Re: SSH with Public Key Authentication (Was: Re: Attention: Giorgos Keramidas (Was: CVS Import Permissions))

2006-02-01 Thread Matthew Seaman
david bryce wrote: On Thu, 2 Feb 2006 02:38:29 +0200, Giorgos Keramidas [EMAIL PROTECTED] said: On 2006-02-02 11:27, david bryce [EMAIL PROTECTED] wrote: On Thu, 2 Feb 2006 01:48:37 +0200, Giorgos Keramidas I have tried using SSH in the past, and got stuck setting up the public key login

Re: SSH problem

2006-01-09 Thread Leonidas Tsampros
On Mon, Jan 09, 2006 at 12:32:00AM -0800, Robert Stevenson wrote: I'm able to log-in to my FreeBSD box using SSH just a few days ago, but now I can't. Whenever I try I only get to enter my username and the password prompt does not appear anymore. It seems authentication stops after I enter my

Re: SSH problem

2006-01-09 Thread Garrett Cooper
On Jan 9, 2006, at 1:57 AM, Leonidas Tsampros wrote: On Mon, Jan 09, 2006 at 12:32:00AM -0800, Robert Stevenson wrote: I'm able to log-in to my FreeBSD box using SSH just a few days ago, but now I can't. Whenever I try I only get to enter my username and the password prompt does not appear

Re: ssh -X yields Error: Can't open display:

2005-12-21 Thread Danny Howard
Ahhh ... 10:22 [EMAIL PROTECTED] ~$ ssh -v -X -i ~/.ssh/mito.key castor [...] debug1: Requesting X11 forwarding with authentication spoofing. debug1: Remote: No xauth program; cannot forward with spoofing. :) 0-10:25 [EMAIL PROTECTED] /usr/ports# find /usr/ports -name pkg-plist | xargs grep

Re: ssh -X yields Error: Can't open display:

2005-12-21 Thread Danny Howard
On Wed, Dec 21, 2005 at 10:32:39AM -0800, Danny Howard wrote: 1-10:29 [EMAIL PROTECTED] /usr/ports# pkg_add -r xorg-clients Error: FTP Unable to get ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-5.3-release/Latest/xorg-clients.tbz: File unavailable (e.g., file not found, no access)

Re: ssh -X yields Error: Can't open display:

2005-12-21 Thread Kent Stewart
On Wednesday 21 December 2005 11:01 am, Danny Howard wrote: On Wed, Dec 21, 2005 at 10:32:39AM -0800, Danny Howard wrote: 1-10:29 [EMAIL PROTECTED] /usr/ports# pkg_add -r xorg-clients Error: FTP Unable to get ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-5.3-release/L

Re: SSH on FreeBSD 4.10

2005-12-09 Thread P.U.Kruppa
On Fri, 9 Dec 2005, mohammad babaei wrote: Hi, I'm using FreeBSD 4.10 and at the moment i cannot connect to server by SSH (puTTY) (When i asked for Username i enter it, nothing happens...) so what's the problem? Perhaps you tried to login as root? This won't work per default. Regards, Uli.

Re: SSH on FreeBSD 4.10

2005-12-09 Thread Babak Farrokhi
Hi, Your box is trying to do reverse DNS lookup and waits until DNS query times out. You should disable DNS lookup in /etc/ssh/sshd_config. -- Babak Farrokhi [EMAIL PROTECTED] On Fri, 9 Dec 2005 19:47:33 +0330, mohammad babaei [EMAIL PROTECTED] wrote: Hi, I'm using FreeBSD 4.10 and at the

Re: SSH no passwd auth doesn't work

2005-12-06 Thread Kris Kennaway
On Tue, Dec 06, 2005 at 04:43:40PM -0500, Ugo Bellavance wrote: Hi, I'm trying to disallow password auth on ssh (freebsd 5.4). The only lines that contain Password are these: PasswordAuthentication no #PasswordAuthentication yes #PermitEmptyPasswords no #KerberosOrLocalPasswd

Re: SSH no passwd auth doesn't work

2005-12-06 Thread Bob Johnson
On 12/6/05, Ugo Bellavance [EMAIL PROTECTED] wrote: Hi, I'm trying to disallow password auth on ssh (freebsd 5.4). [...] Anyone has an idea? Thanks, Disable PAM authentication: ChallengeResponseAuthentication no This will also make PermitRootLogin work as you would expect. - Bob

Re: SSH no passwd auth doesn't work

2005-12-06 Thread Ugo Bellavance
Kris Kennaway wrote: On Tue, Dec 06, 2005 at 04:43:40PM -0500, Ugo Bellavance wrote: Hi, I'm trying to disallow password auth on ssh (freebsd 5.4). The only lines that contain Password are these: PasswordAuthentication no #PasswordAuthentication yes #PermitEmptyPasswords no

