New answers tagged

0

I ran into this problem - I found that Windows misidentified my Pi Zero as a COM device - as this article said it might. So check your device manager for a 'USB Ethernet/RNDIS Gadget' - or something similar. If it's not present, here's what I had to do; Go to this Microsoft Update Catalog, and download 'Acer Incorporated Other hardware - USB Ethernet/RNDIS ...


1

OP's linked documentation (giving here the ce version which is identical) tells: Add the following to your sshd_config file. This is usually located at /etc/ssh/sshd_config, but it will be /assets/sshd_config if you’re using Omnibus Docker: Match User git # Apply the AuthorizedKeysCommands to the git user only AuthorizedKeysCommand /opt/gitlab/embedded/...


1

The key in the ~/.ssh/ folder is not server's key. It's your own key stored on the server. You are free to use your own key for as many accounts/servers as you like. Though, a mere presence of the private key file on the server (anywhere) has no effect on the authentication to that server. To authenticate to the server using the key, you have to add its ...


2

This is possible to implement with other SSH clients, just more tedious – e.g. with PuTTY (or its command-line counterpart plink) you have to manually start a connection to A, then to B, then to C (or the other way around? I didn't 100% understand.) In PuTTY, this might be possible by saving connection profiles through the GUI and loading them through plink. ...


1

There are 3 kinds of technologies for this task. (Within a scope of a single answer, I can only give an overview of them.) 1. Port forwarding Your home computers have private IPs -- but the router that they are connected to the Internet through likely has a public IP on its external interface (that's true for most home Internet providers). If you find out ...


0

cp ~/.ssh/id_rsa.pub > to remote server > ~/.ssh/id_rsa.pub cp ~/.ssh/id_rsa > to remote server > ~/.ssh/id_rsa Then ssh to your server and do below : sudo chmod 600 ~/.ssh/id_rsa Then you should be able to connect to your git repository without creating a new ssh key


1

i understand that I need to port forward in order to be able to access it, but then I have an open port and it is my understanding that it is more or less like an open door in the network, is this the case and do I need to worry about such a thing or is it more like assign the port and tell no one Ports are assigned to individual processes--a process will ...


0

it is my understanding that it is more or less like an open door in the network No, that's not how ports work. Being able to connect to a specific port (TCP or UDP) only lets you talk to the specific service that is listening for connections on that port. So if TCP port 22 on your computer is "open" by OpenSSH, it just goes to the OpenSSH server ...


0

You could configure reverse DNS for all of your host's IP addresses, pointing to the canonical name. Most non-AD Kerberos implementations always use rDNS as part of the name canonicalization. (The rDNS entries do not have to be global; they only need to be visible to the client. As long as the client can look them up, they don't even need to be in DNS – in ...


0

It worked after running defaults write org.xquartz.X11 enable_iglx -bool true on local terminal.


0

Provided that we have access to the server at ADDRESS with the root user and the user we want to set up keys for is called ubuntu, the following one-liner can be used. cat ~/.ssh/id_rsa.pub | ssh root@ADDRESS "su - ubuntu -c 'mkdir -p ~/.ssh && tee -a ~/.ssh/authorized_keys'" This will work regardless whether .ssh and authorized_keys exist ...


0

Turns out that ansible-pull has an arg for that which I just didn't see in the docs: --private-key <PRIVATE_KEY_FILE>, --key-file <PRIVATE_KEY_FILE> use this file to authenticate the connection (from ansible-pull documentation) Thanks to Xaroth on #ansible on irc.libera.chat!


0

The process below works all the time for me, This requires your mouse. Handy for long strings & passwords. Copy text/string using mouse In terminal, using the mouse, position to location and right click to paste Terminal will show pasted text. NOTE: Terminal will not display the pasted string(password), Regardless, hit enter and it should work.


0

Use quotes around file names that contain spaces scp -rv "C:\Users\User Name\Downloads\filename.c" username@path.edu:/home/student/username


0

HAProxy's blog offers an interesting approach: Route SSH Connections with HAProxy | Dec 21, 2020 In order to route the SSH connections to different servers, you have to know which server the user wants to access. As said previously, HAProxy doesn’t analyze the SSH protocol and, anyway, this protocol doesn’t provide any hint about the destination. So, we ...


0

TDLR: For windows users, run ssh-add "C:\\Users\\<your user>/.ssh/id_rsa" not ssh-add ~/.ssh/id_rsa For example I see this all the time: $ ssh-add ~/.ssh/id_rsa Enter passphrase for /c/Users/User/.ssh/id_rsa: Identity added: /c/Users/User/.ssh/id_rsa (/c/Users/User/.ssh/id_rsa) $ git pull Enter passphrase for key 'C:\Users\User/.ssh/...


