Server :: Trying To Build A Ssh Jumpbox - Allow To Jump To A Private Ip Scheme
Jun 12, 2010
i am trying to build a server that will allow us to jump to a private ip scheme. GB1 65.20.x.x gb2 1.1.x.x if i ssh to the 65.24 ip and configure gb2 i lose access to the server completely. am i missing a route somewhere? BTW this is ubuntu server 10.04
We are looking to distribute an internal product as .deb files in a private repository and I am looking for a comprehensive guide for doing this.
We are already building the .deb files and now would like to create a (couple ?) of environments to separate out development/testing/staging and production work.
Can I get pointed to:
1. The right place to post this question (if this is incorrect).
2. Assuming this is the right place to ask and a guide exists, a link to the guide to set this up correctly.
3. If there exists no guide, a place where I can start/put a guide.
My desktop server serves up files via a number of protocols and I connect to it via SSH and Avahi. Today I tried connecting to it via SSH, but it timed out. I was able to ping it, and a port scan reveals all the ports I have open on the network. THe problem is that I can't connect via SSH, HTTP, AFP, SMB or any other protocol I have established.Is there a way to jump start a system in a situation like mine? I have a 6 month uptime going, but I'm taking it down soon for some hardware upgrades, so a hard restart is not out of the question, but I'd rather not. I also reset the router without a solution.
I'm installing Centos 5.5 on a HP ProLiant DL180 Server with ~8 TB of hard disk (4 disks that have been pre-RAIDED), from an installation DVD.
Normally when I get to the partitions screen, I would select "remove all partitions etc".
But this gives me an error message "Your boot partition is on a disk using the GPT partition scheme but this machine cannot boot using GPT. This can happen if there is not enough space on your drives for the installation."
Pressed OK, tried the other three partition options but they led to the same outcome.
Tried Advanced storage configuration: Showed that there was one hard drive (c0d0) with ~ 8 TB of space.
I figured I should create a root sector, set one up with 100 MB of space, ext3, set the mount point as /.
Created a software raid of the remaining space.
Trying to go "next" gave me a similar error about GPT partition scheme. Trying various other configurations all gave similar errors about the GPT scheme.
What do I need to do? Some earlier hard format of the disk or something?
I have been using a self signed certificate on my ubuntu server 10.4, using Apache.Today I bought a certificate from optimumssl. I created the csr and copied the key to the /etc/ssl/private as before. I then copied the newly supplied certificate to /etc/ssl/certs as before and changed my /etc/apache2/sites-enabled/domainname to pint to the correct certificate name.I now can't start Apache as I have this error below[error] SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
i am working on fedora 10 and configured dns on my college lan which already has it's dns at 192.168.5.20 .So i configured my private dns server at 192.168.101.91 which is my ip too.And the domain name is the host name of my system for example server.onkie.com.MY dns port 53 is shown when i do nmap localhost but but doesnt show when i do nmap 192.168.101.91 .Also when tested my server on other computers on my lan with there primary dns as 192.168.5.20 and secondary as 192.168.101.91 they cant access my site at my system with the name server.onkie.com . nmap localhost
One of my clients is considering implementing GPG or a similar technology to encrypt internal emails. (They have a different system in place already for external mail.) I've done some reading on the subject but can't seem to find any information about how one might set up a keyserver. All the discussions I've seen so far talk about uploading the public keys to a server like keyserverDoes anyone know what software packages might be used to set up our own private keyserver on a Linux machine?
My goal is to have users(Unix Users like root on host1) use evolution /sendmail to send and receive emails between users( Unix users either from host1 or any other host on n a private network. The network is a private network with a few servers without any connection to Internet and no DNS. They resolve one another by /etc/hosts. with smtp configured am able to send and receive emails on one machine(host1) from unix user abc on host1 to user xyz on host1 and vice versa. the commad i used to test is host1@abc #echo "this is a test mail" |mailx zyx@host1 But when i tried sending from user abc on host1 to user xyz on host2 its giving error for DNS unable to resolve hostname.
the commad i used to test is host1@abc# echo "this is a test mail" |mailx zyx@host2 create a simple sendmail config so that i can send mails between multiple hosts using unix usernames within one network. I can use one of the server as mail server and rest as clients. I dont want to configure any other softwares for pop or imap access. I want to keep it simple and use evolution on the clients to send emails between one another on the private network without internet.