Re: ssh troubles with 6.0-STABLE

2005-11-29 Thread Philippe Pegon
Odhiambo Washington wrote: * On 29/11/05 00:21 +0300, Wash wrote: I use shellguard as my ssh client on my Windows box. However I see a problem with 6.0-RELEASE, in a pattern whose solution I can't find even in google. On my machine which I have just updated from 5.4-STABLE - 6.0-STABLE, when

Re: ssh troubles with 6.0-STABLE

2005-11-28 Thread Odhiambo Washington
* On 29/11/05 00:21 +0300, Wash wrote: I use shellguard as my ssh client on my Windows box. However I see a problem with 6.0-RELEASE, in a pattern whose solution I can't find even in google. On my machine which I have just updated from 5.4-STABLE - 6.0-STABLE, when I try to connect with

Re: SSH X11 forwarding fail

2005-11-07 Thread Olivier Nicole
I am SSH'ing to a FreeBSD machine and enable X11 forwarding. Everything was working fine untill I rebooted this morning. Since then: # xterm X Error of failed request: BadAtom (invalid Atom parameter) Bad me to reply to my own question... I need to add ForwardX11Trusted yes in SSH

Re: SSH X11 forwarding fail

2005-11-07 Thread Mac Mason
On Tue, Nov 08, 2005 at 01:03:39PM +0700, Olivier Nicole wrote: I need to add ForwardX11Trusted yes in SSH config (/etc/ssh/ssh_config) of the SSH client. Or connect with: % ssh -Y stuff --Mac pgpx8h6BvEfcI.pgp Description: PGP signature

Re: ssh X forwarding problem

2005-10-18 Thread Garrett Cooper
Try uncommenting, #X11Forwarding yes #X11UseLocalhost yes at the very least and then restart the SSH server, if you have root access on it. -Garrett ___ freebsd-questions@freebsd.org mailing list

Re: ssh X forwarding problem

2005-10-18 Thread John Oxley
On Tue, Oct 18, 2005 at 12:24:56AM -0700, Garrett Cooper wrote: Try uncommenting, #X11Forwarding yes #X11UseLocalhost yes Done that, to no avail. -- John Oxley Systems Administrator Yo!Africa E-Mail: john at yoafrica.com Tel: +263 4 858404 echo

Re: ssh X forwarding problem

2005-10-18 Thread N Deepak
On Tue, Oct 18, 2005 at 09:11:32AM +0200, John Oxley wrote: I have two machines, cortizone and morphine. On cortizone if I ssh into the box I can run X programs just fine (like eximon). On morphine, I cannot get X forwarding going. What exactly is the error message you see? Try ssh -Y

Re: ssh X forwarding problem

2005-10-18 Thread N Deepak
On Tue, Oct 18, 2005 at 01:31:35AM -0700, N Deepak wrote: On Tue, Oct 18, 2005 at 09:11:32AM +0200, John Oxley wrote: I have two machines, cortizone and morphine. On cortizone if I ssh into the box I can run X programs just fine (like eximon). On morphine, I cannot get X forwarding going.

Re: ssh X forwarding problem [FIXED]

2005-10-18 Thread John Oxley
On Tue, Oct 18, 2005 at 01:34:39AM -0700, N Deepak wrote: On Tue, Oct 18, 2005 at 01:31:35AM -0700, N Deepak wrote: On Tue, Oct 18, 2005 at 09:11:32AM +0200, John Oxley wrote: I have two machines, cortizone and morphine. On cortizone if I ssh into the box I can run X programs just fine

Re: SSH Port Forwarding Specific IP

2005-10-14 Thread Lowell Gilbert
John Do [EMAIL PROTECTED] writes: If you have a FreeBSD computer with multiple IP addresses and you want an outside client to tunnel how can you force the tunnel to use a certain IP? Isn't the -b option for exactly that? ___

Re: ssh segfault

2005-09-25 Thread Chris
On 21/09/05, Noah [EMAIL PROTECTED] wrote: Hi there, I just upgraded my SSL crypto library to 0.9.8 and ssh to other machines is creating a core dump. Is there an appropriate mail list for these types of issues? how might I troubleshoot this issue? also how might I return to teh

Re: SSH times out - Server unexpectedly closed network connection

2005-08-31 Thread Will Maier
On Wed, Aug 31, 2005 at 03:33:27PM -0400, Robert G. wrote: SSH doesn't appear to be working on my remote server. I can connect fine, and am prompted with login as: with Putty, but when I enter my username it sits and hangs there for about a minute before a message comes up that says Server

