Security :: Give Some Details For Ssh Passthrough?
Feb 26, 2010
can someone give me some details for ssh passthrough from ssh version1 to ssh version 2. ssh version1 to version1 and version 2 to version 2 works wel, but version 1 to version 2 is asking for a password ...
I'm desperately in need of a Linux software that would give me a report on my internet connection. I'm connected to this pathetic ISP who's connection from my end keeps going down every two minutes (even though for a little while), but my downloads keeps getting interrupted, and it's generally frustrating. One moment I can have a DL of 512kbps and the next moment it's 0kbps. At times browsing won't be available, but other things like chat will be working fine.
The problem is, I've signed up with them on an annual package and made advance payment. Now they keep telling me there is nothing wrong with their internet provision and I cannot ask for my money. That is why I need some app that will sit in my PC and monitor the connection o24/7 and give me a report of how many times the connection kept going down, average speeds, etc.., which I can give to them.
I've tried installing Nagios, MRTG and others from synaptic, but don't even know how to start them up - they're not even appearing in the main menu. I tried to load MRTG from the terminal but it tells me:
Code:
ERROR: Mrtg will most likely not work properly when the environment variable LANG is set to UTF-8. Please run mrtg in an environment where this is not the case. Try the following command to start:
env LANG=C /usr/bin/mrtg
I even tried what it tells me, but no luck and I don't even know if I'm on the right track by using Nagios or MRTG?
went through the tutorial on FedoraSolved for securing ssh. I installed denyhosts with yum and then tried to run it with the command line command"sudo /etc/init.d/denyhosts start" but I got the message"Job Failed. See system logs and 'systemctl status' for details [FAILED]"and in the application "services" in the applications menu,t shows an exclamation warning and says that "This unit has failed"
So on one of the Linux systems here (2.6 kernel if it matters), there's some weirdness regarding trying to ssh into the system. Basically, if you give it the wrong password on the first ssh attempt, it will give you two more attempts, but even if you give it the correct password, it still won't let you in on those subsequent attempts. (If you give the correct password on the first attempt, it will let you in.)
I have my own dedicated server box running (using it for game servers). I access it via ssh and I have root control of it. It has FEDORA Operating System. I wanna give FTP control of different directories to different users. Right now there are no other FTP users except root. I have installed vsftpd and dont know what should I do next? How do I add users (who can read/write/delete files) and How do I restrict them to their home directory?
Here is what I want: username:client1 password:12345 home directory: home/server1 username:client2 password:12345 home directory: home/server2
We use PAM to control access to our RHEL4 servers. We would like PAM to give a message, of our choice, when users who are not allowed to login try to login. PAM's default is to let the user try 3 times without any explanation.
I am not at all convinced by the idea of giving permissions to read,write and execute as these Learning Management Systems say. Let me know what you people have to say? What is the best practise in such situations? I have to get all these LMS run on same web server.
I have recently secured a server by preventing root from logging in via SSH. Now I log in with a non-root account and use 'su' when necessary.However, now I can't do something I used to do, which is open 'sftp://user@ipaddress' in nautilus and be able to edit files as root. Is there anyway to get nautilus to give me root permissions on the server? Or at least end up with root permissions in a GUI text editor on my computer? I don't mind if I have to use bash to start the process, once I can get a GUI for editing files.
Note 1: Yes, I realize I could ssh in and use nano/vi etc, but I'd rather use my graphical text editor. Note 2: The server does not run X, so I can't just forward it.
I have a log server that collects logs from all the cisco devices on our network.he company policy states that any logs should only be accessible by root. So I have the following permissions set on the directory, as well as everything inside the directory where the cisco logs are kept.
Code: drwx------ 65 root root 4096 Apr 29 7:38 rsyslog The cisco folks are requesting access to these logs, which is allowed by company policy.
I found myself in troubles. I was trying to get dts passthrough works in many many ways with no success. Finally I (desperately) decided to try OSS rather than ALSA following this guide: [URL].. And there the things went wrong. I ended up with no sound at all so I tried to reinstall alsa again but with no luck.
basicaly what I did after following the guide was: sudo apt-get install alsa-base alsa-utils. sudo dpkg-reconfigure linux-sound-base //and choose alsa
but still, for example: $ alsamixer puts: alsamixer: function snd_ctl_open failed for default: No such file or directory $ /etc/init.d/alsa-utils start * Setting up ALSA... [ OK ]
but no alsa process at all. $ aplay -l aplay: device_list:223: no soundcards found. It seems to me like sound card drivers are gone..
Right now I have a VPS that I tunnel through using SSH/Putty/Proxycap. I use it for a certain program which uses a certain port X for authentication, and a different port Y for its data. However, due to certain security protocols I need port X to be somewhat "transparent" so that the IP from the originator will be shown - whilst tunneling data through port Y. The conditions though, are that I cannot just change the X/Y port values in the application itself, these are company specific.
How would I go about doing this? Because right now, my understanding is that if Putty calls for a certain application to go through a socks server, ALL its ports will be directed at that. I want a certain port to be passthrough.
So, I am looking to implement an FTP server with Isolated Client accounts/directories where a client can only access what's in their directory. I also need to provide my internal user's (content managers) the ability to upload, delete, etc from all of the Client accounts. The simple part is creating the secure client accounts. It's a matter of changing DIR_MODE in adduser.conf to 700 or 770, creating a user, having the FTP server chroot them to their home directory, revoke/restrict shell/ssh access and maybe even slap on some ACL to prevent botched permissions.The hard part is figuring out how to give my power users the ability to access all of their folders without thrashing security.
