New answers tagged

-2

Reminder for other people looking for answers. The binaries are now on GitHub, so just download the latest and update them in C:\Windows\System32.


0

The grep -v in a tail -f is generally a bad idea. The regular expression in a growing grep is a bad idea too. You better try something like: tail -f /var/log/nginx/access.log | perl -pe "if (/1\.2\.3\.4/) {$_ = ''}" Add -n0 if you need to follow only new lines.


0

I finally got it working by using a different external port in my router settings (instead of port 22). I don't understand what was the problem before, but it works now !


0

If the remote computer has Windows Subsystem for Linux installed, you can type bash to have the next commands interpreted by WSL. From here, you can type nano FILENAME or vim FILENAME or whatever your preferred Linux text editor is. To exit WSL and return to regular Command Prompt, type exit or logout. This came in handy when I was accessing a Windows ...


0

Duplicate of https://serverfault.com/questions/956613/windows-10-ssh-proxycommand-posix-spawn-no-such-file-or-directory The workaround is, you have to use the full path to ssh: ssh -o ProxyCommand="C:\Windows\System32\OpenSSH\ssh.exe -W %h:%p hop" dest


0

Ok, I think that I found the possible solution for me: sudo touch /etc/pf-xxx.conf Write to the file(/etc/pf-xxx.conf): I did it for my vnc ports rdr pass inet proto tcp from 127.0.0.1 to 127.0.0.1 port 5901 -> 127.0.0.1 port 5900 rdr pass inet proto tcp from 127.0.0.1 to 127.0.0.1 port 5902 -> 127.0.0.1 port 5900 Create & edit com.apple.pfctl-xxx....


0

You can use WinSCP function Keep remote directory up to date. Create a copy of the remote files in some local directory. Start WinSCP and have it monitor the local copies for changes. Use your favourite editor to edit the local files.


0

You ran a program which enabled "mouse reporting" mode in the terminal (e.g. Vim or some other text editor) – and then the program crashed without a chance to disable this mode. The terminal (PuTTY) is completely unaware of what programs are running on the other end, so it cannot automatically disable such modes when a program exits (it doesn't know ...


0

In my case, ssh -vvv my_dev_box gives me this, ... debug1: Next authentication method: publickey debug1: Offering public key: /Users/userxyz/.ssh/id_rsa RSA SHA256:FzMfrbORgYEtcIaWYg2iZOBctxYeNZ9bz/vFxLLtefw agent debug3: send packet: type 50 debug2: we sent a publickey packet, wait for reply debug3: receive packet: type 51 debug1: Authentications that can ...


0

Ok so it turns out you have to use C:/Users/black/.ssh/homeUbuntu/id_rsa.pub for it to work correctly on windows.


0

If I were you I would consider using a VPN such as OpenVPN to connected your three devices. You write that device B, while behind a NAT, has port forwarding to the outside world. I would use the same port forwarding but instead forward port 12345 to 1194 for VPN; or simply forward port 1194 on your router to device B. Then B would run a openvpn server, and ...


0

I had tried reset command and it did the trick for me. I found this way on apple stackexchange: here and here


0

Without knowing more details about the VPS and the provider you are using, it's difficult to answer. Some provider offer an access to the VPS "BIOS" or to panel like Openstack Horizon to load your own ISO and install it, other providers do not offer this kind of feature. The short reply is that via SSH you most likely can't "remove" the OS, otherwise you ...


1

ngrok can help you set up a tcp tunnel which you can use to connect to your home PC. Here's the link : https://ngrok.com/. It works with linux, windows and MacOS, choose your OS, download and sign up for an account on ngrok. after installing, follow the instructions in : https://ngrok.com/docs#tcp to expose the ssh server on PC1: ./ngrok TCP 22 Forwarding ...


0

Quick solution - use config_drive: true within a instance Reason: Without config_drive: true an instance is trying to get config from network. Builtin version of cloudinit in newest centos has bug: failed run of stage init ------------------------------------------------------------ ...


-1

I found https://github.com/PowerShell/Win32-OpenSSH/issues/435, which shows that what you want to do is not supported as of now.


0

on ssh server: sudo ip tuntap add dev tun7 mode tun user SSHUSER sudo ip addr add 192.168.7.1/30 dev tun7 sudo iptables -t nat -A PREROUTING -p udp -i eth0 --dport PUBLIC_PORT -j DNAT --to-destination 192.168.7.2:LOCAL_PORT sudo iptables -t filter -A FORWARD -i eth0 -p udp -d 192.168.7.2 --dport LOCAL_PORT -j ACCEPT sudo iptables -t filter -A FORWARD -i ...