Re: SSH times out - Server unexpectedly closed network connection

2005-08-31 Thread David Kelly
On Wed, Aug 31, 2005 at 03:33:27PM -0400, Robert G. wrote: SSH doesn't appear to be working on my remote server. I can connect fine, and am prompted with login as: with Putty, but when I enter my username it sits and hangs there for about a minute before a message comes up that says Server

Re: SSH not working for particular user

2005-08-06 Thread Francisco Reyes
On Sat, 6 Aug 2005, The WRS wrote: Thanks for the feedback Check /var/log/auth.log and perhaps sshd[28883]: error: PAM: authentication error for fran from my machine /var/log/messages for hints on why Same error on that file. /etc/hosts.allow may be the culprit The machines were

Re: SSH not working for particular user

2005-08-06 Thread Francisco Reyes
On Sat, 6 Aug 2005, The WRS wrote: Hmm, are the password fields in /etc/master.passwd using the same hash type? They should ALL either start with $1 - md5 $2 - blowfish They are all the same $1 ___ freebsd-questions@freebsd.org mailing list

RE: ssh over a very bad http proxy :(

2005-07-26 Thread Petersen
Lei Sun [EMAIL PROTECTED] wrote: Hi I spent almost entire week, customizing my freebsd server at home, and I would like to access it from my work place. But it doesn't seems to be possible without making http tunnels through an authenticated proxy server. I tried to use http-tunnel, it

Re: ssh over a very bad http proxy :(

2005-07-25 Thread estover
Hi I spent almost entire week, customizing my freebsd server at home, and I would like to access it from my work place. But it doesn't seems to be possible without making http tunnels through an authenticated proxy server. I tried to use http-tunnel, it doesn't support the authenticated

Re: SSH tunnelling

2005-07-21 Thread Hornet
On 7/21/05, C Burchell [EMAIL PROTECTED] wrote: I would like to use a FreeBSD 5.3 RELEASE machine to perform data tunnelling from a remote location. If anyone on the list is famliiar with secure-tunnel.com - I'm trying to create something similar. I have a FreeBSD server colocated in a

Re: SSH

2005-07-13 Thread Garrett Cooper
Andrew Budiwaluyo wrote: I can ssh (and access http) to my server from the internet, but not from my internal network. if i turn off the firewall it still won't work so i think it's no from ipf.rules. Help! If I ssh from an internal machine, I get the login prompt, but after typing a

Re: SSH

2005-07-13 Thread Ken Ebling
On Jul 13, 2005, at 6:50 AM, Andrew Budiwaluyo wrote: I can ssh (and access http) to my server from the internet, but not from my internal network. if i turn off the firewall it still won't work so i think it's no from ipf.rules. Help! If I ssh from an internal machine, I get the login

Re: SSH

2005-07-13 Thread Glenn Dawson
At 03:50 AM 7/13/2005, Andrew Budiwaluyo wrote: I can ssh (and access http) to my server from the internet, but not from my internal network. if i turn off the firewall it still won't work so i think it's no from ipf.rules. Help! If I ssh from an internal machine, I get the login prompt, but

Re: SSH and gigabit NICs

2005-07-10 Thread Alex Zbyslaw
Gustavo De Nardin wrote: On 07/07/05, Alex Zbyslaw [EMAIL PROTECTED] wrote: Does anyone have a clue what might be going on? Dunno, but you might take a look at /usr/ports/security/hpn-ssh/: Thanks for the tip. Will have a look as soon as I get the time to play again :-( Does

Re: SSH and gigabit NICs

2005-07-10 Thread Alex Zbyslaw
Gustavo De Nardin wrote: On 07/07/05, Alex Zbyslaw [EMAIL PROTECTED] wrote: Does anyone have a clue what might be going on? Dunno, but you might take a look at /usr/ports/security/hpn-ssh/: WWW: http://www.psc.edu/networking/projects/hpn-ssh/ Actually, this also seems to add

Re: SSH and gigabit NICs

2005-07-08 Thread Alex Zbyslaw
Deyan Dyankov wrote: I'm not sure that this is the problem, but ..keep in mind, that ssh encrypts the data and ftp doesn't. The delay might be actually the time for encryption, right? Yes, this is a possibility, and I'll revisit it tonight. I thought I'd looked at the CPU usage during

Re: SSH and gigabit NICs

2005-07-08 Thread Gustavo De Nardin
On 08/07/05, Alex Zbyslaw [EMAIL PROTECTED] wrote: Unfortunately there seems to be no way to turn off the encryption for SSH, which would be the easiest test. Well, looking at /usr/src/crypto/openssh/cipher.c, there is a none in struct Cipher. But specifying 'none' in Ciphers in sshd_config, I

