Security :: SSH Works But Remote Mount Fails
May 1, 2011
I've added my public key to the remote machine's authorized_keys file, and I can ssh over without password. But when I try to mount the remote share using sshfs it -always- asks for my user's password. I have set sshd_config|PasswordAuthentication no
... and when I mount the share as root it says, "read: Connection reset by peer". My mount is being done as user, so it shouldn't be a root authentication problem:
sshfs#bill@droog://media/droogfuseuser,noauto,gid=6,umask=007,cache=no,ServerAliveInterval=15,reconnect,allow_other,comment=sshfs 0 0
I can't mount as user because /dev/fuse is not suid, and I'd rather not set it such.
View 10 Replies
ADVERTISEMENT
Aug 13, 2010
I want log in locally to my Lucid (10.04) workstation and have my code saved over the network on my samba account At work, all developers have samba user ids and when we were running Red Hat, we went thru the following procedure to get setup.
* open a shell session to NFS server and execute the "id" command to get my samba user information.
Code:
$> ssh l alberto our_nfs_server
$> id
uid=7090(alberto) gid=100(users) groups=100(users)
* Create locally a login on my Linux workstation with the same login and uid.
Code:
$>sudo useradd u 7090 g 100 d /home/alberto s /bin/bash alberto
[code].....
Code:
mount error(13): Permission denied Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) mount.nfs: access denied by server while mounting our_nfs_server:/d0/homedirs/alberto It does not work at all!!?? However, the same procedure on a RedHat workstation works fine. No errors.
View 2 Replies
View Related
Apr 1, 2011
I have an Ubuntu 10.04 machine at home and apache setup on it (files are located in a Truecrypt volume). The reason for the web server being that I wanted to access my files wherever I'm at (i.e. hotel, work, hotspots, etc...). So far, it's worked out great for me seeing as a I can http download my files (or stream media files). However, I am often on a public hotspot and I know it's a matter of time before someone finds the webserver on my computer. I have the machine firewalled and password protected (via .htaccess), but either way I don't want people looking in on my computer.
The problem: I have used Truecrypt for a long time and completely trust using the program to encrypt/unencrypt a volume container to store my files. Usually, I would remote desktop into my computer and mount/unmount the volume when I needed it. However, after time it get's really annoying to do this. So I eventually figured out how to setup a bash script to automatically do this for me (which I put on the usb part of my phone). What I wanted to do was to be able send the bash script to my Ubuntu machine (via ftp from my phone) and have Ubuntu automatically run the script. Is this possible? What programs do I need on Ubuntu?
I was thinking about using something like cron, but that is for scheduled times. I don't really have a set time in which I need my files, it's pretty sporadic depending on how much I travel. Thus the need for being able to remotely mount the volume when I need it.
Summary: I need a way for Ubuntu to read a folder every minute or so to check for bash scripts to run. I want to be able to send the bash script via ftp from my phone, have Ubuntu run the script, then delete itself (so as to not store the password). I already know the script in which to mount the Truecrypt volume and how to send the file via ftp from my phone. It's really a matter of what program to use in Ubuntu to find and run the script.
View 8 Replies
View Related
Jul 8, 2010
I've got a problem in doing sudo working for mounting things (e.g. usb pen or optic discs). Details:The OS: Slackware 13.0The response to sudo -l command:
Code:
User user1 may run the following commands on this host:
root) /sbin/shutdown -h now, /sbin/shutdown -r now
[code]...
View 3 Replies
View Related
Jan 13, 2010
using ubuntu and the corporate edition of open dns? >Im curious to find out how the anti malware filtering works in open dns works.
View 4 Replies
View Related
Jul 6, 2010
I always use VNC to check my server for updates, and this morning I started the xvnc4viewer to vnc into my server and it keep asking for a password. I never setup a password because I do this local from my laptop, and I am the only one who uses my laptop. I had to go to my server and check the setting in System > Preferences > Remote Desktop and found them all changed. There was a password setup and there was a check mark in the you must confirm each access to this machine there some security update that changed all these setting? Sometimes when I do updates I don't know what is being changed on my server
View 9 Replies
View Related
Apr 13, 2011
I'm trying to use a remote procedure call. When I call my server, my server should activate gammu and send an sms with it. I've used the code in the following tutorial: [URL]. The command for the uptime, and the command for the greeting work perfectly. But when I write my own method on my server, it fails ..
Code:
function uptime_func($method_name, $params, $app_data) { return `uptime`; } function greeting_func($method_name, $params, $app_data) { $name = $params[0]; return "Hello, $name. How are you today?"; }
function gammu_func($method_name, $params, $app_data) {
$text = $params[0];
$number = $params[1];
$result = "echo '$text' | gammu sendsms TEXT $number";
exec("$result");
return $result; }
On my Client (the one that calls the server) I see the output of $result. So my gammu_func is definitely working... He just doesn't execute
Code:
exec("$result")
I know that syntax is right cause I tried it in a different php file. I think it has something to do with the user rights. I don't think I have the privileges to run that command ...