0

Set date via ssh from host: ssh $target date -s @$(date -u +"%s") Request date from target: rdate $host Also answered here: https://unix.stackexchange.com/questions/283142/getting-the-date-from-a-ssh-client


0

I was trying to figure this out, and just for kicks tried my old key, and it worked. This is strange since I removed the old key from GCP console several weeks ago, and the public key I can see there is the new one. I also checked my authorized_keys and it includes the old public key. So, the keys visible in the GCP console are not in sync with the reality ...


1

No, OpenSSH certificates is a proprietary non-standard technology. It's currently not supported by WinSCP nor PuTTY. It's on PuTTY wishlist though: https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/ssh2-openssh-certkeys.html And once it gets implemented in PuTTY, WinSCP will follow. A related question: Creating SSH Certificates for SFTP using a ...


0

I found that what I was looking for was the layout command which was not listed in the online version of the man page I was looking at but was present in the local man page. Basically use C-a :layout save [name] to save the layout to a name and layout autosave on so that it will be saved when you detach. It will automatically be reapplied when you reattach ...


3

Yes it is, run powershell as the first command to drop into the powershell shell. The default windows cli (what you know as CMD) cannot interpret powershell commands.


0

Actually I found that ip2unix works perfectly for most programs with ssh's unix-socket forwarding. However the program (rsession) does not seem to behave well and there seems a bug in ip2unix in this case. Alternatively I can use socket wrapper, which works, but sucks because I seem to have to use socat to open another socket, that I may actually forward ...


1

Use vim or nano. Install vim with with choco install vim. Although nano also exists as choco package, it is very outdated. Instead manually install this nano. However, when using over SSH, nano control characters get a bit confused, so you may lose some, since windows use it's own API for controlling screen characters, and not POSIX. So although a lot of ...


0

I had the same problem on Windows 10, and it arouse when I created a second user account on my machine. Since that new user was also an administrator and It had access to my user folder, I did these steps to limit the access on my .ssh folder and it worked! Navigate to your user folder at C:\Users\YOU Right click on .ssh/ folder to open context menu Under ...


1

This was a bug (https://tortoisegit.org/issue/3543) which is fixed in 2.10.0.1.


0

The message basically means that you are connecting to a different computer at a specific ip/address then before. Why can this happen besides MITM? Possibly the computer was reinstalled. Possibly you put a different computer on the IP and totally expect the message. In the context of a connection routed entirely through your LAN, the odds of an actual ...


0

As other people have mentioned, PuTTY does not really work. KiTTY is better, but it does not provide all the keys I need. So far, I find mintty (shipped with Git Bash for Windows) works the best. Specifically, its "Options > Keys" provide tunings to disable Ctrl/Shift-Ins as Copy/Paste, but use them literally for the TTY.


0

I resolved the issue by installing ssh servers. sudo apt install openssh-server


1

I want to know what I should do to actually rule out (or confirm) an attack before fixing it. You need to use a 100% trusted channel to receive this information. The best approach is to log in to the system directly - i.e: plug in a keyboard and monitor, or use a serial console if appropriate. Once you have logged in, run one of the following commands: ...


1

You probably need to run ssh with -t to allocate a TTY for the remote session: ssh -t admin@192.168.253.53 -i ./qnap_001.pem "docker exec..." ^^ Your immediate problem is probably that the directory containing docker isn't in your PATH on the remote system, because whatever adds that directory to your PATH didn't execute. When you run invoke ssh and ...


0

The id_rsa extensionless file should be enough. Here's some things you could try: If git bash has the file utility, you can run it on the ssh key (file id_rsa) to verify that it is the right type of file. Move the key to a folder named ".ssh" in your Windows user directory. I don't remember if git bash has its own separate user directory. If it does, you ...


3

Most of the time, especially when dealing with relatively ephemeral devices like Raspberry Pis, this message is benign; perhaps you put a different SD card in, or reinstalled the OS, or assigned the same IP to a different device, or any one of about a dozen actions that can result in a new host fingerprint. However, I suggest you do not settle for "most of ...


4

Have you had other devices on your local network that you have connected with ssh to, like other Pi:s or some regular *nix computers? If you use DHCP, an IP address assigned (time-limited, in form of a DHCP "lease") to one device may get reused for another device later. If you have connected with ssh to one device, ssh remembers the host key for that IP ...


80

Generally, the approach you take is always the same: you verify the fingerprint of the key via a channel that the attacker cannot possibly have manipulated. For example, in my old university, you could go to the computing center front desk and get a flyer with a list of fingerprints of all the important keys and certificates. If it's a server of a friend ...


