SUSE :: Remote Authentication Suse10SP2 - Not Doing Locally
Nov 3, 2010
In my job we have 48 machines with Suse10 SP2 and they want all the machines to be able to authenticate to a unique server (something like a Radius Server or TACACS server), not doing the authentication locally. Do you have any idea on what to use and what needs to be change in the Suse Linux password auth for a remote server to be the auth server?
I was wondering if you can 'share' devices in Linux by overlaying the devices nodes? For instance, is it possible to use SSH (FS) + bind to selectively bind devices locally?
Is it possible to run a program installed on a remote Ubuntu PC on the local PC? What I'm talking about is different from simply sending the GUI over the network (like X tunelling). I want the program to use the processor of the local machine. Is this possible? (Here's an example. PC 1 has a fast processor. PC2 has gimp installed on it but has a slow processor. Can PC2 make GIMP run on PC1's processor over the network?)
I want local programmatic access to ssh output in Mac Terminal. First, I tried redirecting the output of each command to a file. The file was perfect, but of course it was on the remote server, and an sftp for each command output seemed a little.. Next, I tried to Applescript Terminal, but it only gives access to the currently visible text in a tab (i.e. if half the output has already scrolled out of sight, it doesn't get returned - useless).
Last, I tried piping ssh to tee (e.g. ssh user@host | tee output.txt). This almost worked. I have the output in a local file, but there are a lot of unwanted characters mixed in. For example, every time I hit backspace, there's a ^H in the file. There's also text like "[0m[K" which is harder to get rid of.
If you use Nautilus then you can just use the "Connect to server" from the file menu. However if you file manager does not support connecting to servers (like Thunar ) then you can use sshfs.
Code: sudo apt-get install sshfs You should create a directory as your mount point, say Code: mkdir /media/Server
I can ssh to the remote computer OK, but the commands execute on the local machine, not the remote machine as they should. After much frustration I did the following hoping to clear the problem. I turned off all machines on my LAN, the hub and the router. I then rebooted everything in the reverse sequence - cable modem, router, hub, and then the computers.Then I reinstalled ssh on both machines.
sudo apt-get purge openssh-server openssh-client sudo apt-get install openssh-server openssh-client sshd in now running and port 22 shows on both machines. However the problem persists.
I'm trying to workaround a limitation in a server application. The limitation is that I can only connect to a LOCAL mysql database. I am trying to fool the server in to using a remote mysql database. I was hoping to do this by simply forwarding 3306 to another server on the same subnet.To that end I've set up iptables rules to forward all connections to port 3306 to a non-standard mysql port on a remote server. This works, except that I need to deal with the loopback interface in a special way and I'm stuck.
Kernel: Linux 2.6.26-2-686 (i686) Compiled: #1 SMP Thu Nov 25 01:53:57 UTC 2010 C Library: GNU C Library version 2.7 (stable) Distribution: Debian GNU/Linux 5.0.8 Desktop Environment: GNOME 2.20
Gnome comes with Vino Remote Desktop as part of it's package. I want Vino to run at boot so that I can login remotely. I am using VNC-4.1.3 for remote viewing. However, I can only view remotely once I have logged-in locally.
So ive got a Suse server up and running. It is connecting to a clearcase server, so i want to mount the remote filesystem as part of startup, as this is generally rebooted when im not around.I would normally add something to /etc/init.d and put the shortcut to it in the appropriate runlevel (in this case 3). Tried that. Didnt work.
Realised the init script needed to have the LBS stuff at the start, so put that in, and used insserv to add the script. I used required-start set to $ALl.This successfully created the init script with S20, and i eneabled it with chkconfig.
What would be the preferred method to establish a remote desktop session from one 11.2 machine to another 11.2 machine in the same location? No firewalls, local connection only. I've looked at VNC, RDP with xrdp, have not been able to establish a session to desktop. I would rather not use desktop sharing if possible, don't want invitations involved. Want something similar to hitting from Windows with VNC3and taking over the established desktop session. This is in my house, no security risks involved
I planned to use Squid on my W2k3 network, because I'm tired of ISA2k6... it's a **** factory in itself. So, I just installed a VM with OpenSuse 11.2 and joined it to my AD W2k3 domain. After correcting the clock problems, everything is running fine except a strange feature that I was not able to solve. After a reboot, I'm not able to login with a domain account. I enter the username/password, choose the domain then it the input fields become grey for 1-2 seconds then the password field is reset and nothing happens. The most strange part comes when you logon with the local root account. You login as root, then logoff and login with any domain account : works like a charm... Kerberos is working fine, systemclock's correct...
My server is connected to the Internet for ssh on port 22 with root logon disabled, a single non-dictionary word user name allowed, and pki authentication only (about as secure as I can make it). I've previously run fc5 and 9 servers using the same sshd config since 2006 and had no security troubles, so I'm happy, but.. After the fc13 install and configuration, logins from a host on a remote network are taking about 1m 30s to complete! A (partial) console output for ssh -vv appears below. The lines marked with "**" were the lines after which significant pauses happen. This is fully repeatable.
