General :: Notify The Administrator For Every Remote Login Attempt?
Apr 19, 2010
am using RHEL 5 ,i would like the system to send me an email for every time some one attempts to login to the server remotely. i have created the emailing script in perl and it works. but i want it to be triggered if someone tries to access the server. how can this be possible
I'm setting up an Ubuntu 10.04 system; installed open-ssh. I'll call this box A. I also have an older box B with Debian. From A I can log into B via the usual way (ssh <user>@<IP>). The 1st attempt at this I was presented with the 'unknown host' warnings & elected to accept it. However, from B when I try logging into A there is no response at all -- no warnings, nothing. I have to ctrl-C back to the prompt. I can successfully ping A from B though. I CAN connect to A from a Windows box using PuTTY as an ssh client with all default settings. Once connected I can log in. Why no response from A when trying to log in from B?
I have set up a user to login remotely to our Red Hat 5 server via SSH. A rule in our department firewall enables this user to login from a single static ip address. The ssh port on our server is 22. I am able to login to port 22 from locations within our department firewall. Our administrator says the firewall configuration is unchanged. The remote user had been successful logging in. But now the remote user gets a Connection Timed Out message, before being asked to authenticate by the server.
I regenerated security keys, but the remote user still gets the connection timed out message. (I can login locally with the new keys). I suspect either a firewall or an authentication problem--inclining a firewall problem. Am I correct? Is there a Linux command to check whether port 22 is available or blocked, prior even to authentication, for login from the user's remote location?
Is anyone else having this issue when running "su" after the latest batch of current updates? Every time I run su, I get the following:
Code: configuration error - unknown item 'DIALUPS_CHECK_ENAB' (notify administrator) configuration error - unknown item 'NOLOGIN_STR' (notify administrator) I'm pretty sure this is related to the shadow package that was rebuilt on the last set up updates.
I've never observed this problem neither did any of my colleagues trying to SSH into the same system. If I try logging into my server using a wrong username and then press ^C to terminate or exhaust my password attempts, I am locked out for at least an hour. Is there something I can do on my end to fix this problem?
I have install mysql on my fedora12. My different mysql server is located in us. I want to check health status and hits per seconds everything. Is it possible with mysql-administrator command.
now a these days i am connect through ssh and excuting below command
#mytop mysql -u root -p <passwd>
In my mysql db i have added the userip & passwd (allowed the privileages for that ip)
If i use mysql-administrator i am getting below error
MySQL Error Nr. 2003 Can't connect to MySQL server on '66.98.152.64' (111)
I have created a Joomla! website on a subdomin that I host. The site has a mangement section URL... and I am trying to secure the administrator section only using SSL/https.So far I created the self-signed certificate and installed mod_ssl. I have added a *:443 virtual hosts in my httpd conf .This is really confusing me because the page exists, it works for http and https is just another protocol. Its almost like ssl does not have permission to access those files... Is there something im missing in ssl.conf or http.conf?I am not entirely sure I am going about this the right way.
I had a quick search through the joomla forums and found lots of errors, but not really any instructions. I have done some google searches and there seems to be about 10 different ways to skin the cat.
I recently installed lucid on my new laptop (Thinkpad T410, since had some problems installing Karmic). Originally ran great, yet after several days lost the ability to log on as administrator using the login screen. After several seconds, it just sends me right back to the same screen. However, at the same time, I have no problem logging on as a different user via this screen. I'm also able to login no problem using the command line. I can toggle between this command screen and the visual user account, so can run what I need in root and then transfer to the user account so I can view it.
I'm running Kubuntu 9.10. In the process of trying to install openafs, I messed w/etc/pam. d/common-auth and /etc/pam.d/common-session. So, now I can't login to my machine. Loging in using the console gives the message module is unknown.I'm unable to log in in recovery-mode: the system freezes at the recovery menu.
I keep getting hundreds of SSH failed logins per day. Is there a way with iptables, i can say if a user connects too to port 22 over 8 times in 10 minuntes, then block them for an hour?
I've searched lot on forums but couldn't find a related post. My problem is I want to hide my mail folders when login attempt in Evolution has failed. I dont use Remember password option so everytime I'm prompted for password.
When I give no password and escape that dialog, I can see all the mails that have been already downloaded form my gmail account. If any of you guys know already existing post, please redirect me to that one.
