, Dave Close wrote: > > Jeffrey Walton wrote: > > > >> At this point, I would visit each machine and: > >> > >>mkdir -p ~/.ssh > >>chown -R dclose:dclose ~/.s

Re: Secondary SSH

2024-08-24 Thread Samuel Sieb
On 8/23/24 3:17 PM, Dave Close wrote: Jeffrey Walton wrote: At this point, I would visit each machine and: mkdir -p ~/.ssh chown -R dclose:dclose ~/.ssh chmod -R o-rwx ~/.ssh That would be guaranteed to cause failure. For example, my private keys cannot have 0777 permissions! I

Re: Secondary SSH

2024-08-23 Thread Dave Close
I wrote: >I have several local machines that, while working, I frequently use ssh >to do something on a different machine. While on that second machine, >I may even use ssh to do something on a third machine. All of this >works exactly as it should. > >If I use JuiceSSH on m

Re: Secondary SSH

2024-08-23 Thread Dave Close
Jeffrey Walton wrote: >At this point, I would visit each machine and: > > mkdir -p ~/.ssh > chown -R dclose:dclose ~/.ssh > chmod -R o-rwx ~/.ssh That would be guaranteed to cause failure. For example, my private keys cannot have 0777 permissions! -- Dave Close, Com

Re: Secondary SSH

2024-08-23 Thread Jeffrey Walton
On Fri, Aug 23, 2024 at 5:44 PM Dave Close wrote: > > I have several local machines that, while working, I frequently use ssh > to do something on a different machine. While on that second machine, > I may even use ssh to do something on a third machine. All of this > works exact

Secondary SSH

2024-08-23 Thread Dave Close
I have several local machines that, while working, I frequently use ssh to do something on a different machine. While on that second machine, I may even use ssh to do something on a third machine. All of this works exactly as it should. If I use JuiceSSH on my Android phone to contact one of my

Re: Hotel wifi network - how to connect / ssh between 2 laptops

2024-03-22 Thread Tim via users
On Fri, 2024-03-22 at 11:45 -0500, Thomas Cameron wrote: > You will almost certainly not be able to connect between devices on a > commercial wifi network. They don't want folks to attack other machines > on the network. It would be a huge scandal if a hotel allowed a guest to > connect to other

Re: Hotel wifi network - how to connect / ssh between 2 laptops

2024-03-22 Thread Bill Oliver
8333cbcc Not something I could get around sitting in a hotel room. The solution I mentioned about using port 80 for ssh was something I used when I was at a conference in DC and the host only allowed http/https traffic to machines outside the building. I used it to ssh to a machine that was outsi

Re: Hotel wifi network - how to connect / ssh between 2 laptops

2024-03-22 Thread Joe Zeff
On 03/22/2024 12:02 PM, Bill Oliver wrote: I have, in the past, successfully gotten around firewalls that only allow http/https on tcp by setting the port for ssh to 80,8080,443 or 8443. And if I ever ran into one of those I'd be complaining loud and long and challenging their clai

Re: Hotel wifi network - how to connect / ssh between 2 laptops

2024-03-22 Thread Chris Adams
Once upon a time, Bill Oliver said: > On Fri, 2024-03-22 at 10:09 -0600, Sbob wrote: > > All > > > > > > I have 2 laptops I need to connect for testing / coding via ssh, if I > > connect each to the hotel wifi I cannot connect across laptops with > >

Re: Hotel wifi network - how to connect / ssh between 2 laptops

2024-03-22 Thread Bill Oliver
On Fri, 2024-03-22 at 10:09 -0600, Sbob wrote: > All > > > I have 2 laptops I need to connect for testing / coding via ssh, if I > connect each to the hotel wifi I cannot connect across laptops with > ssh, > If I grab a wifi router and connect it to the hotel wifi and use

Re: Hotel wifi network - how to connect / ssh between 2 laptops

2024-03-22 Thread Samuel Sieb
172.31.101.1 and the other with 172.31.101.2. Add them to your /etc/hosts file like: 172.31.101.1    laptop1 172.31.101.2    laptop2 Then each of them would have wifi access out to the Internet, and they'd be able to ssh into each other using "ssh laptop1" or "ssh laptop2" for

