New answers tagged

0

The related posting Mac OS X terminal and GNU screen scrollback essentially advises you to suppress switching to the alternate screen of xterm. While in the alternate screen, you would not necessarily be able to use the scroll-wheel to see xterm's scrollback. A program running in xterm would only see the escape sequences if it enables the xterm mouse ...


0

Everything seem to be all right. One possible reason could be Selinux context bug as mentioned in this post. In that case you have to run this command in your hostB from userB1: restorecon -R -v ~/.ssh


1

OK, to answer my own question... After reading this question: OpenSSH, FreeBSD screen overwrite when closing application I decided to get familiar with termcap and after a few headbangs I finally made it work as expected. Below I provide the entries to my $HOME/.termcap # $HOME/.termcap xterm-256color|xterm with 256 colors and clear:\ ...


2

Should be able to do this by first setting the $DISPLAY environment variable. $ export DISPLAY=:0 $ vlc -f file.mp4


0

Make "External port End" to 2222 and try again. (edit from micha, (I can't log back into the guest account I made so I can't put this in comments) I tried to do this, but results were unchanged...) Also, take a look at your firewall settings on your router itself. Some consumer routers I've noticed have a setting that will not allow any incoming ...


0

You've most likely made your primary OS image unbootable, and need to look into how to recovery mode works for (that is, how to un-brick) your exact model / hardware revision. Go to the OpenWrt website and read up on the recovery procedures for your device.


1

First I'll summarize your use case as I understand it: You want to ssh to an edge device (router.example.com) and setup forwarding rule through the SSH tunnel that allows you to VNC from your client (the host you are initiating ssh from) to host-centos5x32:5917 where you have a VNC server listening. What you have setup is a rule which will forward from the ...


1

Because the commands that are contained in the command.txt are executed by a master shell one-by-one. So the master shell executes the sudo, waits for it to exit, before it proceeds with the other commands (ls and cd). And the sudo does not exit (at least not on its own). While you want the ls and cd to execute within a child shell executed by the su. ...


0

As grawity suggested, Bitvise WinSSHd is the closest answer. I can create users, set specific permissions for all of them, map virtual directories similar to FTP. In future I may even use it instead of filezilla server, since SFTP requires less network access to be usable. Free version limits are fine for personal usage.


0

You can install openvpn without admin rights but you cannot install the TAP-driver without admin rights .. so the VPN would not work anyway.


0

Both experience and research have shown that the most secure passwords are those big in lenght rather than complex, which indeed sucks for those whose memory suck (me included!). Therefore, in my opinion, using key-based authentication is the right way to go when it comes to manage a big number of servers. At the same time, anything involving security and ...


0

There are a number of possible issues, including A firewall running on one or both boxes (iptables -vnL should list the firewall rules, look to see if port 22 is allowed) Some kind of additional limiting is occurring - for example SELinux or Apparmor. (if cat /selinux/enabled = 1, you are running selinux, try temporarily disabling it). I've seen this ...


0

You should make www-data owner of /home/john/images, or add it to the john group while giving it proper write rights, or chmod that folder to 777. Try this: chmod 777 /home/john/images/ Then you give anyone rights to that folder, including www-data. That may be too much, so if this works you can limit rights. You could add www-data to the john ...


0

In addition to answer by diannal, if you don't have a passwd file under etc folder in Cygwin root folder, then you can first create one by issuing this command: mkpasswd -l -p "$(cygpath -H)" > /etc/passwd


1

First of all, U2F is uncacheable by design. It's not simply a password; it's a challenge/response protocol, in which the token receives a different 'challenge' every time, and issues digital signatures without ever revealing its secret keys to the PC (basically like a smartcard). That's where its main strength lies. The same applies to Yubikey's classic ...


1

You need to generate rsa1 host keys if you want to run server with SSH1: ssh-keygen -t rsa1 -f /etc/ssh/ssh_host_key and specify the keys in the sshd_config: HostKey /etc/ssh/ssh_host_key Later on you need to specify some authentication method that is supported by this ancient protocol, otherwise you will end up like this: $ ssh -1 localhost ...


0

yes, there should be sh and ssh on Mac. Create a file batch.sh Make it executable chmod u+x batch.sh Content of file: #!/bin/sh ssh root@192... "killall hyperiond; /storage/hyperion/bin/hyperiond.sh /storage/.config/hyperion.config.json" And then run it as ./batch.sh. It should prompt for the password and execute the batch. If you want to get rid of ...


