General :: Configure Sshd To Connect ONLY With Public Key Auth?
Jan 12, 2010How i can configure sshd to connect ONLY with Public Key Auth?
currentStatus : If you have no key. then you can log in with your password.
How i can configure sshd to connect ONLY with Public Key Auth?
currentStatus : If you have no key. then you can log in with your password.
I configured ssh on one of my servers to require public/private key authentication and deny access to login requests not using a public/private key. Now I need to unconfigure that,but I can't remember how I did it. I've looked through ssh_config and sshd_config, and nothing rings a bell. Googling only tells me how to enable public/private key authentication, not how to require it or stop requiring it.
View 2 Replies View RelatedI'm testing upgrading from 11.1 to 11.3 and running into a major roadblock. When I try to ssh to the server after upgrading, I am unable to use password or pubkey auth to connect via ssh with my ldap user due to sshd segfault. I can however connect via pubkey to a local account on the system. Both auth methods work (for local users) when I disable UsePAM in sshd_config, but auth via ldap is required. My configuration works fine on fully patched installs of both 11.1 and 11.3, but not a fully patched 11.1 upgraded to 11.3. I've been at this for a while now trying various things but don't seem to be making much progress..
/var/log/messages:
Code:
Oct 6 20:33:15 susetest kernel: [ 1829.251921] sshd[3602]: segfault at 7f4bb0521240 ip 00007f4bb0509354 sp 00007fffdf212850 error 7 in libcrypto.so.1.0.0[7f4bb0449000+188000]/usr/sbin/sshd -ddd:
Code:
debug2: load_server_config: filename /etc/ssh/sshd_config
debug2: load_server_config: done config len = 431
debug2: parse_server_config: config /etc/ssh/sshd_config len 431
[code]....
I want to configure NTLM for my Apache webserver, so that it uses active directory login credentials.
Additional info : my listen port will be 82 (http://xxxx.com:82)
If I ssh from my laptop (running F10) to the server (centos 5.2) it asks for the password, but everytime I enter the correct password it says incorrect password. when I do the same from the server to my laptop I can get in just fine. I think my passwords are stored as ssha in the LDAP (I tried clear passwords and that dosen't work either).
View 1 Replies View RelatedI have installed Linux Mint 8 (based on ubuntu). And I have setup a webserver on port 8098.
I can connect to my webserver with http://127.0.0.1:8098, but when I try to connect to http://192.168.1.107:8098 from the same machine or another machine it doesn't work.
How can I get this working? Is there any default firewall settings that I have to change?
I have one doubt that is how can we actually connect a system in private network with the system in a public network using IP address. I have one system in private network (in my campus) I need to connect it with the system on public network (home) using IP address and communicate with each other. How can I do it or is there any other way of connecting these two systems more easily?
View 4 Replies View RelatedThis is as far as FireFTP can go to make a connection.
Code:
220 Welcome to Steve Test SFTP service.
AUTH TLS
Proceed with negotiation.
PBSZ 0
All the basic vsftpd.conf advice followed:
Code:
ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=NO
[code]....
Lately I have been receiving this in my auth.log file. It seems to be repeating over and over, and I didn't know if was anything normal or something I should be worried about...
Code:
I've started to get segfaults in sshd when trying to connect. There has been no reboot and (until I restarted the sshd to try to fix the problem) there was still another ssh session connected.
The log messages:
Code:
==> kern.log <==
Jan 6 21:33:38 shuttle kernel: [ 1928.611128] sshd[9548]: segfault at bf30e534 eip b7f51b4c esp bf30e510 error 6
==> auth.log <==
[Code]....
I am trying to set up an SFTP server. I can log on to it with no problem. But our trading partner for whose benefit we want it cannot. They are unable to make a connection. Here is what happens when they try:
Error: Could not open connection to `ogxxxsft@subdomain.domain.com':
Could not connect to `subdomain.domain.com': Unable to connect to
server
[code]....
I run the following file with the >log.log redirector and it does not capture errors.
#!/bin/bash
echo ************************BEGIN LOG******************************
date +"%m/%d/%Y %H:%M:%S $HOSTNAME"
cp -f /scripts/original/clamscans.log /scripts
[code]....
The following errors show up when I run from the file from the term window, but are not written to log.log:
tar: /public/public/clamscans/*.txt: Cannot stat: No such file or directory
tar: Error exit delayed from previous errors
mv: cannot stat `/public/public/clamscans/*.txt': No such file or directory
I know with windows you can add the 2>&1 to capture error data. Is there such a thing for Linux?
i have a requirment for giving my ip address a domain name.
can i esteblish a server as dns provider so than i can give a domain name for my own ip address.
i want to give it public not in local network.
i have a commercial ISP connection with 5 IP addresses available and i want the following configuration note when i say domain group i am refering to a group of top level domains (not subdomains) owned by the same entity (company) with their A records pointed at the same public IP for a single server
[code]...
ls -al ../public-back
drwxrwxr-x 4 apache apache 4096 Apr 19 03:32 templates
ls -al ../public-back/templates
drwxrwxr-x 2 apache apache 4096 Apr 19 03:33 content
[code]....
How do I move the contents of /public-back/templates recursively with permissions into /public/templates ?
I want to use my personal computer remotely. The problem is my computer is connected to a local network that I can't modify. I can connect from my computer to another one that has public IP via ssh. Is it possible to login to the "proxy" computer from somewhere and somehow use the connection established before to connect to my PC?