I have a server with Private IP and without any public IP. I want to transfer files to the private IP. I can log in to the Private IP through SSH. So basically I installed vsftpd in the server with Public Ip and tried to ftp the public ip from the private ip but it is not working.
I'm currently successfully using the Terminal Server Client to connect to an SBS 2003 server at a remote location. I've been trying to figure out if it's possible to connect to any of the XP machines on the LAN behind it. I currently have to use RWW in IE on a VirtualBox XP machine to do that, and I'd love to be able to get rid of VirtualBox completely.
The server has 2 NICs, one connected to the internet, and the other connected to the LAN. There is only one public IP. The computer I'd most like to connect to has a static, private IP. Anybody done anything like this or have any thoughts on how to get it to work?
My Ubuntu server is now providing routing duties to my network, but I'm having trouble opening ports to my network. I have a DynDNS account, so the IP is always current, but I can't ping even my IP directly.
My network map looks like
Internet > SpeedTouch DSL modem with DHCP > eth1 > Ubuntu > eth0 > LAN
With the modem providing a 192.168.1.xx IP to eth1, I can browse fine. The default gateway is my modem. I switched to the public IP of the modem so I could use iptables for firewall duties, but I was locked out of the internet. No gateway was set when I did that, but eth1 received the public IP of my modem.
I run a server that is connected to several other boxes in a private network (192.168.0.0). I have had no problems previously, but upon a reinstall of Debian squeeze I have no connectivity to the private network: a ping of other addresses on that network fail. Ping and connection to outside world is fine. This box is configured similarly to another on this private network which connects successfully. I have quadruple-checked all my basic information. I post my ifconfig below of the malfunctioning device, then the ifconfig for equivalent nic on a box connected succesfully to the private network.
Questions:
1.Could it be a cable problem? (I don't see how since the cables have not been changed I do not believe since my reinstallation).
2. What about the difference in the last lines of eth1 below and eth2 of the successful box. Is it significant that the bad eth1 reads Memory:fc3a0000-fc3c0000
I keep getting the above message when trying to login to my server using a private key,is there something I am missing from the configs here?Quote:
#$OpenBSD: sshd_config,v 1.73 2005/12/06 22:38:28 reyk Exp $ # This is the sshd server system-wide configuration file. See # sshd_config(5) for more information.
Im using postfix on my server and i need change a ip adresses for mail boxes.Example : xxx@xxx.com using x.x.x.1 ip adres.and i need yyy@xxx.com how it can use x.x.x.2 adress.How can i do that ?And i need count which mail how much mail sended .How can i count and limit ?
I later ran sudo apt-get install ubuntu-desktop to see if that would help.
Code: #cat /etc/issue Ubuntu 10.04.1 LTS l Code: #sudo startx Fatal server error: xf860OpenConsole: Cannot open /dev/tty0 (No such file or directory) I assume this is because it probably doesn't have a video card. [Code]...
system is RedHat v4. I removed root: admin-name@domain from /etc/aliases then ran /usr/bin/newaliases.
The admin does not get the emails but now the email generated by the cronjobs is being sent to my-name@domain outlook email from "root@localhost.localddomain". No other changes were made. Where should I start looking for the definition of sent crontab email to my-name@domain?
Me and my friends have a website about games and stuff. The web hotel we use clears the app-pool when it has been inactive for 15 minutes. We don't have that many users yet so this is a problem because it takes ages to load if it has been inactive. I came up with the brilliant idea of calling the website with a script from my private server at home every 5 minutes or so. That way it would never go down.
I used some lines from another of my scripts: wget -q -O - http://homepage.se/ > /path/to/a/file.txt cat /dev/null > /path/to/a/file.txt and put it in crontab.
The script runs and all and I think it's better now but we can't know for sure if it is the scripts doing. Sometimes it's just as slow as ever and I start to think the script doesn't do anything. I've tried adding more wget-lines to fetch some different pages from the site and now running it every 3rd minute. No difference. Does anyone know another way to call a website in a way that would solve my problems? Am I using the wrong options with wget maybe? I've tried lynx (and piping to file) but it didn't work.