0

I know: this post is obsolete. Anyway I write here because is the first I found! I had the same problem with a Dropbox account that I used on mac osx, moved now on Windows / Linux Ubuntu. Using bash (mine is the Cygwin64 bash), I typed inside my Dropbox folder: find . -regex '.+/\._.+' -exec rm {} \; Note that -rf was removed from above solutions. '._' ...


0

You can directly put the command. $ cat ~/.ssh/id_rsa.pub if you have ssh key already present then it will show it. Otherwise it gives error. You need to add new key.


0

Make sure you have up-to-date PuTTY. You know, windows does not have any centralized way of updates so one can simply end up using something broken. Version signature shows some quite old date.


1

When I first started using the Bash shell many years ago, I was reluctant to define aliases to use in case I became dependent on them and would then find myself lost if on a different system which didn’t have my shell aliases defined. For repeating complicated commands such as your rsync command, I used the Ctrl-R feature in Bash which allows searching ...


0

openssh and PuTTY are using different key types (but you can convert between them). In PuTTYgen you need to go to Conversions->Export OpenSSH, export your private key and store it as id_rsa. More on SO.


2

You could configure a jump server at your work/office which has the required applications and the private key installed. Then all these hired engineers will need remote access (RDP/VNC) to this one server from which they can access your customer's servers. Even if this works, it isn't perfect as you're still sharing that private key, but it's in one place ...


0

I just had this same problem with DSM 5.1 instead of 5.0. None of the solutions listed solved the issue. In my case, the permissions for /var/services/homes/<user>/.ssh/authorized_keys was not correct. Running the following solved the issue chmod 600 /var/servieces/homes/<user>/.ssh/authorized_keys


0

Ok I got it. I ran the following: ssh-copy-id user@123.45.56.78 I must have had a permissions issue. Now it works. Found that info here: https://www.digitalocean.com/community/tutorials/how-to-set-up-ssh-keys--2


2

I put /etc/resolv.conf back to the default value, and got immediate response again. (No reboot or restart required.) nameserver 0.0.0.0 (I had put a value in there to get it on the internet for loading packages.) WireShark showed me it was spending that ten seconds doing ARP requests for its gateway.


1

Yes, this is very common. Indeed if used as a fileserver and by many users it is absolutely essential. SFTP uses SSH, and there is a lot of EDI activity that depends on it too. From devices it is possible to trigger events with custom user logons (such as poweroff or reboot). Consider also SCP (WinSCP is commonly used to access source code), and KDE ...


10

Yes it is possible, it is the default behaviour. Trust You can rely if you are using an updated version of ssh and the protocol is not any more 1. grep "Protocol" /etc/ssh/sshd_config The command above should give you Protocol 2. Limits for the connections You can see ssh as the encrypted evolution of telnet, born in the far '69 to allow remote ...


1

If you don't have any other user, who is able to log in and fix your configuration/groups over ssh, you need to log in locally (or using some web console).


1

Change the command to: screen -t "df" bash -c 'watch -n 10 df; exec bash' bash -c : Use bash -c to run multiple commands. exec bash : After df command terminates, it will start a shell (bash) that won't exit until something external terminates it.


0

You would do this by running the commands in a shell which stays running after the command completes. For instance, in Prevent GNU screen from terminating session once executed script ends, the accepted answer does an exec bash after the command, to start a shell when the command completes.


1

Hat tip to a coworker, A Golden, who came up with this immediately. This is a cut-and-paste of their response, which works and completely nails this. I picked "say-hi-locally" and set it up on my linux server as: alias say-hi-locally="echo EMIT SAY HI" Then, since I use ITerm2 as my local terminal, I set up a trigger in ITerm2 with the regexp "EMIT SAY ...


5

Yes, it totally is. But this should be implementation-defined. You could as well program your own (probably not so secure, and worse) ssh server that cannot handle multiple connections. But just like common HTTP-Servers of course support this, openssh does so too. Actually this is the very concept of Unix: A multiuser system where a server does all the work ...


3

There are a number of possible solutions including - An HTTPS site with client side authentication. Via an email framework triggered with PGP encapsulated messages Using anything suitably secured and based on stunnel. C&C server style using encrypted IRC Using regular unencrypted protocols (including telnet or nc) over a suitably secured VPN. ...


45

The short answer - Yes. It usually works by default. The long answer - Depending on what you are using it for, it may slow down with multiple connections, but that is a bandwidth issue, not an ssh issue.