Re: Hotel wifi network - how to connect / ssh between 2 laptops

2024-03-22 Thread Thomas Cameron
On 3/22/24 12:24, bruce wrote: Or... You might talk with the front desk/data person. If a group came in for a meeting and wanted to do what you describe, they might have an additional solution for you to use! Might be worth checking out. good luck That's a great point, but in my experience,

Re: Hotel wifi network - how to connect / ssh between 2 laptops

2024-03-22 Thread bruce
11:09, Sbob wrote: > > All > > > > > > I have 2 laptops I need to connect for testing / coding via ssh, if I > > connect each to the hotel wifi I cannot connect across laptops with ssh, > > If I grab a wifi router and connect it to the hotel wifi an

Re: Hotel wifi network - how to connect / ssh between 2 laptops

2024-03-22 Thread Thomas Cameron
On 3/22/24 11:09, Sbob wrote: All I have 2 laptops I need to connect for testing / coding via ssh, if I connect each to the hotel wifi I cannot connect across laptops with ssh, If I grab a wifi router and connect it to the hotel wifi and use the router's wifi will this work? wou

Hotel wifi network - how to connect / ssh between 2 laptops

2024-03-22 Thread Sbob
All I have 2 laptops I need to connect for testing / coding via ssh, if I connect each to the hotel wifi I cannot connect across laptops with ssh, If I grab a wifi router and connect it to the hotel wifi and use the router's wifi will this work? would it also work with a simple

Re: port forwarding and RDP or ssh

2024-03-12 Thread Samuel Sieb
On 3/12/24 11:49, Alex wrote: However, even when launching gnome-terminal when none is currently running, it still launches on the remote system, not my desktop. You can try running "export GDK_BACKEND=x11" before running evolution. Setting that env variable causes evolution to not run at

Re: port forwarding and RDP or ssh

2024-03-12 Thread Ron Flory via users
On 3/11/24 12:45, Alex wrote: I now have his PC with me on my local network, and commands executed through ssh -X still display on his screen instead of mine.  From his gnome-terminal on my PC: [gary@fedora ~]$ echo $DISPLAY localhost:10.0 How do I set the display for commands executed

Re: port forwarding and RDP or ssh

2024-03-12 Thread Alex
Hi, > I now have his PC with me on my local network, and commands executed > > through ssh -X still display on his screen instead of mine. > > > > From his gnome-terminal on my PC: > > [gary@fedora ~]$ echo $DISPLAY > > localhost:10.0 > > > > H

Re: port forwarding and RDP or ssh

2024-03-12 Thread Samuel Sieb
On 3/11/24 12:45, Alex wrote: I now have his PC with me on my local network, and commands executed through ssh -X still display on his screen instead of mine. From his gnome-terminal on my PC: [gary@fedora ~]$ echo $DISPLAY localhost:10.0 How do I set the display for commands executed

Re: port forwarding and RDP or ssh

2024-03-12 Thread Alex
Hi, > I now have his PC with me on my local network, and commands executed > through ssh -X still display on his screen instead of mine. > > > > From his gnome-terminal on my PC: > > [gary@fedora ~]$ echo $DISPLAY > > localhost:10.0 > > > > How do I set

Re: port forwarding and RDP or ssh

2024-03-12 Thread Barry
> On 11 Mar 2024, at 19:46, Alex wrote: > > I now have his PC with me on my local network, and commands executed through > ssh -X still display on his screen instead of mine. > > From his gnome-terminal on my PC: > [gary@fedora ~]$ echo $DISPLAY > localhost:10.0 >

Re: port forwarding and RDP or ssh

2024-03-11 Thread Alex
Hi, > >> > $ ssh -X -i ~/.ssh/mykey-key.rsa -l gary remotehost -p 1024 >> > [gary@fedora ~]$ evolution >> > (evolution:3644): GLib-GIO-WARNING **: 09:41:05.182: Your application >> > did not unregister from D-Bus before destruction. Consider using >