Code:
debug1: Next authentication method: publickey debug1: Offering public key: debug2: we sent a publickey packet, wait for reply
Migrating whole Corporate Windows stations to Ubuntu which is a huge thing so I'd like to do it right and as painless as possible to users.
Here's how it's done now: Main server are already running Linux for years with DHCP, DNS, IMAP, Postgres and SAMBA.
Windows machines are part of Samba PDC and when user logs in, Windows connects to the user profile on Samba server. When user logs out and logs to another computer, he/she has the same files and settings. Basically, nothing is held on local stations.
All printers on the network are printers with network cards, so they are not attached to any computer. The right printer is set with cmd script when user logs in, which makes it possible to make other printer as default if one is faulty.
I try to get authentication working from remote LDAP server (Novell eDirectory)So far I can get correct info from id user or using ldapsearch (so the connectivity is there)But what do I need to configure to get authentication working for SSH login & vsftp login?
I have installed keberos on my suse machine, but after installation now I am not able to login in it even with the root password. I search over the internet but could not find the solution. What to do now and how to configure Kerberos on a local machine with only local users authentication. I mean client and server both are on the same machine.
Ive been trying to fix my openvpn remote authentication script. I managed to write a script for remote authentication using wordpress db as my base access details storage. However I cannot seem to get past AUTH-FAILED issue. Possible source of conflict might be my database query inside the script which returns nothing. Hope someone with enough knowledge of scripting and database querying can help me here.
here is my vpn_auth.sh: Code: Code: #!/bin/bash ### Database Informations DBUSER='dbuser' DBPASS='dbpass'
I have been reading up around the internet that although it is possible to use MSTSC.exe under Windows XP to connect back to a Suse machine running XRDP (I believe).I had been working fine with Suse 11.0 until today. I had not made any changes to my local network but now whenever I try to connect in, I am told that I can not start the session as the sesman logon fails!
I tail'ed /var/log/messages but there is nothing written to that log when I try (interestingly enough, I do get the logon prompt that requests username, password and session type - I usually select KDE3 but have tried all options - and get the error after clicking OK).
My questions:- 1. Is XRDP under 11.1 any better (more stable as when it worked, I use to get kicked out a lot under 11.0) 2. What log file should I be trying to tail so I can see what is happening?
I must use Linux as the back end, I don't want to use a hacked copy of XP anymore and don't want to pay �� for a real version when Linux is free and should by now be able to grant me access to my network from a remote location!VNC is not an option as I will be wanting to log on more than one user at the same time.
I am really a noob using Suse or any linux configuration. I have to work in a computer that uses Suse 10.3 from another computer that uses Windows.What I am looking for is for some programe that works most similarly to windows remote desktop or logmein. What I mean is that I want is to see my actual desktop, not to log as a new user (when I do that I loose my work when I log out)As I said I new at this so it would be great if you could recomend me some easy program to do what I need and with a detailed tutorial.
I'm trying to find a way to sudo or su - from an IDE such as netbeans or aptana when I remote login to a SUSE 10.0 server. I need it for web developing because logging in with putty and using vim (as i do now) is not my style
I am trying to ssh a remote box from putty but I am getting following error. "No supported authentication methods available" I don't have access to the server so I must have make my ssh client compatible to ssh server. This is the trace from another client
[SSH] Protocol Version 2 (OpenSSH_5.3p1 Debian-3ubuntu6) [SSH] Cipher: aes128-ctr [SSH] FAIL: Unable to authenticate [SSH] INFO: DISCONNECT
This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: xx@xx.com SMTP error from remote mail server after initial connection: host [URL] [ip address]: 50 Access denied...
When I try to connect to my SUSE server from other one this appears: Remote host identification has changed. I deleted entry in know_hosts but it still working wrong, showing me this message. What could be the cause of this problem??
On Ubuntu server 10.10, with a relay smtp server with authentication via postfix; I keep getting 535: Incorrect authentication data. I'm sure my username and password is correct. Heres how I set up postfix: I created a file called smarthosts.conf in my /etc/postfix/ directory that contains the following:
[Code].....
my server uses plain text authentication on port 25. I would like to use security like SSL, but this particular server is unsecured.
If I am running a script, let's say a install script. Is there a way to make Su repeat authentication rather then just returning "Authentication failed" and continuing the script?
I need to make a choice on what authentication protocol I want to use for Authentication and Authorization. I was looking at Radius and then literature suggested that Diameter was a better protocol. Keep in mind I need this on a hetrogeneous setup ( linux & windows together). Diameter seemed like a good fit until I discovered that the open source code no longer seems to be maintained ( C/C++).
I was also looking at Kerberos as an option though there is alot overhead with the server. SSL/TLS or EAP? I am looking for simple but secure and am new at the security protocols.
I have a problem with ldap client authentication in ubuntu. I am using rhel5 as openldap server and I configured ubuntu as client, when I am trying to login the following message is coming."su: Authentication service cannot retrieve authentication info. Sorry" But when I do search through "ldapsearch" command output is coming without any errors, Can anybody explain what would be problem.