0

To use password authentication instead of a key, SSH must allow passwords. Inside of /etc/ssh/sshd_config Change the PasswordAuthentication option from no to yes (Note this is bad practice): PasswordAuthentication yes Because your example shows the user as root, you must also allow root to login via a password. (Note this is bad practice) PermitRootLogin ...


1

Windows Vista and newer resolves the loopback domain localhost to ::1 (IPv6) by default and the listening application must expect this. This was not the case for me with all of my software listening to 0.0.0.0 or 127.0.0.1 without support for both protocols. Solution #1: Use and configure a library or application that listens to both IPv4 and IPv6 sockets. ...


0

For okpg (entware) please follow this guide: https://github.com/Entware/Entware/wiki/Install-on-Synology-NAS I have just verified it on Synology DS418j (Realtek RTD1293 / aarch64) running DSM 7.0-41882.


0

Try add shd-keygen-wrapper to Security & Privacy -> Privacy -> Full Disk Access I encountered the same and solved by above.


0

safest bet with the least amount of setup would be to use screen multiuser. http://aperiodic.net/screen/multiuser


2

Couple of ways I've done this in the past scp "your script" to the remote server then run it over ssh ssh remote server 'bash -c "./path/to/script"' Port forward the remote hosts mysql port of 3306 to your local host 3333 ssh -L 3333:remote_server_name_or_ip:3306 Then, run your script with sql queries and have it point to your ...


1

The manual page of ssh says that -D is for "dynamic" forwarding. So the corresponding option in ssh_config is DynamicForward. Host myHost HostName 44.104.24.146 User root DynamicForward 8080


0

Oh boy, just went through doing this for a team member... and the problem proved to be puttygen not doing things the nice way. I was finally able to fix it by using Windows Powershell and the command: ssh-keygen -t rsa it was an instant fix !


0

From version 6.2.0 of Synology DSM, ssh access is restricted to members of the administrators group. To get around this limitation, we will install a dockerized ssh inside the Synology NAS. Steps: Change the Synology SSH to a port different than 22 (such as 2222): Control Panel > Terminal & SNMP Install Docker from Packages Center Enable user home ...


0

I had the same problem on my MAC OS Catalina 10.15.5 After some research on google I added the following line to my /etc/ssh/ssh_config Host * IPQoS=throughput And it fixed the problem. Note that I initially tried to add the same in .ssh/config file (i had to create it) and apparently it is not working on MAC. Unlike any Linux distro. So use /etc/ssh/...


0

# https://4sysops.com/archives/native-nat-in-windows-10-hyper-v-using-a-nat-virtual-switch/ $name = "VMSwitch" New-VMSwitch -SwitchName $name -SwitchType Internal #(note down ifIndex of the newly created switch as INDEX) $index = (Get-NetAdapter |? Name -Like "*$name*").ifIndex New-NetIPAddress -IPAddress 192.168.0.1 -PrefixLength 24 -...


0

Not necessarily an answer as such, as you've already sorted it yourself, but hopefully some comments to explain the behaviour that you were seeing might be helpful. SHH Reverse Tunnel In the configuration that you have, the SSH reverse tunnel is a red herring, and effectively irrelevant, because the destination IP address gets altered before it can reach the ...


1

I solved the problem with the following. # on the windows $ ssh -R 7000:localhost:7000 user@[[linuxip]] # on windowspc # on the linux sudo iptables -t nat -A PREROUTING -p tcp -i wlp2s0 --dport 7000 -j DNAT --to-destination [[windowsip]]:7000 sudo iptables -t nat -A POSTROUTING -j MASQUERADE The above just does work for bypassing the connection. So the ...


1

I ended up changing the static IP of my server and that fixed the problem. Now all I have to do is find the impersonating device. As user1686 mentioned, it seems to be an old NAS or wifi router.


0

I found the solution, i created a jailed user with the jailkit (https://olivier.sessink.nl/jailkit/index.html#intro) and after that i created a hard link to the folder network.


3

SSH tunneling and MAC filtering is usually safe enough. SSH tunneling is safely encrypted, and for MAC filtering to be spoofed the hacker needs to know your MAC address to start with. A VPN requires that one side in the connection has installed a VPN server, and the other side a VPN client. This adds some complications and may not be feasible for some types ...