Re: port forwarding and RDP or ssh

2024-03-10 Thread Samuel Sieb
On 3/10/24 09:23, Alex wrote: I believe Cinnamon is just a window manager on top of GNOME? It's not. It's independent from Gnome. >     My current preferred method is to use rustdesk.  There's an rpm >     available from the website.  I run my own server and relay for it, so

Re: port forwarding and RDP or ssh

2024-03-10 Thread Alex
g, then you just need the "-X" option to ssh. > > No port forwarding required (other than ssh to get in). Then you > have > > to run the application and it only displays on your screen (slowly). > > > > > > I forgot that the command-line I was using wa

Re: port forwarding and RDP or ssh

2024-03-10 Thread Samuel Sieb
need the "-X" option to ssh. No port forwarding required (other than ssh to get in).  Then you have to run the application and it only displays on your screen (slowly). I forgot that the command-line I was using was from a long time ago when I actually had tigervnc working pro

Re: port forwarding and RDP or ssh

2024-03-10 Thread Alex
Hi, > Hi, I have a fedora38 system on Optonline with port 1024 forwarded from > > the router to 1024 on the fedora38 system where ssh is listening. I'm > > currently using the following to connect: > > > > $ ssh -i ~/.ssh/mykey-key.rsa -L 5901:127.0.0.1:5901 > &

Re: port forwarding and RDP or ssh

2024-03-09 Thread Samuel Sieb
On 3/9/24 09:09, Alex wrote: Hi, I have a fedora38 system on Optonline with port 1024 forwarded from the router to 1024 on the fedora38 system where ssh is listening. I'm currently using the following to connect: $ ssh -i ~/.ssh/mykey-key.rsa -L 5901:127.0.0.1:5901 <http://127.0.0.1:

port forwarding and RDP or ssh

2024-03-09 Thread Alex
Hi, I have a fedora38 system on Optonline with port 1024 forwarded from the router to 1024 on the fedora38 system where ssh is listening. I'm currently using the following to connect: $ ssh -i ~/.ssh/mykey-key.rsa -L 5901:127.0.0.1:5901 -Y -l gary remotehost -p 1024 I'd like to be ab

Re: running auto apps on tgt srvr via ssh access

2024-02-02 Thread Cameron Simpson
On 02Feb2024 11:29, bruce wrote: But setting up ssh is no issue. My issue, I'm wondering how to "run" a cmd on srvr2 via ssh when I'm on srvr1. How is: ssh srvr2 the-command... not enough? I feel that I'm missing some larger context here. And a larger issue

Re: running auto apps on tgt srvr via ssh access

2024-02-02 Thread bruce
Hi Brian. Thanks! But setting up ssh is no issue. My issue, I'm wondering how to "run" a cmd on srvr2 via ssh when I'm on srvr1. And a larger issue, is this even the "right" way to handle testing "stuff" within Github? thanks. On Fri, Feb 2, 2024 at 1

Re: running auto apps on tgt srvr via ssh access

2024-02-02 Thread Brian Truter
I think this is what you are looking for, if I follow what you posted: https://unix.stackexchange.com/questions/23291/how-to-ssh-to-remote-server-using-a-private-key On Fri, Feb 2, 2024 at 11:02 AM bruce wrote: > Hi. > > Doing some research and thought I'd ask here as well. >

running auto apps on tgt srvr via ssh access

2024-02-02 Thread bruce
Hi. Doing some research and thought I'd ask here as well. A potential use case has a user fetching projects from "Github" and running tests with the project on the tgtTestServer The tgtTestServer can have the shell script to fetch/test the Github project. However, I'm wondering what might be sui

Re: F38 - ssh now having a password popup

2023-12-26 Thread Barry Scott
> On 26 Dec 2023, at 13:25, Robert Moskowitz wrote: > > $ SSH_ASKPASS= You have to unset the var not set it to the empty string. $ unset SSH_ASKPASS Barry -- ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to u