View 2 Replies
View Related
Aug 2, 2010
I'm trying to install Mandriva Spring 2010 for a friend on his laptop after MS Windows crashed. The installation appeared to work, but I've got an odd networking problem - firefox is unable to load URLs. Every URL I try returns a server not found error.
When I drop into bash I'm able to do the following
Code:
ping 66.102.9.103
ping google.com
However when I try
Code:
wget http://google.com
I just get a message that tells me that wget is "unable to resolve host address google.com'". This is odd - ping is able to resolve google.com, but wget isn't. I assume that firefox and Konqueror both have the same problem. Could it be cause I've specified the http protocol?
View 11 Replies
View Related
Mar 24, 2010
So I've read a bit and it seems that this is okay and secure. But I wanted to double check here with everyone, because I trust here more than just about anywhere. I've read about the hipporemote (which is pretty cool) and I have it working. Basically I want to make sure my system is still secure.
1. I had to open a port on my firewall for the VNC connection.
2. I turned on the Remote Desktop
2a. Checked Allow other users to view....
2b. Checked Allow other users to control....
2c. Checked You must confirm.....
2d. Checked for password, and put in a password
2e. Checked Configure network automatically to accept connectios
So with doing all of that, am I ok? I think so, especially since it says its only accessible on my local network. But I just wanted to hear from people who know more than I do that I don't need to worry any more than normal about others accessing my machine. I'm mainly thinking 2e, I don't fully understand what's going on there.
View 9 Replies
View Related
May 6, 2010
Unable to mount NFS server on the client.
Getting the following error.
mount: RPC: Remote system error - Connection timed out
View 3 Replies
View Related
Jun 20, 2010
I am able to boot from the Ubuntu 10.04 LiveCD fine, but the Kubuntu CD fails to boot. Trying to run Kubuntu sends me to a command line and after the first three steps of the install option I am again sent to a command the line. I have burnt and verified several Kubuntu CDs and each time I get this result. I am running Ubuntu, but I would like a fresh install of Kubuntu (I would rather not just install kubuntu-desktop).
View 1 Replies
View Related
Jan 9, 2011
I have a usb modem which I plug into my ubuntu 10.10 system for a dial-up service. The modem is recognised by wvdial and dials properly, but the connection is not established.I get "Unable to run /usr/sbin/pppd" (although pppd is certainly in /usr/sbin), followed by "Check permissions of specify a 'PPPD Path' option in wvdial.conf", and finally "Connected, but carrier lost", then it gives up.
View 5 Replies
View Related
Jan 10, 2011
I'm having an issue with a BIND server. After a restart, (or randomly, I assume whenever a cache expires,) when I try to resolve any domain I get a "Host yahoo.com not found: 2(SERVFAIL)" Eventually it starts working and works fine till the cache expires again;
[Code]...
View 1 Replies
View Related
Jan 21, 2010
I can't get a program (wbar) to run directly from my user account, it fails saying "Image not found -> maybe using a relative path?". But if I run su -c "wbar", it shows up and manages to load the image. I think it has something to do with ImLib2 or whatever loads the image. I checked permissions on libImlib2.so.1 and it's world-readable and executable. Can libImlib2.a be causing this problem, set to 644? What else should I be checking?
View 2 Replies
View Related
Feb 19, 2011
Having an odd problem running a mysqldump via crontab. I have the script running on other servers and they work fine, so not sure how to actually troubleshoot, but the script looks like the following;
If I run it as a cronjob as root, it finishes in a second and a 20k file is there. If I run it from the command line as root it does the backup (takes a few minutes) but does complete the backup and can be unzipped and read successfully.
View 3 Replies
View Related
Jul 21, 2010
I installed freenx-0.7.3-i486-1alien.tgz on the server (with Slack 12.1), all according to instructions. I installed the no machine nxclient 3.4.0-7 on the client (with Slack 12.2). I ran setup and configured. I used the default no-machine keys, not custom ones. Since authentication failed at the beginning, I enabled DBauthentication, and added my user and password, which seemed to allow authentication to occur.
Here is my node.conf:
# node.conf
#
# This file is provided by FreeNX. It should be placed either into
# /etc/nxserver/node.conf (FreeNX style) or /usr/NX/etc/node.conf
# (NoMachine NX style).....
View 93 Replies
View Related
Mar 27, 2009
I hope I haven't missed this in another forum but was tough to search for.While administering my new centos 5.2 x86 server through SSH I am successfully able to issue
View 11 Replies
View Related
May 5, 2011
To be sure that the remote desktop was working, I tried from home, where I have both the laptop I want to connect to and the laptop from which I make the connection. It worked without any problem, but now I'm trying to connect from my work place and it's not working anymore. Both are connected to the same VPN, so I don know where the problem comes from.