Re: SSH and gigabit NICs

2005-07-08 Thread Gustavo De Nardin
On 07/07/05, Alex Zbyslaw [EMAIL PROTECTED] wrote: Does anyone have a clue what might be going on? Dunno, but you might take a look at /usr/ports/security/hpn-ssh/: --- pkg-descr --- High Performance Enabled SSH/SCP from the Pittsburgh Supercomputing Center hpn-ssh is a version of OpenSSH

Re: SSH

2005-06-21 Thread Daniel Gerzo
Hello Jean-Paul, Tuesday, June 21, 2005, 5:49:49 PM, you thoughtfully wrote the following: Hi everyone, I downloaded Putty to ssh into my freebsd box This is what I see on the screen SSH-2.0-OpenSSH_3.8.1p1 FreeBSD-20040419 are you sure, you're using ssh protocol, not telnet? I'm pretty

RE: SSH

2005-06-21 Thread Jean-Paul Natola
Port 22 is it not? -Original Message- From: Daniel Gerzo [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 21, 2005 11:54 AM To: Jean-Paul Natola Cc: freebsd-questions@freebsd.org Subject: Re: SSH Hello Jean-Paul, Tuesday, June 21, 2005, 5:49:49 PM, you thoughtfully wrote the following

Re: SSH

2005-06-21 Thread Danny
On 6/21/05, Jean-Paul Natola [EMAIL PROTECTED] wrote: Hi everyone, I downloaded Putty to ssh into my freebsd box This is what I see on the screen SSH-2.0-OpenSSH_3.8.1p1 FreeBSD-20040419 And the minute I click enter the screen disappears,,, I checked and SSH daemon IS running,

Re: SSH

2005-06-21 Thread Michael W. Oliver
[please don't top-post] On 2005-06-21T12:09:57-0400, Jean-Paul Natola wrote: -Original Message- From: Daniel Gerzo [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 21, 2005 11:54 AM To: Jean-Paul Natola Cc: freebsd-questions@freebsd.org Subject: Re: SSH Tuesday, June 21, 2005, 5:49

RE: SSH --Fixed

2005-06-21 Thread Jean-Paul Natola
Sorry folks, I didn't realize I was using Puttytel now I Launched Putty All is well -Original Message- From: John Larson [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 21, 2005 4:07 PM To: Jean-Paul Natola Subject: Re: SSH can you ping your freebsd from xp. john larson

Re: ssh delays 40 seconds (revisited)

2005-06-11 Thread Robert Marella
luke wrote: also, you might want to look into the UseDNS option in the sshd_config file. this will cause the server to not perform dns lookups on connecting hosts. Curious and more curious. I updated one of my systems to 5.4 p2 today and just for grins I changed the UseDNS option back to

Re: ssh delays 40 seconds (revisited)

2005-06-11 Thread Kevin Kinsey
Robert Marella wrote: luke wrote: also, you might want to look into the UseDNS option in the sshd_config file. this will cause the server to not perform dns lookups on connecting hosts. Curious and more curious. I updated one of my systems to 5.4 p2 today and just for grins I changed the

Re: ssh delays 40 seconds (revisited)

2005-06-11 Thread Robert Marella
Kevin Kinsey wrote: Robert Marella wrote: luke wrote: also, you might want to look into the UseDNS option in the sshd_config file. this will cause the server to not perform dns lookups on connecting hosts. Curious and more curious. I updated one of my systems to 5.4 p2 today and just for

Re: SSH, SSL and DNS headaches

2005-06-06 Thread Duane Winner
Well, it's a little comforting to know that it's not just me...and yup, that's about when it started for me: around noon (EST) on Friday 5/3. Please post if you come up with anything. I'm also trying to cross-post to [EMAIL PROTECTED] Cheers, DW John Brooks wrote: I am having a similar

Re: ssh delays 40 seconds

2005-06-06 Thread luke
also, you might want to look into the UseDNS option in the sshd_config file. this will cause the server to not perform dns lookups on connecting hosts. ___ freebsd-questions@freebsd.org mailing list

Re: ssh delays 40 seconds (SOLVED???)

2005-06-06 Thread Robert Marella
luke wrote: also, you might want to look into the UseDNS option in the sshd_config file. this will cause the server to not perform dns lookups on connecting hosts. Luke Okay, that takes care of the delay. I had to change it to no on all boxes that I ssh into. Does this have any negative

Re: ssh delays 40 seconds (SOLVED???)