Re: F38 - ssh now having a password popup

2023-12-26 Thread Robert Moskowitz
On 12/26/23 08:25, Robert Moskowitz wrote: On 12/26/23 03:47, Barry wrote: On 26 Dec 2023, at 02:23, Robert Moskowitz wrote: When I just try the ssh inside I get a popup for my password. How do I turn this off so I get the old command prompt for the password? There is an env var

Re: F38 - ssh now having a password popup

2023-12-26 Thread Robert Moskowitz
On 12/26/23 03:47, Barry wrote: On 26 Dec 2023, at 02:23, Robert Moskowitz wrote: When I just try the ssh inside I get a popup for my password. How do I turn this off so I get the old command prompt for the password? There is an env var, SSH_ASKPASS, that points to the gui password

Re: F38 - ssh now having a password popup

2023-12-26 Thread Francis . Montagnac
;> did not help > You can also use the --password-file option. Beware: this only applies when connecting to an rsync daemon, not when using SSH. -- francis -- ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to u

Re: F38 - ssh now having a password popup

2023-12-26 Thread Patrick O'Callaghan
On Mon, 2023-12-25 at 22:51 -0500, Robert Moskowitz wrote: > > The rsync manpage has this suggestion: > > > > set environment variable RSYNC_PASSWORD to the password > > set RSYNC_PASSWORD = paswd > > did not help You can also use the --password-file option. poc --

Re: F38 - ssh now having a password popup

2023-12-26 Thread Barry
> On 26 Dec 2023, at 02:23, Robert Moskowitz wrote: > > When I just try the ssh inside > > I get a popup for my password. > > How do I turn this off so I get the old command prompt for the password? There is an env var, SSH_ASKPASS, that points to the gui password pr

Re: F38 - ssh now having a password popup

2023-12-25 Thread Tom Horsley
On Mon, 25 Dec 2023 22:51:39 -0500 Robert Moskowitz wrote: > did not help They keep changing what kinds of algorithms and keys are allowed to work because of security reasons. You said you just did an upgrade, so perhaps your ssh is now incompatible with the ssh server on the remote system.

Re: F38 - ssh now having a password popup

2023-12-25 Thread Robert Moskowitz
On 12/25/23 22:01, Mike Wright wrote: On 12/25/23 18:22, Robert Moskowitz wrote: I did a system upgrade last week and now the following is failing: $rsync -ah --stats -e "ssh -p 223 -4" /home/stuff/Daf/21-Bava_Kama/ inside.htt-consult.com:/media/WD3TB01/Archive/Videos/Daf14/21

Re: F38 - ssh now having a password popup

2023-12-25 Thread Robert Moskowitz
On 12/25/23 22:01, Mike Wright wrote: On 12/25/23 18:22, Robert Moskowitz wrote: I did a system upgrade last week and now the following is failing: $rsync -ah --stats -e "ssh -p 223 -4" /home/stuff/Daf/21-Bava_Kama/ inside.htt-consult.com:/media/WD3TB01/Archive/Videos/Daf14/21

Re: F38 - ssh now having a password popup

2023-12-25 Thread Mike Wright
On 12/25/23 18:22, Robert Moskowitz wrote: I did a system upgrade last week and now the following is failing: $rsync -ah --stats -e "ssh -p 223 -4" /home/stuff/Daf/21-Bava_Kama/ inside.htt-consult.com:/media/WD3TB01/Archive/Videos/Daf14/21-Bava_Kama/ Permission denied, please

F38 - ssh now having a password popup

2023-12-25 Thread Robert Moskowitz
I did a system upgrade last week and now the following is failing: $rsync -ah --stats -e "ssh -p 223 -4" /home/stuff/Daf/21-Bava_Kama/ inside.htt-consult.com:/media/WD3TB01/Archive/Videos/Daf14/21-Bava_Kama/ Permission denied, please try again. Permission denied, please tr

Re: ssh forced command in syslog?