View 8 Replies
View Related
Apr 11, 2011
System:Tri-head, dual-card: GeForce 9500 GT, GeForce 8400 GS
Dual-boot: openSUSE 11.4, Ubuntu Natty
Driver: nvidia proprietary (260.19.44 in openSUSE, 270.30 in Ubuntu due to kernel version)
xorg.conf: same for both
Results: All three heads work just fine in Natty; secondary screen fails in openSUSE:
Code:
[25.164] (EE) NVIDIA(1): Failed to initialize the NVIDIA GPU at PCI:2:0:0. Please
[25.164] (EE) NVIDIA(1): check your system's kernel log for additional error
[25.164] (EE) NVIDIA(1): messages and refer to Chapter 8: Common Problems in the
[25.164] (EE) NVIDIA(1): README for additional information.
[25.164] (EE) NVIDIA(1): Failed to initialize the NVIDIA graphics device!
[25.164] (II) UnloadModule: "nvidia"
[25.164] (II) UnloadModule: "wfb"
[25.164] (II) UnloadModule: "fb"
But nothing is jumping out at me in the output of dmesg. I also don't see any additional system or kernel logs in /var/log. I'll google some more on that front. One other fun fact: nvidia-settings fails to run in openSUSE. Unless I launch it under gdb. Then it starts up and runs as expected. (And the second screen ain't there, as expected.) Here's (what I think are) the relevant items:
Xorg.0.log - Pastebin.com
dmesg - Pastebin.com
xorg.conf - Pastebin.com
Additional output available upon request.
View 6 Replies
View Related
May 2, 2011
After a massive meltdown with the upgrade, I finally got the system put back together. Had to reinstall grub. It now defaults to a version that says "Generic - pae". When choosing this from the grub menu, it always hangs on the Ubuntu splash screen; however, I found that when I choose "previous Linux versions" from the grub menu, then choose the Ubuntu-generic, everything works fine - other than my initial bad impression of unity - but it works, at least.
why my default choice in grub doesn't work, and what I need to do to fix it? Below is a cut and paste from /boot/grub/grub.cfg. The first entry is the one that does NOT work, and the first entry after "submenu" is the entry that DOES work.
menuentry 'Ubuntu, with Linux 2.6.38-8-generic-pae (recovery mode)' --class ubuntu --class gnu-linux --class gnu --class os {
recordfail
set gfxpayload=$linux_gfx_mode
[Code]....
View 4 Replies
View Related
Mar 18, 2011
I recently picked up an external HD which I partitioned, formatted and can mount just fine under Debian. When I plug in the device, I can see an appropriate sda1 entry for my partition in /dev. However, when I attempt to use the device in Gentoo (the system I bought the drive to back up) it seems to not be recognized. I still get some new entries under /dev when I plug it in, but no specific partition number is recognized. On Debian (where it works) here is the output of dmesg after plugging in the device:
Code:
[ 9179.847274] usb-storage: device found at 8
[ 9179.847277] usb-storage: waiting for device to settle before scanning
[ 9179.848514] usb 5-5: New USB device found, idVendor=059b, idProduct=0070
[ 9179.848520] usb 5-5: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 9179.848523] usb 5-5: Product: eGo USB
[ 9179.848526] usb 5-5: Manufacturer: Iomega
[ 9179.848528] usb 5-5: SerialNumber: 090000000000D517
[ 9184.844890] usb-storage: device scan complete .....
I have to admit that I'm kind of baffled by what is going on here. It would seem that in Debian the drive is initially treated as a cdrom device and then my partition is seen, but the same is not occurring in Gentoo. How I can make the sr0 device work in Gentoo? Am I missing a module?
View 3 Replies
View Related
Sep 12, 2010
I'm looking for a useable remote desktop solution that works like Microsoft's RDP.The included "remote desktop" vnc server in Ubuntu doesn't work because every time I want to log in remotely, I have to first go sit down in front of the machine running ubuntu, log in, disable desktop effects, then manually adjust the desktop resolution to fit the target guest machine. I can't really do that if I'm on my laptop at the airport.
Some things I have tried:NoMachine NX does not work because once I've launched applications remotely on my laptop there's no way to get them back once I'm at the machine locally. Also, there's a sound feature, but it doesn't work. Remote X11 doesn't work for the same reasons.
1. I need to be able to launch an application remotely, then when I get home, go sit at the machine locally and use that application there without having to re-launch it.