2005-06-06 Thread Robert Marella
Resending because I did not see it come in ti -questions and I keep having mail bounced sending to Jonathan Chen [EMAIL PROTECTED]. luke wrote: also, you might want to look into the UseDNS option in the sshd_config file. this will cause the server to not perform dns lookups on connecting

Re: ssh delays 40 seconds (SOLVED???)

2005-06-06 Thread Kevin Kinsey
Robert Marella wrote: luke wrote: also, you might want to look into the UseDNS option in the sshd_config file. this will cause the server to not perform dns lookups on connecting hosts. Did something change with 5.4? I don't think so; I've had the problem appear a long time ago from

Re: ssh delays 40 seconds (SOLVED???)

2005-06-06 Thread Robert Marella
Kevin Kinsey wrote: Robert Marella wrote: luke wrote: also, you might want to look into the UseDNS option in the sshd_config file. this will cause the server to not perform dns lookups on connecting hosts. Did something change with 5.4? I don't think so; I've had the problem appear a

Re: ssh delays 40 seconds (SOLVED???)

2005-06-06 Thread Duane Winner
I want to thank everyone else for responding also. The consensus was that I need DNS/named working on my gateway/firewall so I will be reading and studying to have that working in the near future. This is what I ended up having to do today...I tried to do what you did (set 'UseDNS no'

Re: ssh delays 40 seconds

2005-06-05 Thread Phusion
I've noticed this same thing on one of the machines I've built in the last week. The machine is running FreeBSD 5.4-STABLE with OpenSSH 4.0p1. The delay is probably about 30 seconds. Also, the machine isn't being used by anyone at the time. This happens when connecting from one local machine to

RE: ssh delays 40 seconds

2005-06-05 Thread Richard J. Valenta
] [mailto:[EMAIL PROTECTED] On Behalf Of Phusion Sent: Sunday, June 05, 2005 6:11 PM To: Robert Marella Cc: freebsd-questions@freebsd.org Subject: Re: ssh delays 40 seconds I've noticed this same thing on one of the machines I've built in the last week. The machine is running FreeBSD 5.4-STABLE

RE: ssh delays 40 seconds

2005-06-05 Thread Robert Huff
Richard J. Valenta writes: I had this problem in the past, and it was due to DNS problems where my IP from the client machine was unable to be resolved... but I think it took longer than 40 seconds. I mentioned this in this list before, a search of the list may help. Affirmed

Re: ssh delays 40 seconds

2005-06-05 Thread Robert Marella
Robert Huff wrote: Richard J. Valenta writes: I had this problem in the past, and it was due to DNS problems where my IP from the client machine was unable to be resolved... but I think it took longer than 40 seconds. I mentioned this in this list before, a search of the list may help.

Re: ssh delays 40 seconds

2005-06-05 Thread Jonathan Chen
On Sun, Jun 05, 2005 at 03:25:08PM -1000, Robert Marella wrote: Robert Huff wrote: Richard J. Valenta writes: I had this problem in the past, and it was due to DNS problems where my IP from the client machine was unable to be resolved... but I think it took longer than 40 seconds. I

Re: ssh delays 40 seconds

2005-06-05 Thread Robert Marella
Jonathan Chen wrote: On Sun, Jun 05, 2005 at 03:25:08PM -1000, Robert Marella wrote: Robert Huff wrote: Richard J. Valenta writes: I had this problem in the past, and it was due to DNS problems where my IP from the client machine was unable to be resolved... but I think it took longer

Re: ssh delays 40 seconds

2005-06-05 Thread Jonathan Chen
On Sun, Jun 05, 2005 at 04:49:26PM -1000, Robert Marella wrote: Jonathan Chen wrote: [...] It's not the forward case that's the problem. The sshd daemon on the server side attempts to find out where the connection is from by doing a reverse-lookup. If the incoming IP hasn't got a DNS entry,

Re: ssh delays 40 seconds

2005-06-05 Thread Robert Marella
Jonathan Chen wrote: On Sun, Jun 05, 2005 at 04:49:26PM -1000, Robert Marella wrote: Jonathan Chen wrote: [...] It's not the forward case that's the problem. The sshd daemon on the server side attempts to find out where the connection is from by doing a reverse-lookup. If the incoming IP

Re: ssh delays 40 seconds

2005-06-05 Thread Kevin Kinsey
Robert Marella wrote: Jonathan Chen wrote: On Sun, Jun 05, 2005 at 04:49:26PM -1000, Robert Marella wrote: Jonathan Chen wrote: [...] It's not the forward case that's the problem. The sshd daemon on the server side attempts to find out where the connection is from by doing a

Re: ssh autehntication question

2005-05-25 Thread [EMAIL PROTECTED]
On Wed, 25 May 2005 08:59:46 -0700 Philip Wege [EMAIL PROTECTED] wrote: Configured sshd for publickeyauth,port 22 and protocol 2 connections. When ever a ssh connection is attempted it says : fatal : timeout before authentication. Server on local network. sshd pid is running also. your

Re: ssh to new ip...