2023-12-18 Thread Roberto Ragusa
On 12/10/23 16:14, Alex wrote: The contents of my /root/.ssh/authorized_keys for the command I want to execute is something like this: command="/usr/bin/rsync --server --sender -logDtprze.iLs --numeric-ids . /",no-port-forwarding,no-agent-forwarding,no-X11-forwarding,no-p

Re: ssh forced command in syslog?

2023-12-17 Thread Cameron Simpson
On 10Dec2023 10:14, Alex wrote: I'm trying to use the "command=" ability with ssh and rsync to restrict the commands that can be run with a passwordless ssh key. The problem is that I can't figure out the exact rsync that's being executed on the remote side. I recall

ssh access sshKey/password

2023-12-13 Thread bruce
Hi. I know.. list is really only for fedora! But I was hoping I might find someone who could point me in a direction to figure out what's going on. This is a digitalocean/ubuntu issue for setting up/testing SSH access. Since this is a test, I'm more than willing to grant root access

Re: ssh forced command in syslog?

2023-12-10 Thread Francis . Montagnac
Hi. On Sun, 10 Dec 2023 10:14:16 -0500 Alex wrote: > I'm trying to use the "command=" ability with ssh and rsync to restrict the > commands that can be run with a passwordless ssh key. The problem is that I > can't figure out the exact rsync that's being execu

ssh forced command in syslog?

2023-12-10 Thread Alex
Hi, I'm trying to use the "command=" ability with ssh and rsync to restrict the commands that can be run with a passwordless ssh key. The problem is that I can't figure out the exact rsync that's being executed on the remote side. I recall in the past being able to someho

Re: strange problem, may be related to ssh

2023-11-12 Thread fedora
Thanks for the clarification Samuel, On 12/11/2023 19.09, Samuel Sieb wrote: On 11/11/23 14:07, fed...@eyal.emu.id.au wrote: My SMTP server requires SSL/TLS security, and uploading files to the same site requires sftp. So both run over ssh. This is not correct.  SSL ≠ SSH.  They use similar

Re: strange problem, may be related to ssh

2023-11-12 Thread Samuel Sieb
On 11/11/23 14:07, fed...@eyal.emu.id.au wrote: My SMTP server requires SSL/TLS security, and uploading files to the same site requires sftp. So both run over ssh. This is not correct. SSL ≠ SSH. They use similar encryption, but they are different protocols and not using the same port

Re: strange problem, may be related to ssh [resolved]

2023-11-11 Thread fedora
sconfig/network-scripts/ifcfg-eth1 eyal I have an open case with my ISP who are in charge of my modem etc. and I think they are involved in the problem. Thanks everyone Eyal On Sat, Nov 11, 2023 at 4:08 PM wrote: Since the middle of the night on 7/Nov, uploading files with ssh is proble

Re: strange problem, may be related to ssh [resolved]

2023-11-11 Thread fedora
ding files with ssh is problematic. My SMTP server requires SSL/TLS security, and uploading files to the same site requires sftp. So both run over ssh. I have a few scripts that run from cron and send me mail when required. They also upload some files for other people and for me when I am away f

Re: strange problem, may be related to ssh

2023-11-11 Thread Jeffrey Walton
On Sat, Nov 11, 2023 at 5:08 PM wrote: > > Since the middle of the night on 7/Nov, uploading files with ssh is > problematic. > > My SMTP server requires SSL/TLS security, and uploading files to the same > site requires sftp. > So both run over ssh. > > I have a few

Re: strange problem, may be related to ssh

2023-11-11 Thread Roger Heflin
search for it, but it is going to be under 1500). Lower your main host interface's MTU by say 4 and retest, if that "fixes" it that is a sign that this is the issue. On Sat, Nov 11, 2023 at 4:08 PM wrote: > > Since the middle of the night on 7/Nov, uploading files with

strange problem, may be related to ssh

2023-11-11 Thread fedora
Since the middle of the night on 7/Nov, uploading files with ssh is problematic. My SMTP server requires SSL/TLS security, and uploading files to the same site requires sftp. So both run over ssh. I have a few scripts that run from cron and send me mail when required. They also upload some