0

you'll need an ssh server on your mac. Then you can do the following: [you@mac]$ ssh linux [you@linux]$ interactive_cmd; ssh mac say done You login to your linux host, run the command, when it's done, the linux host ssh's back to your mac and runs the say command.


0

ssh linux do-something.sh && say done looks like doing what you want. Implementing some communication between remote host and your mac does not seem feasible. If you want to run more commands and you are worried about the latency, use ControlMaster and ControlPersist options (a lot questions about that already answered).


0

If you want to SSH your instance over internet then create an Elastic IP(public ip) and then associate it to your instance and use it to SSH into your machine. Using private IP for SSH works good only when the machine from which you are initiating an SSH connection has access to your instance locally.


1

As mentioned in your own answer and the one given by @Fegnoid, exporting the variables in a .sh file inside /etc/profile.d/ or in ~/.bash_profile would do the trick. Keep in mind that if you intend to use these environment variables in a service script, it might not work as you expect since service purges all environment variables except a few. See ...


0

It could be possible technically, but the OpenVPN software doesn't support being used that way. (It'd need to have its own TCP implementation, at minimum, and that'd likely make it more complex than it's worth.) If you cannot change the routing table, you won't be able to connect through the VPN.


1

You do not have to SSH into the router to access the Raspberry Pi and BBB from SSH. If you are on the same local network as the two devices you can SSH into them using their Local IPs on port 22. They don't even have to be static IPs (even though its extremely convenient). BTW if you ever do plan to SSH into your devices from another outside network, ...


1

In my case, I was doing a remote to remote copy, withouth the -3 argument. The port given with the '-P' parameter works with the 1st server, but port 22 is used with the 2nd one. ssh -P 1234 user@server1.mydomain.com user@server2.otherdomain.com The solution is to edit the /etc/ssh/ssh_config file in server1 and add these lines: Host *.otherdomain.com ...


0

export DISPLAY=:0.0 Don't do that. If ssh is forwarding X, then it will set the DISPLAY variable to the correct value. You're overriding the correct value with ":0.0", which is not the correct value here. The DISPLAY value ":0.0" means to connect to the default X display running on the same computer. So you're telling your X programs to connect to an X ...


0

Figured it out, The issue was that I had a custom jail setup for a different service and it wasn't configured correctly and that was keeping fail2ban from starting correctly. So when I ran "service fail2ban status" I would get this before I fixed the other jail: ● fail2ban.service - LSB: Start/stop fail2ban Loaded: loaded (/etc/init.d/fail2ban) ...


0

If you wish to use the standard SSH port for your SSH server, which is TCP port 22, then you need to forward port 22 from the WAN interface on router 1 to the external interface on router 2, i.e., the IP address on router 2 which faces router 1. Then router 2 needs to forward traffic destined for port 22 on its external interface to 10.0.20.35, which is the ...


0

No. It is not possible with default ssh-agent. It creates also file in $TMPDIR/ssh-XXXXXXXXXX/agent.<ppid> as noted in manual page. It is to make sure the socket secure (not accessible only by your user). But you can use gnome-keyring. They create socket in /run/user/1000/keyring/ssh, so it is in secure place and uses the same protocol (common in ...


0

How do I change my OVH ssh password? Upon delivery of your server (under Redhat), you receive an email summary containing two passwords. The first is used for the root account via SSH and webmin, the second for MySQL. Upon delivery, the passwords for SSH and webmin are synchronised perfectly but you can use a different password to log in as ...


0

We are struggling with the same. If you request your service ticket with kvno without realm it will be the same result. I do not really understand the root cause but adding [domain_realm] section to the krb5.conf file solves it. I am wondering if anybody can tell more. It would be useful for me too.


0

I just had this problem trying to backup to rsync.net. They told me that the last part, after the colon ":", should be a local pathname to add to an existing directory. rsync -avP mysite-aws-folder root@xxx.xxx.xx.xxx:/var/www/html/ should be rsync -avP mysite-aws-folder root@xxx.xxx.xx.xxx:var/www/html/


0

The FileZilla does not even try to connect to the server. It connects to a local host to port 9150: Connecting to ::1 port 9150 I assume it tries to use a connection sharing function of PuTTY (FileZilla shares an SSH code with PuTTY). The connection sharing seems to fail for some reason. And you probably do not want that anyway. As it will make ...



Top 50 recent answers are included