2005-05-17 Thread Tony Shadwick
Hmm...from home, visit http://www.whatismyip.com Go to work (or whatever the remote site is) and nmap that ip address ssh open? You could also pay a visit to http://www.dyndns.org, set up an account (it's free) and set a client on your freebsd box to update the ip address as it changes to make

Re: ssh to new ip...

2005-05-17 Thread Roland Smith
On Tue, May 17, 2005 at 04:13:47PM -0500, Bagus wrote: Hi, I'm moving my new freebsd 5.3 box to a new static ip address and I'm worried that once I put it at the isp, I won't be able to ssh to it or anything. Right now it's still at home and has dhcp. I'm not able to ssh from my windoze

Re: ssh to new ip...

2005-05-17 Thread Tomas Quintero
Hi, I'm moving my new freebsd 5.3 box to a new static ip address and I'm worried that once I put it at the isp, I won't be able to ssh to it or anything. Right now it's still at home and has dhcp. I'm not able to ssh from my windoze box over to it thru my router. I'm getting a connection

Re: ssh terminates connection

2005-04-18 Thread Lowell Gilbert
Dino Vliet [EMAIL PROTECTED] writes: Hi all, when using ssh I encounter the following situation after a short moment of inactivity: write failed: permission denied Then I'm logged out and have to re-login. The problem is anoying because whenever I let postgresql for instance start a

Re: ssh dies

2005-04-13 Thread John Davis
Robert Storey wrote: Dear All, An interesting and disturbing problem recently appeared on our server which is running FBSD 5.3. Rather suddenly, all users found themselves locked out because ssh stopped working. We had to send an email to tech support at our hosting service (Netsonic). They said

Re: ssh key fingerprints

2005-04-04 Thread Svein Halvor Halvorsen
* Erik Nørgaard [2005-04-04 14:02 +0200] How do I see the fingerprints of my ssh keys, both user and host keys? Excerpt from man ssh-keygen(1) SYNOPSIS ssh-keygen -l [-f input_keyfile] -l Show fingerprint of specified public key file. Private RSA1 keys are also

Re: ssh lockout after # of failed attempts

2005-04-01 Thread Kris Kennaway
On Fri, Apr 01, 2005 at 01:12:22PM -0500, Super Daemon wrote: is there a way to configure ssh lockout after # of failed attempts on server running freebsd 5.3Release??? i would like to be able to lock by account or IP address for a certain time period after a certain number of failed ssh login

Re: ssh - restricted shell

2005-03-30 Thread Roland Smith
On Wed, Mar 30, 2005 at 04:02:39PM -0500, Duane Winner wrote: Hello, Does anybody know the best technique to accomplish this: We have a server that we use for mostly internal development, and run an SSH server. We have an outsider who we want to allow to ssh into this server and do

Re: ssh - restricted shell

2005-03-30 Thread wizlayer
On Wednesday 30 March 2005 04:02 pm, Duane Winner wrote: Hello, Does anybody know the best technique to accomplish this: We have a server that we use for mostly internal development, and run an SSH server. We have an outsider who we want to allow to ssh into this server and do some work.

Re: ssh - restricted shell

2005-03-30 Thread albi
On Wed, 30 Mar 2005 16:02:39 -0500 Duane Winner [EMAIL PROTECTED] wrote: We have a server that we use for mostly internal development, and run an SSH server. We have an outsider who we want to allow to ssh into this server and do some work. i'm a jail-fan, go for a ssh-only-jail :)

Re: ssh - restricted shell

2005-03-30 Thread daniel
On March 30, 2005 04:02 pm, Duane Winner wrote: Hello, Does anybody know the best technique to accomplish this: We have a server that we use for mostly internal development, and run an SSH server. We have an outsider who we want to allow to ssh into this server and do some work.