Re: ssh new cloud instance / new user

2023-10-30 Thread bruce
I prefer not to allow root to login using passwd or ssh On Mon, Oct 30, 2023 at 11:19 PM Samuel Sieb wrote: > > On 10/30/23 13:57, bruce wrote: > > Hi. > > > > Lost my old notes. Laying out how to setup test cloud instance to be > > able to have testUserA and roo

Re: ssh new cloud instance / new user

2023-10-30 Thread Samuel Sieb
On 10/30/23 13:57, bruce wrote: Hi. Lost my old notes. Laying out how to setup test cloud instance to be able to have testUserA and root testUserA will login/access via ssh testUSerA will create private/pub key, with /home/testUserA/.ssh on the CloudInstance (D1) ssh will allow testUserA ssh

ssh new cloud instance / new user

2023-10-30 Thread bruce
Hi. Lost my old notes. Laying out how to setup test cloud instance to be able to have testUserA and root testUserA will login/access via ssh testUSerA will create private/pub key, with /home/testUserA/.ssh on the CloudInstance (D1) ssh will allow testUserA ssh will not allow root access root

Re: ssh connection and selinux

2023-08-18 Thread Cameron Simpson
On 14Aug2023 09:18, François Patte wrote: Here is the part I get with ssh -v: debug1: Next authentication method: publickey debug1: Offering public key: /home/patte/.ssh/id_rsa RSA SHA256: ** I have a server accepts line after this: debug1: Next authentication

Re: ssh connection and selinux

2023-08-14 Thread François Patte
Le 2023-08-14 00:04, Cameron Simpson a écrit : On 13Aug2023 23:23, François Patte wrote: Since I upgraded to f38 it is impossible to connect to a machine using ssh rsa-key the file .ssh/authorized_keys has not change, but any remote connection to this machine asks for a password

Re: ssh connection and selinux

2023-08-13 Thread Cameron Simpson
On 13Aug2023 23:23, François Patte wrote: Since I upgraded to f38 it is impossible to connect to a machine using ssh rsa-key the file .ssh/authorized_keys has not change, but any remote connection to this machine asks for a password Is there something to change with selinux

Re: ssh connection and selinux

2023-08-13 Thread Garry T. Williams
On Sunday, August 13, 2023 5:23:51 PM EDT François Patte wrote: > Since I upgraded to f38 it is impossible to connect to a machine using > ssh rsa-key The RSA algorithm is considered too weak to be safe and has been disabled in the ssh program. The work-around if you cannot convert t

Re: ssh connection and selinux

2023-08-13 Thread John K
Bonsoir François, What does 'ssh -v' report when you attempt to connect to this machine? Depending on where you upgraded from, you may now have also upgraded your openssh to the point where rsa+sha1 is no longer supported: https://security.stackexchange.com/questions/226131/openss

ssh connection and selinux

2023-08-13 Thread François Patte
Bonjour, Since I upgraded to f38 it is impossible to connect to a machine using ssh rsa-key the file .ssh/authorized_keys has not change, but any remote connection to this machine asks for a password Is there something to change with selinux? Thank you. -- François Patte UFR de

Re: Keeping ssh sessions alive

2023-05-10 Thread Doug H.
On Wed, May 10, 2023, at 2:38 PM, Sam Varshavchik wrote: > I switched wifi routers. The new model, a Linksys WRT3200ACM kills my idle > SSH sessions. I found my old "hold" script, maybe it would work: #!/bin/sh # # For holding open a connection that the sonic wall wants to

Re: Keeping ssh sessions alive

2023-05-10 Thread Tom Horsley
On Wed, 10 May 2023 17:38:43 -0400 Sam Varshavchik wrote: > Anyone have any tips for defeating this rudeness, short of a brute force > approach. I don't know if this counts as brute force, but you could run an ssh-keyscan command on cron. That sends real data back and forth to ser