1

Three steps: Generate a new SSH key for easy authentication with ssh-kegen. Use ssh-copy-id to copy the key to the server. On the commandline, type vlc sftp://user@host:/path/to/file


9

Log into the Raspberry Pi from the machine you normally log into it with. Note the key. Confirm that the fingerprint is correct. If you never set up any secure way to log into the Raspberry Pi from any location, then you don't have one. Next time, do so when you set the machine up. For example, take a photograph of the key fingerprint from the console when ...


4

You are not being hacked. Why would anyone want to “man-in-the-middle” access to a Raspberry Pi on a personal LAN anyway? “…I want to know what I should do to actually rule out (or confirm) an attack before fixing it.” The chances of someone “man-in-the-middle” attacking you within your LAN via a Raspberry Pi are slim to none. What is the benefit of ...


19

When you connect to any host for the first time, SSH saves its identification info. If this identification changes in the future, it displays this message. This could happen for example after reinstalling target system, replacing it with another one with the same IP/hostname you use to connect or after regenerating system's server SSH keys. If this sounds ...


0

Just to give a little background: The problem is that the default ssh service is configured with StricModes yes, but the user homes linked to /var/services/homes/... are controlled by Synology ACLs implementation, which are too loosy for the ssh daemon. The method proposed by most of the colleagues here (chmod 0755 /var/services/homes/<user>) works ...


1

Depends really on what constituents 'communicate'. If the machines on your local LAN need to communicate with already known unarbitrary ports, you can use SSH forwarding and have your laptop act as a proxy. From each box within your LAN: ssh -L 8080:localhost:8080 laptop ssh -L 8080:localhost:8080 -N remotemachine The LAN machine(s) would then be able to ...


0

You can forward the device's ports to your local machine using SSH's -L option: ssh -N -L 0.0.0.0:<Forwarded Port>:localhost:<Forwarded Port> <Device IP> (Repeat -L option to forward more than one port) All other machine on your LAN will then be able to use the service by connecting to your laptop on the <Forwarded Port>.


1

Assuming you are relying on the rules in the second attempt, --dport 22 is wrong. After the DNAT / leaving the PREROUTING chain, you need to instead allow traffics to the actual/new destination port, that is 54045, in the FORWARD chain. P.S. Both -j MASQUERADE and -o ens37 -j SNAT --to-source 192.168.1.1 should work fine, and the latter is preferred if the ...


0

From Mika-n on the Powershell-OpenSSH Github: This works with OpenSSH-win64 8.1.x version, but you need to set following sshd_config options (by default in %PROGRAMDATA%\SSH\ folder location in Windows platform): ForceCommand internal-sftp Subsystem sftp sftp-server.exe -d "D:\MyDataRoot\" ChrootDirectory D:\MyDataRoot PermitTunnel no ...


1

I also suffered this issue for about a week until i finally figure out this is not caused by any setting of any config files. The true reason cause this laggy SSH connection is due to Raspberry Pi's poor BCM2837/43438 WiFi Bluetooth chip design , they share single antenna. So please check if you have any Bluetooth device paired with your pi, even those ...


0

I figured it out. I am using a multiple cert solution for multiple git locations. It uses a config file in the .ssh directory that looks like this... I simply updated the paths to each cert and that has fixed it!


2

First off, back that VM up. Please, follow these steps bellow: try to run sudo apt-get update (To update your package repository). Then, try to run sudo apt-get install openssh-server (To install the ssh server). Important Note: Don't need run sudo apt-get install ssh-server because just sudo apt-get install openssh-server enough to install the full ssh ...


1

I've also recently switched to xfce (i3 standalone to xfce+i3) and had the same issue. In i3 I started /usr/lib/polkit-gnome/polkit-gnome-authentication-agent-1 and put export $(gnome-keyring-daemon -s) into .bashrc, but in xfce that only worked for bash terminals, not for other applications like virt-manager. But it turns out there is a simple gui setting ...


0

I discovered the answer while writing the question. If you do not have a public key file which corresponds to your private key (id_rsa.pub in this example), then ssh-keygen -l will calculate the public key from your private key, and use this calculated public key to calculate the public fingerprint, as expected. However, if you DO have a public key file (e....


0

https://jellyfin.org/docs/general/networking/index.html Jellyfin admin networking setup doesn't mention port 2015 specifically but: "Live TV devices will often use a random UDP port for HDHomeRun devices. The server will select an unused port on startup to connect to these tuner devices." As in the comment, # ss -punta will list all the ports open on ...


Top 50 recent answers are included