Re: ssh - restricted shell

2005-03-30 Thread daniel
On March 30, 2005 04:51 pm, daniel wrote: if you only want scp to work, then you can use this as the shell: /usr/lib/misc/sftp-server correction. that was for gentoo-linux. for freebsd, you can use: /usr/local/libexec/sftp-server or /usr/libexec/sftp-server depending on if you're using

Re: ssh - restricted shell

2005-03-30 Thread Juan Sanchez
Couldn't you put everyone else into the same group, except for the outsider? Then you could make secret directories -rwx. Directories without execute permission cannot be listed. Regards, Juan On Wed, 30 Mar 2005, Duane Winner wrote: Hello, Does anybody know the best technique to accomplish

Re: ssh - restricted shell

2005-03-30 Thread Alec Berryman
wizlayer on 2005-03-30 16:28:55 -0500: I thought this was accomplished when initially setting up a user's account? I'm under the impression that when a user clients sshd, s/he still can't go beyong the boundaries of his/her existing account on the server. Of course: if $impression =

Re: ssh - restricted shell

2005-03-30 Thread Francisco Reyes
On Wed, 30 Mar 2005, Duane Winner wrote: We have an outsider who we want to allow to ssh into this server and do some work. Althougth I have never done it, you could search documentation on doin jails in FreeBSD. I believe Bash has a restricted shell of some sort. I also have seen restricted

Re: ssh sessions getting paused on idle

2005-03-23 Thread [EMAIL PROTECTED]
On Wed, 23 Mar 2005 11:55:53 +0200 Riaan Annandale [EMAIL PROTECTED] wrote: I ssh to anything over 10 machines at a time and leave the xterms idle. When I come back to a session and press enter / start typing, it takes a few seconds to come alive. Almost as if the connection got canned. Do

Re: ssh sessions getting paused on idle

2005-03-23 Thread Riaan Annandale
On Wed, Mar 23, 2005 at 12:22:56PM +0100, [EMAIL PROTECTED] wrote: On Wed, 23 Mar 2005 11:55:53 +0200 Riaan Annandale [EMAIL PROTECTED] wrote: I ssh to anything over 10 machines at a time and leave the xterms idle. When I come back to a session and press enter / start typing, it takes a

Re: ssh sessions getting paused on idle

2005-03-23 Thread Charles Swiger
On Mar 23, 2005, at 4:55 AM, Riaan Annandale wrote: I ssh to anything over 10 machines at a time and leave the xterms idle. When I come back to a session and press enter / start typing, it takes a few seconds to come alive. Almost as if the connection got canned. Well, it could be anything from a

Re: ssh password delay -- SOLVED

2005-03-22 Thread Alex Zbyslaw
darren wrote: order hosts,bind multi on Glad you got it fixed. Where did you find this config documented? My 4.10 hosts.conf man page doesn't mention anything like this (and 5.3 seems to have lost the file altogether -- at least there was no man page for it). --Alex, curious

Re: ssh password delay -- SOLVED

2005-03-22 Thread darren
I googled for it and came across this link: http://www.faqs.org/docs/securing/chap5sec39.html darren Alex Zbyslaw wrote: darren wrote: order hosts,bind multi on Glad you got it fixed. Where did you find this config documented? My 4.10 hosts.conf man page doesn't mention anything like this (and

Re: ssh password delay

2005-03-21 Thread backdoc
Additional info. I started sshd with -ddd. It is definitely hanging on the line: Trying to reverse map address 192.168.1.102. Now, I'm not sure how to fix that. BTW, I do have VerifyReverseMapping set to NO in sshd_config. But, that seems to be being ignored. Any suggestions? darren darren

Re: ssh password delay

2005-03-21 Thread Bill Moran
backdoc [EMAIL PROTECTED] wrote: Additional info. I started sshd with -ddd. It is definitely hanging on the line: Trying to reverse map address 192.168.1.102. Now, I'm not sure how to fix that. BTW, I do have VerifyReverseMapping set to NO in sshd_config. But, that seems to be

Re: ssh password delay

2005-03-21 Thread Gary Smithe
I have done quite a bit of googling and I realize that the problem likely has something to do with reverse DNS lookups. But, I don't know how to pinpoint the problem from there. I've basically been playing with the /etc/resolv.conf and /etc/hosts settings. In my hosts file, I have an entry

Re: ssh password delay

2005-03-21 Thread Alex Zbyslaw
Gary Smithe wrote: If that is your resolv.conf, then that explains some things. Your box is looking at the ISP for name resolution and the ISP has no idea (nor could care) what your internal LAN address space is. Change the resolv.conf to look at itself (127.0.0.1) and setup BIND with some

Re: ssh password delay -- SOLVED

2005-03-21 Thread backdoc
Thanks to all. I seemed to have resolved the problem by setting my /etc/host.conf file to look like: order hosts,bind multi on And, of course, I have the correct IP's were in the /etc/hosts file. My laptop gets two different IPs depending on whether I go through the wireless or not. My