I'm probably dreaming, but I have a hobby project in mind that I would like feed I have an opportunity to purchase a 3 year old fully populated (14 x 3Ghz dual Xeon nodes) IBM bladecenter relatively inexpensively.I thought it would be fun to set it up as a beowulf cluster with open source xen and test the market to see what people would pay for Private virtual machines.
My thoughts are to use 64 bit Centos 5 as a base to get the beowulf cluster up and then load xen.I haven't really looked at the market but I figure I should be able to run 50 private virtual machines charging say $50 per month. I figure I can use rsync to backup the virtual machines to a different location. I plan to connect to linux based Network Storage running 3 x sata 1TB drives, probably via iSCSI. Along with the drive capacity currently on the blades I should get 2-3Tb online capacity over a Gbit network. (Cisco 14 + 4 network switch module)
I realise I have a bit of setup work to do and before I go investing a lot of time and a little money I'd appreciate some pragmatic advice as to why this may be a stupid venture.
a friend of mine is doing a small website-project in school (group of ~6 people). They want to use git as VCS and need acces to a server. I have an account on the server from university, but - of course - no root access.
I could create private/public keys for them, to SSH into my account, but I don't want them to have this power I found 'git-shell', which seems to be used for restricted access with git (although I'm not sure whether I understood the functionality).
My question is: Is it possible to configure SSH keys in that way, that the server runs them (and only them) in git-shell in a specified directory (using ~/.ssh/{config,authorized_keys})?
So that they can - log in with their SSH key - use git, execute scripts etc. - use git push/pull from their private+school PC - work only in a specific directory (like chroot) eg. ~/web-project/
I need to install Trac on a server that's on a private development VLAN (no internet access). Obviously Trac needs to go out over the internet to download/install various things. Does anyone know of an RPM or tarball out there that I can use to install Trac without being connected to the net?
I am kinda stuck while providing solution for the above problem. I have achieved the fail over using keepalived but not sure how can we replicate the data from one server to other seamlessly and have them in sync with each other. My prime requirement for this project is end user should not notice the fail over and replicated copy of data should be available on the secondary as well.
When using the grep plugin to VIM, I can search the current directory for all occurrences of a string within a set of files, like this::grep Ryan *.txtThis outputs something like this:
file1.txt:3:Ryan was here file2.txt:10:Ryan likes VIM file3.txt:5:superuser.com is a fav of Ryan
I have an old acer aspire one that the hard drive has been cooked. the computers fine other then that, so what I'm trying to do is run it using 10.10 net book installed(not installer but actually installed) on a usb drive. I've created the installer on another jump drive and installed it onto the 8 gig using the aspire. everything goes fine, it tell me to reboot so i do and all i get is a black screen with the curser.It responds to nothing and never moves.
I just finished making a clone image on my XP Pro HD and am now ready to install Ubuntu 10.04. Are there any scripts available that will install software that will add more functionality to my new Ubuntu installation? I installed 10.04 on a Dell Desktop circa 2003 with an 80GB HD and 512MB of RAM. Looking forward to using it!! Is this latest Ubuntu release better than XP Pro overall?
Yesterday I configured an NTP Server, and synched a sever with my NTP Server. Now some how my Client clock jumped one hour ahead at 12:00 AM, while HW Clock and NTP Server Clock remained.
Code: cat /etc/sysconfig/clock # The ZONE parameter is only evaluated by system-config-date. # The timezone of the system is defined by the contents of /etc/localtime. ZONE="Asia/Karachi"
I recently upgraded to Maverick. I did a clean install on my system. I am running NVIDIA drivers from the X-Swat repo. Whenever I try to play a mkv file using Gnome Mplayer it is very jumpy and laggy. VLC, using it's new hardware acceleration, won't even display video, though it does output the audio. I experienced none of these problems with my 10.04 setup. I am unsure if it is a player bug, a driver bug or something with the VDPAU library itself.
xterm is scanning lines one by one.It takes time.I did jumpScroll: true ,but it results same. But rxvt is better comparing this. Where would i get the global configuration file for rxvt and xterm?