View 3 Replies View RelatedOn RHEL 5.2, i have installed Oracle client 11.1 and Php 5.1.6. After that i somehow installed and configured oci8.so. When i do phpinfo Under oci8 it shows oci8 support enabled.However on running php program that connect with oracle database i get following error PHP Warning: oci_connect() [<a href='function.oci-connect'>function.oci-connect</a>]: OCIEnvNlsCreate() failed. There is something wrong with your system - please check that ORACLE_HOME and LD_LIBRARY_PATH are set and point to the right directories in /var/www/html/index.php on line 5
View 5 Replies View RelatedI have a dell wireless wlan 1397 mini card with an ethernet 802.3. Now I am trying to connect by a wired connection. Supposedly a have a bcm5784m nic. I have tried to configue the bcm5784m which was shown it to be regonized through fedora 11, i could activate it, and connection still failed. In my driver list on my dell inspiron and studio 1737 the bcm5784m was not checked as a download i needed. What in the hell am I doing wrong. I have searched exhaustively and have found nothing concerning the wire ethernet card or bcm. Supposidly ubuntu does support the dell studio 1737 laptopForgive my spelling. Oh and by the way I am using kubuntu 9.04 jaunty.
View 5 Replies View RelatedWe have to connect one PC in private network (campus) with other PC (mostly a modem in our case)in public network. Connection should be peer to peer like and we have to use C coding for establishing connection between this two systems. Is it possible if we use port forwarding or is there any other way?
View 2 Replies View Relatedi want to configure VNC server on Fedora 12 to be able to connect from any place how to configure it i try Google to find instruction about it but i found alot on ways to configure and they are difference what you recommend
View 1 Replies View RelatedI am using Nautilus to connect to an external server. Currently, I use password authentication, and all works fine. I just type sftp://SERVER and the connection is established after providing the login credentials. However, I changed the server to only accept Public Key Authentication and disabled password authentication, and as a consequence I could not login using Nautilus anymore. Is there some way to make this work?
View 9 Replies View RelatedI'm trying to configure unixODBC on Linux rehat EL 5 32 bit to connect to an Oracle 10g database server. But when I retest the connection after the configuration then The error occurs:
# isql -v oralab4_dns vonphot vonphoto
isql: symbol lookup error: /usr/lib/libreadline.so.3: undefined symbol: PC
I have searched on Google.com for 2 days but I can't resolve the problem.
I know this has been covered before, and I have searched for two hours with no success. Problem: When trying to connect to public wifi in coffee shops and fast food restaurants, I can connect to the networks fine, but Firefox will not display the page that requires input of a code or terms agreement.
I remember months ago reading something about using the ifup command somehow as a work around, but there must be an easier way.
I have a problem with the logrotate of auth.log, it is not working. I tried using 'kill -HUP `cat /var/run/sshd.pid`'. This restarts sshd but does not create a new auth.log. Also tried "/etc/etc/init.d/ssh restart" and "/etc/init.d/ssh reload"
View 3 Replies View RelatedI'm trying to write a p2p file sharing program using python's built-in libraries. Everything is going well. The only thing is that i'd like to be able to use openssl public and private keys so only a host with the public key could access/decrypt the filesharing. I've gotten these libraries (httplib, basehttpserver, ssl, os) to work using just a pem file containing both the public and private keys but no success with them seperately. Can someone point me in the right direction or offer an alternative? PS, the goal of the project is to create an anonymous, decentralized, secure file sharing program. I want to be able to upload this to sourceforge so everyone can use it, if that's any incentive
View 2 Replies View RelatedHow can I forward all traffic from a public IP to another public IP. Let's say I have a first debian box named box1 with eth0 = 1.1.1.1 and eth0:1 = 1.1.1.2 and I want to forward all traffic from 1.1.1.2 to "box2" located somewhere else over the internet and having for eth0 2.2.2.2 Both 1.1.1.0/24 and 3.3.3.0/24 are public IP ranges.
View 1 Replies View RelatedI'm currently using Fedora 13 x64 and have noticed a strange problem with my wireless.
At random intervals it will disconnect, be it 5 minutes or 3 hours and then it will not re-auth no matter how long I leave it. The wireless is running WPA/WPA2, With TKIP/AES encryption. The router only supports b/g and the Wireless NIC is only b/g.
Not sure what driver/software it is using. I noticed I do have wpa_supplicant installed but there doesnt seems to be much happening in /etc/wpa_supplicant/wpa_supplicant.conf apart from the below.
Code:
[daniel@Enterprise ~]$ su -c 'cat /etc/wpa_supplicant/wpa_supplicant.conf'
Password:
ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=wheel
[Code]....
I need to make a bash scripting, based on a password and a user,that connect to pop3 server and see if it login,if you can,return ok, otherwise return ERR .
View 10 Replies View RelatedHow to separate sftp and ssh and run on different ports.
i.e.
a) sftp on port x
b) ssh on port 22
I searched from the web and there are no detailed instructions. They suggested something like separating sshd_config into two files (file A and file B) and run two instances. Each instance points to its configuration file.
However, they didnt write down the detailed procedure of:
a) how to modify file A and file B (i.e. which line should insert specific commands)?
b) how to run two instances?
c) how to point each instance to its config file.
I am using Linux CentOS and the latest open-ssh.
I have just built my first ever Linux desktop, using VM Ware and it is running Ubuntu 10.10. I wish to try and use SSH to contact the machine but I don't believe the SSHD is running.
I have done a grep for SSHD shows nothing and have checked the Synaptic Package Manager and can see an openssh-client version 1:5.5.p1-4ubuntu is currently installed.
On Solaris, you can start SSH by typing /etc/init.d/ssh start but when checking /etc/init.d on Linux, there is nothing in there called SSH so am unable to restart it.
I just want to have the SSH running on the machine.