Re: ssh password delay -- SOLVED

2005-03-21 Thread darren
Thanks to all. I seemed to have resolved the problem by setting my /etc/host.conf file to look like: order hosts,bind multi on And, of course, I have the correct IP's were in the /etc/hosts file. My laptop gets two different IPs depending on whether I go through the wireless or not. My host.conf

Re: ssh security

2005-03-18 Thread Peter Risdon
On Fri, 2005-03-18 at 12:23 +0100, Dick Hoogendijk wrote: I log in from a remote windows computer on my school using PuTTY w/ ssh2. What I'd like to know is how *safe* is the login from this windows machine? I mean, can my login to my FreeBSD server at home be *monitored* by someone while I'm

Re: ssh security

2005-03-18 Thread José Nicolás Castellano
Dick Hoogendijk wrote: I log in from a remote windows computer on my school using PuTTY w/ ssh2. What I'd like to know is how *safe* is the login from this windows machine? I mean, can my login to my FreeBSD server at home be *monitored* by someone while I'm using this windows machine at work? Can

Re: ssh security

2005-03-18 Thread Stian Øvrevåge
Another problem is the Man-in-the-Middle problem, where you are led to believe that you are communicating with your home-computer, but your session is relayed on through a decrypting/encrypting gateway which is under someone else's controll. To counteract this, you should obtain your

Re: ssh security

2005-03-18 Thread José Nicolás Castellano
Stian Øvrevåge wrote: Another problem is the Man-in-the-Middle problem, where you are led to believe that you are communicating with your home-computer, but your session is relayed on through a decrypting/encrypting gateway which is under someone else's controll. Of course exists the

Re: ssh security

2005-03-18 Thread Bart Silverstrim
On Mar 18, 2005, at 6:23 AM, Dick Hoogendijk wrote: I log in from a remote windows computer on my school using PuTTY w/ ssh2. What I'd like to know is how *safe* is the login from this windows machine? I mean, can my login to my FreeBSD server at home be *monitored* by someone while I'm using

Re: ssh security

2005-03-18 Thread cpghost
On Fri, Mar 18, 2005 at 07:39:43AM -0500, Bart Silverstrim wrote: If someone puts a keystroke logger on your windows machine, they will get the password. If they put a hardware logger on your computer, they will get the data. If they are watching over your shoulder just as you misstype

Re: ssh security

2005-03-18 Thread Dick Hoogendijk
On 18 Mar Bart Silverstrim wrote: On Mar 18, 2005, at 6:23 AM, Dick Hoogendijk wrote: I log in from a remote windows computer on my school using PuTTY w/ ssh2. What I'd like to know is how *safe* is the login from this windows machine? I would like to be able to login to my home computer

Re: ssh security

2005-03-18 Thread Bart Silverstrim
On Mar 18, 2005, at 10:12 AM, Dick Hoogendijk wrote: On 18 Mar Bart Silverstrim wrote: On Mar 18, 2005, at 6:23 AM, Dick Hoogendijk wrote: I log in from a remote windows computer on my school using PuTTY w/ ssh2. What I'd like to know is how *safe* is the login from this windows machine? I would

Re: SSH terminal locking up from OS X to FreeBSD

2005-02-23 Thread Doug Hardie
On Feb 22, 2005, at 22:57, Jim Freeze wrote: * Chad Leigh -- Shire.Net LLC [EMAIL PROTECTED] [2005-02-22 22:58:17 -0700]: Just for giggles, what happens when you try a different encryption method with the ssl client? For example, -c blowfish Ok, so I tried this, but it still locks up. However,

Re: SSH terminal locking up from OS X to FreeBSD

2005-02-23 Thread Jim Freeze
* Doug Hardy The localhost is trying to send the 40 bytes in its buffer. It is not receiving and ACK from remotemachine so it retries until it eventually gives up. The F flag is localhost issuing a FIN to remotemachine to drop the TCP connection. It tries a couple times and then

Re: ssh, sftp, and public key authentication

2005-02-23 Thread Shantanoo Mahajan
+++ dave [freebsd] [18-02-05 09:10 -0500]: | Hello, | I've got a machine i use public keys on to which i'm trying to ssh. When | i created a key for this user i did not define a passphrase, yet i am being | asked for one when i ssh in to the box. I use the command ssh -i | filename.pub

Re: ssh, sftp, and public key authentication

2005-02-23 Thread dave
Hello, Thanks for your reply. I have done this. My problem comes in when i ssh from offsite to the first machine, this works fine uses password authentication. Then if i go from that box to the second machine i am prompted for a passphrase, which i don't have for that key. Basically, three

<    1   2   3   4   5   6   7   8   >