2. I need to be able to hear the sound playing on the remote computer.
3. I need it to work with desktop effects enabled.
Essentially, I want it to "just work" the way Windows' Remote Desktop works.
View 2 Replies
View Related
Jun 27, 2010
No sure exactly what the problem is here? I am trying to get a X app running from a remote site on my desktop. I am using this proceedure:xhost +remote host xauth on local host the get 'Cookie'.
scp Cookie to remote host
xauth merge Cookie into .Xauthority
ssh to remote.
export DISPLAY=local host:0
xfig
xfig fails with "Error: Can't open display: local:0"
If I start another X using '-ac' ( not authinaction) and put to local:1 , all is well.
View 4 Replies
View Related
Dec 2, 2009
I've successfully mounted a network share with mount.cifs for the past 2 years using fstab with credfile.
[Code]....
Yesterday I moved this system to a new datacenter, but did not alter fstab or the credfile. The //server/share directory has IP rules in place, but this was updated with the new system IP while we moved the system. Now, I am mysteriously unable to automount //server/share. The local error is 13 (permission denied). The Windows server we are mounting returned a code that is defined as "username is valid but password is incorrect" Again - no changes (content or permissions) were made to my credfile or fstab entry. I've restarted netfs a few times, including rebooting the system twice. What is baffling is I can successfully mount //server/share via command line: Code: mount -t cifs //server/share /mnt/mycooldir -o username=foobar,password=1234
The username and passwords are identical in credfile and the mount options - I copied & pasted username / password from the credfile itself.
View 2 Replies
View Related
Jul 16, 2010
I'm having some problems bringing up my wireless card at boot time on my Red Hat Linux 9.0 box. After some investigation with the boot scripts, I noticed that it was having problems with the DHCP negotiations when the ifup wlan0 command is issued.I then tested the command outside of the booting process and everytime the command is issued the first time, the dhclient fails to get any DHCP offers and returns with the message Unable to obtain a lease on first try. Exiting. and then exits.
If I then issue the same ifup command again a second time, it successfully receives a DHCP offer from the router and receives the needed IP address, and after this, the Internet connection on the box works fine. It is consistently doing this everytime. Why is it failing to obtain a lease the first time?
View 1 Replies
View Related
Feb 19, 2010
I mean something like Teamviewer so i can click-click and be there in no time, without knowing my IP (it's dynamic so that's a toughy, when i was using VNC i had to write a crontab script that uploaded my IP to a place i could always access every hour). Looked trough tons of apps, Googled for hours, found nothing.
View 4 Replies
View Related
Jun 3, 2010
i set up a dmz to have a internet web server and ftp server, and ssh only from local network, so i wrote a iptables script to load during boot :
[Code]...
The problem is that everything works fine ( i have the same rules for other services such as samba, nfs, mysql on another server) BUT ftp there is no way to make it work. not even locally.when i try to connect, i log in, but while listing the directory i get MLSD ... and it hangs like this for a moment, then i get error message "connection time out" , "impossible to list directory". if i turn off the iptables script no problem,ftp works fine.. but why all services work and ftp no?
how do i have to modify the rules? what is strange also is that if i set as OUTPUT policy "accept", the server seems to be offline."host unknown" error message. I was thinking the rule INPUT is fine cause at least i can login, but the dir list is not going out, so gotta modify output rules. or state?
View 7 Replies
View Related
May 10, 2010
I am trying to connect to a windows 2000 VPN server at work, with my current settings in DOES connect to the VPN and i can ping the domain server which is 10.1.1.2 but the first issue is i cannot ping the other computers on the network(via hostnames) can't remember the ip address of the other machines . second issue is when the connection is established and i RDP into 10.1.1.2 ok great i am connected to the server but any interaction in the RDP session even moving the mouse on the screen kills the session and the VPN connection fails.
Running Ubuntu 10.04 LTS 64Bit
Image of current settings in network manager:
Syslog:
Code:
May 11 12:08:04 oliver-desktop NetworkManager: <info> Starting VPN service 'org.freedesktop.NetworkManager.pptp'...
May 11 12:08:04 oliver-desktop NetworkManager: <info> VPN service 'org.freedesktop.NetworkManager.pptp' started
[Code].....
View 1 Replies
View Related
Mar 15, 2010
Regarding the usage of our PKI, some security consultants suggested to let our root CA offine (hardware online but disconnected from the network). However, when it is offline, I don't understand how to sign certificate request or to publish CRL. How a PKI works with the root CA offline? USB sticks?
View 4 Replies
View Related
Mar 16, 2010
I have debian as an NFS client. I would like to mount a remote NFS with a specific user permissions (to specify the remote user account)
View 2 Replies
View Related