Keeping ssh sessions alive

2023-05-10 Thread Sam Varshavchik
I switched wifi routers. The new model, a Linksys WRT3200ACM kills my idle SSH sessions. I have /etc/ssh/sshd_config.d/01-local.conf that has a "ClientAliveInterval" setting. With my previous router setting ClientAliveInterval to 60 seconds was enough to keep it from killing m

Re: SSH problem

2023-01-11 Thread Veli-Pekka Kestilä
On 10.1.2023 20.25, Joe Wulf via users wrote: Additional troubleshooting should include including '-' for the ssh command invocation. This is the error, when trying to run XTerm after second ssh connection: debug2: X11 auth data does not match fake data. X11 connection rejected

Re: SSH problem

2023-01-10 Thread Cameron Simpson
use a persistent ssh connection, reusing the X11 token from before. BTW, an incantation of: ssh host 'x11-client &' has some scope for dropping the ssh before the client hooks into X11 (thus keeping things open) _if_ the client closes its own output before connecting to X11.

Re: SSH problem

2023-01-10 Thread Joe Wulf via users
Additional troubleshooting should include including '-' for the ssh command invocation. On Tuesday, January 10, 2023 at 12:23:51 PM EST, Veli-Pekka Kestilä wrote: On 10.1.2023 14.28, Frank Elsner via users wrote: > Hello, > > today I faced the following probl

Re: SSH problem

2023-01-10 Thread Veli-Pekka Kestilä
On 10.1.2023 14.28, Frank Elsner via users wrote: Hello, today I faced the following problem: Some of my panel entries do not work. Investigation on the command line level shows that every second ssh call doesn't work. But why? [frank@siffux ~]$ ssh christo "mate-terminal&"

SSH problem

2023-01-10 Thread Frank Elsner via users
Hello, today I faced the following problem: Some of my panel entries do not work. Investigation on the command line level shows that every second ssh call doesn't work. But why? [frank@siffux ~]$ ssh christo "mate-terminal&" & [1] 15817 This command brings up a windo

Re: [FC8] ssh and CAC card???

2022-07-12 Thread Allhdd Coumputer
This link can help you https://www.allhdd.com/accessories-kit/riser-card/ Your smart card is not configured correctly. You should use Athena USB Reading. In this way you can use firefox. Regards James ___ users mailing list -- users@lists.fedoraproject

Re: SSH, PuTTy and no authentication methods available

2022-06-11 Thread Francis . Montagnac
Hi. On Sat, 11 Jun 2022 15:48:56 -0400 Jeffrey Ross via users wrote: > /usr/share/crypto-policies/DEFAULT/opensshserver.txt and add ^ssh-rsa at > the beginning of the PubkeyAcceptedAlgorithms list will allow users to > login again, however anytime there is an update to the crypto

Re: SSH, PuTTy and no authentication methods available

2022-06-11 Thread Tim via users
On Sat, 2022-06-11 at 15:48 -0400, Jeffrey Ross via users wrote: > I keep running into an issue with PuTTy users logging into the > system (Fedora 35), I found that if I edit: > > /usr/share/crypto-policies/DEFAULT/opensshserver.txt and add ^ssh-rsa > at the b

SSH, PuTTy and no authentication methods available

2022-06-11 Thread Jeffrey Ross via users
I keep running into an issue with PuTTy users logging into the system (Fedora 35), I found that if I edit: /usr/share/crypto-policies/DEFAULT/opensshserver.txt and add ^ssh-rsa at the beginning of the PubkeyAcceptedAlgorithms list will allow users to login again, however anytime there is an

Re: ssh infested by systemd.resolved

2022-05-25 Thread Lars E. Pettersson
On 2022-04-27 17:34:17-0400, Jonathan Billings wrote: > On Apr 27, 2022, at 07:25, Justin Moore > In general, the way I suggest debugging these kinds of hangs at > shutdown/reboot are to run: > > journalctl --boot=-1 --reverse One thing to note. I got bitten by the following quite recently: [la

  1   2   3   4   5   6   7   8   9   10   >