A few minutes ago I was using google chrome when suddenly the scroll-lock indicator on my keyboard turned on... I pressed the scroll-lock key, but nothing happened, the light remained. I opened a terminal and ran "top" to find what processes were running when I was automatically logged out. I logged back and checked the logs and found the following entries in my auth.log:
Code: CRON[2971]: pam_unix(cron:session): session opened for user root by (uid=0) CRON[2971]: pam_unix(cron:session): session closed for user root
I maintain plain vanilla Ubuntu 10.04 systems for several friends. Each machine has only one user, the owner. I use Remote Desktop to instruct and to perform maintenance. Here's my problem:After updating the system, if the kernel has changed, a restart is needed. If I do a restart, I then have to phone the owner to insert his login credentials in the gdm login screen, before I can do anything else via Remote Desktop on that machine.There ought to be a simple way I can avoid the phone call and login myself.
I'd strongly prefer not to use any software that is not included in a plain vanilla Ubuntu 10.04 installation. And I don't want to weaken system security beyond what it is now.Is there a solution? Or, what is the simplest solution?
Is it possible to have multiple passwords on the same account, where one password allows only normal login and another only when accessing the machine remotely (for example, via ssh)?
I hope this is not a totally ridiculous question. I use putty often to remotely connect to my laptop at home. I recently learned about the Linux framebuffer, and was curious if there was a tool like putty that would let me remotely connect to my laptop but use the /dev/fb0 device for forwarding graphics. Sort of like a vnc or X11 forwarding, but instead of using X, gdm, kdm etc. we use the framebuffer.
I know I can ssh login without password from a local to a remote. My question is how I can ssh without password from the remote to another remote. Say, I have three machines: A, B, C where A is the local machine. I use the same private/public key pair for all the login. What I can do are:
1. ssh from A to B.
2. ssh from A to C.
3. If I am sitting in the computer B (or B is local), then I can ssh from B to C.
What I am not able to do is:
After I ssh from A to B, I cannot ssh from the B to C. When I try to ssh from B to C, it asks me a passphrase.
i need to connect to a remote linux server on certain times (automated), but i need to log on to the server. So i want to make a script (shell perhaps) that periodically connects to the server and checks some files and folders.How do i automate it and how can i log on automatically to the remote server without typing everytime the password and login (the script should do it himself)
I finished my Bachelor's degree in Electronics and communication engineering in 2007. I finished RHCE in 12th July 2010. I don't have any work experience in the field of linux. Previously i had been working in knowledge processioning outsourcing which is completely not related to the field of linux. I have no experience in the field of linux. I have also finished CCNA in 2008. I have no experience to what I have studied. Can I get a job as a linux administrator? If I want to get a job what are the necessary things should i do?
I'm trying to take backup for my data for rhel, but I not able to take all backup. Could anybody help show me how I take incremental and full backups? What is the process?
I installed Linux Mint 9 a couple of days ago (from a live usb) and my 'Account type' was set as 'Custom'.
I had to change the 'Account type' to 'Administrator' so I could edit the 'Network Manager' configuration (the 'Apply' button in Network Manager was disabled until I changed to Administrator).
Is it ok to leave it as 'Administrator' or should I change it to 'Desktop user' until I need to change system settings again?
I have been trying to install the drivers for my Egalax Touch Screen. I keep getting the message that I do not have permission, and at the end it says "are you root?" I have searched topics on the internet, then remember Linux.
I need to monitor my filesystems and get an email when the status is warning >=80 and critical >=90. I am not very good for scripting so I found an script but is not working for me This Red Hat Enterprise 5.0
Script Code: ADMIN="me@somewher.com" # set alert level 90% is default ALERT=90 df -H | grep -vE '^Filesystem|tmpfs|cdrom' | awk '{ print $5 " " $1 }' | while read output; do [Code]....
does any linux admins out there have any mailing lists that they subscribe to? I go to lots of sites for knowledge but i was trying to put together the double whammy and pull together a solid mailing list for linux admins as well.
I'm trying to install Skype on an Aspire One netbook, it shows the file in the downloads section but every time I click on it it asks for an administrator password. If I put this in the window closes and then comes up asking for it again a few seconds later, but if I put in the wrong password it gives me the option of changing it, but still won't allow me to run the programme