My first thought was to put all of the client user-groups in a parent group and having my internal users inherit group permissions..but you can't have groups inside of groups.My second thought was to put all of the client users in the same group and prey that the FTP chroot is enough to keep them from poking around but then I have the problem of how do my internal users access other user directories if they are chrooted. Do I create a second server without chroot.do I create some weird nested homedir structure..I honestly have no idea how to satisfy both requirements (secure client accounts and privileged user accounts). I need my privileged users to authenticate against Active Directory via Likewise open, LDAP, etc and I don't care how the clients authenticate. Though, I would prefer to have both file and FTP-server level protection just to make sure no one can see the other client's data.
Is it possible to install XBMC onto Ubuntu Lucid and still have passthrough audio to a connected receiver (i.e. a workaround with Pulse)? I have an Acer Aspire Revo R1600 connected via HDMI to my Onkyo reciever. I am able to get desktop sounds and play MP3 files from XBMC, but passthrough has been a bear. If I tell Pulse that my sound device is analog, for some reason I can get XBMC to pass through audio. However, I would like to keep system sounds and have the passthrough ability if it's possible. As I understand it (from about two weeks of fidgeting) this is a limitation of Pulse and it's lack of pass through support. It seems so simple. I've tried multiple different .asoundrc configirations none of which have gotten me there. I've upgraded Alsa. I'd rather not run XBMC live if I dont have to. I'd like to have the ability to have a workstation for when I need it. I've upgraded to the latest NVIDIA driver available from their website - 195.36.31.
I know that ubuntu is highly resistant to windows based viruses but what if I open a attachment or click on a link within a email that is infected with a linux or platform agnostic virus?
I have the audio out of the media machine passed into the line in on my workstation. It's just handly to have the audio pass in this way so that i can manage the volume or headphones or whatever from one machine.
This worked, and worked well, for a very long time. I recently reinstalled the workstion, FC14 still. After the reinstall, my passthrough doesn't work.
If i start up some media on the media machine, and then open up the volume control on the workstation, i can see the volume meter moving along with the audio, but nothing plays out of my speakers.
Is there a way to see details for a packet before updating it?
Like, if you do:
It will give you a list of packets that can be updated, but you don't know to what version and why.
How can I fund out, before updating, what is the version that the new packet will have.
Here I am talking about updates made from the command line.
On a Desktop system, you have that nice list in update manager, and if you click on an item you can see the new version and some details (what will fix, links..)
Is it possible to see what are build-in, in a package? In example, freeradius lacks det TLS support, or exactly it lacks the EAP/PEAP support, which is requring TLS.
aptitude show freeradius gives this, and there are some required ssl packages, but is this the way to do it?code...
I am running UBUNTU / Windows Dual Boot on a HP Pavillion computer. My problem is that on the windows side I have lost sound and internet ( Via Ethernet ). Everything works fine in UBUNTU. So I guess I need to reinstall Ethernet and Sound drivers. Problem is how do I establish what drivers I need - Ethernet card , and Sound card.
I would like to convert all my mp3 to ogg file. I got a script by googling. Script is
Code: for fic in *.mp3 do ffmpeg -i $fic -acodec vorbis -aq 60 ogg/${fic%.mp3}.ogg; mv $fic mp3/ done
But the problem is the ogg doesn't contains the details like title artist, album art etc. Ogggconvert help me to do that but there is no cli for that. Is there any script to copy details of mp3 to ogg
I have a binary file which display a lot of message when I run that binary. This binary file is statically linked with many files which are unknown to me. Is there any way to know from which file (obj or static lib) does these printf come from?
There is a way to get to know about the source of a symbol, but I am interested about the source of a string.
How do I get the details of the last 10 or 5 mount times for my linux system. Which also includes the times it was mounted from a foreign system running in ram like puppy linux or by another OS on the same hard disk.
Using redhat linux 4 update 5 find out the raid details of a server. I have a machine which is a t remote site. i thing all the disk slots are populated but only two disks are used. I can see those two disks presented as a volume to my operating system. I would like to confirm if the other disks are there or not
Problem connecting to a software sourceThere was a(possibly temporary) problem connecting to a software source.Please check the detailed error for further detailsWhen i click on Details a new window appear with this messageDownload (curl) error forError code: Connection failed Error message: Couldn't resolve proxy 'HTTP_PROXY'Excep this no other warning messages appeared, everything work OK, downloads, updates, torrents, etc.This message do not appear again, until next startup.
is there a way to retrieve the processor model without taking information from bios? I don't know which processor is really mounted. I want to set up the right processor timing, but I don't know the processor type. Every time I change the timing for the processor in BIOS another processor type is determined (I should be an Athlon XP +1500, I think, but I don't know really).
I think with less /proc/cpuinfo the results depends on the timing that is set in bios. So could you tell me how I can find out which processor is really mounted?
i used to edit the mp3 song details such as artist, title, song number details and the album art in windows, i edited the same in UBUNTU using the "easy tag" but the album art is not visible when i transfer the song to my NOKIA phone as well as the artist details are not available when i am playing the songs in windows machine.
program to edit the sing details in UBUNTU so the edited details are visible in phone as well as windows machine.