2

You have a couple of options and the first one is to use tee to replace the existing file. For that we first update sudo with visudo and assign the tee command to anyone in the sudo group. %sudo ALL = tee /etc/network/interfaces Running the command where filename is the file that contains the new content. $ cat filename | sudo tee /etc/network/interfaces ...


0

It turns out that, even though many sources use multiple networking options to qemu, they can step on each other's toes. Switching to just -nic user,id=vmnic,hostfwd=tcp::60022-:22 works perfectly, allowing BOTH passing through the tcp connection on that port for ssh AND using the internet from the guest os. Notice this has id=vmnic. id=n0 or anything ...


1

FTP is bring deprecated. But for now, there is still a flag to enable it. On the address bar, type: chrome://flags. Search for #enable-ftp. Enable it, and restart the browser. Note that the flag might be removed in future releases of the browser.


1

Most browsers are today moving away from supporting the ftp protocol. This is for the same reason of security as that of the move away from the http protocol to https. While there exists an ftps protocol, the implementations currently incorporated in most browsers do not support it. For example, see the Chrome/Chromium article Deprecate and remove support ...


0

It sounds like what you're after is a way to store all of your ssh config and variables for your project in the project directory, and also, for paths to be processed relative to an included ssh config file, rather than the current path. The short answer is no - AFAIK, ssh_config includes behave similarly to a C #include - you can treat them as expanding the ...


0

Use regedit to navigate to the key HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History. Export the key for backup, then delete it.


0

Figured it out, the issue was with port forwarding on the router


2

I was stumbling on this question when I had a similar issue, I followed this guide and that worked for me. In essence using user's home directories will not work since the directory that you want to lock the user to must be owned by root and cannot be writable by anyone else. So try to: create a folder like /var/sftp that is owned by root add a sub-folder ...


1

Yes, it is possible. The simple Match condition of a port you should only use for the 2222 port - it's the one, where you want sftp only. In the other rule, you need to specify not only port (this would kick out your regular users too), but also another condition (if there are some users or groups which are not to be allowed to use other possibilities ...


0

I was struggling with this for a while. SFTP uses PSFTP on Windows, so if you load your private ssh key to Pageant, it should connect. I specified the ssh_key_file path AND uploaded to Pageant. You might need to convert your .pem to .ppk first as @Wayne indicated. *** Not sure if I had to both specify the ssh key path and upload to Pageant but once I ...


0

While I marked Kenster's answer correct (as he was), in case anyone else runs into a similar problem, I found out from IT that our gitlab server has SSH disabled -- the 'connection' I see happening is an artifact of the Zscaler private access system the company uses. SSH makes a TCP connection through the private access firewall, but then gets dropped ...


0

You can also provide the SOURCE and DESTINATION identity files in the CLI options -o IdentityFile rather than setting these up in .ssh/config. This is handy for e.g. a one-off -3 copy scp -3 -o IdentityFile=~/.ssh/source.key -o IdentityFile=~/.ssh/dest.key source-user@example.com:/path/to/file dest-user@destination.com:/dest/location/


0

Yes you can. Similar like below ForceCommand internal-sftp Subsystem sftp sftp-server.exe -d "C:\" #Match User User1 #ChrootDirectory D:\Data1 Match User User2 ChrootDirectory D:\Data2 Match User User3 ChrootDirectory D:\Data3 Match User User4 ChrootDirectory D:\Data4 Here User1,User2,User3 are local users to machine or AD user You can even ...


0

First, you clearly understand that your code command will have to be an alias or function or some script. That said, you should be able to use reverse port forwarding to allow the remote to ssh into your client without opening your client to the "internet", or having any ports forwarded through your firewall/router/whatever. Something like this: ...


-2

The answer to this problem does not work, or at least it may appear to work at first... Check your wireshark traffic, it does not encrypt the udp traffic even if you try to pipe it through fifo. NC just ignores the FIFO and sends the message straight UDP ignoring the fifo and the ssh port relay. UDP cannot be tunneled through SSH tunnel because it is a ...


1

I use a similar configuration, and there are a few things I've come across when troubleshooting this type of issue. You have two of them mentioned already in your question, so you are off to a good start. I'm just mentioning these here for others who come along looking at this answer: Make sure you are using ECDSA keys rather than RSA. Windows OpenSSH ...


0

Use like this: rsync -av -e 'ssh -J username1@111.111.11.11:60010 username2@222.222.22.22' source/ destination/


0

Something was wrong with the gateway communication, and I was using the same interface for the provider and management network. So when I set "proxy_arp = 1" things started to work, but there was no internet on instances. I've started working on manual OpenStack installation and configuration for better understanding.


Top 50 recent answers are included