Ubuntu Security :: Create Private GPG Key Server?
Jan 25, 2011
One of my clients is considering implementing GPG or a similar technology to encrypt internal emails. (They have a different system in place already for external mail.) I've done some reading on the subject but can't seem to find any information about how one might set up a keyserver. All the discussions I've seen so far talk about uploading the public keys to a server like keyserverDoes anyone know what software packages might be used to set up our own private keyserver on a Linux machine?
View 2 Replies
ADVERTISEMENT
Aug 18, 2010
i noticed that all files can be seen by another computer if the drive is accessed
can I stop this? can i set a private folder?
View 7 Replies
View Related
Feb 26, 2010
I have openSUSE 11.2 installed and i need to create a gateway server that allows virtual private network connections. I want to play with my friends some lan games, but we are in different networks, so i want to create this gateway server so we can connect with VPN clients to this server and play freely.
View 7 Replies
View Related
Jun 26, 2011
I have a number of questions related to Ubuntu and private cloud: I would be working on cloud computing for my final year project soonest.
1. What are the things to be done after installing ubuntu to deploy a private cloud.
2. My computer is running 32bit Intel CPU, is there anyway I could possibly install 64bit Ubuntu/Fedora OS on VM installed on this computer?
3. what are the other software applications that I need to install on ubuntu to enable me create a private cloud.
View 9 Replies
View Related
Apr 17, 2011
Some people have said that it's dumb to use the same key for multiple things, but for curiosity's sake, is it possible to convert one's private key to id_rsa? I know that I can convert my public key to id_rsa.pub with ``$ gpgkey2ssh [key ID] >id_rsa.pub'', and that makes me think that there should be a way to do it with my private key.
View 1 Replies
View Related
Mar 18, 2011
When you install sshd and run it with no modifications, then any other machine can connect to your machine without specifying a key. How does this work? Some key is being used, correct? how does the client know what private key to use?
View 14 Replies
View Related
Mar 26, 2010
At the moment we have one SSH server with the private key being on a usb flash drive, and the public key being on the server in authorized_keys2. Now that three more servers are coming online, should we generate new keys, so we have muliple private and public keys (one pair for each server), or use the same two keys to access all the servers
View 5 Replies
View Related
Oct 12, 2010
I have a seperate partition for my "/home" folder. Whenever I install a new distro I format my "/" folder.
This way I was able to access my old home data files since I install using a different username. Everything worked fine until last Sunday.
10.10, unlike other versions of ubuntu, has encrypted my old username in my home folder.
Then using this document [url]
I was able to mount my hard drive again. But all the file and folder names are like this.
Btw I don't remember selecting an option to encrypt my old home directory in the first place, what is this ?
View 2 Replies
View Related
Oct 12, 2010
I am trying to use puttygen to create a ppk file that I can use with putty. I try to import the private key and it gives me the error: Couldn't load private key (ciphers other than DES-EDE3-CBC not supported). Now I obviously know this is telling me that I have the wrong cipher, but what what do I do to use the correct one? Here are the instructions that I used to create the keys.
Also, when I open the key this is the top:
- BEGIN RSA PRIVATE KEY -
Proc-Type: 4,ENCRYPTED
DEK-Info: AES-128-CBC
and then some other stuff that I don't think I should share. But the weird thing (to me atleast) is that it lists CBC right at the top there which is what puttygen wants. Why won't it accept it?
View 2 Replies
View Related
Dec 10, 2010
Long story short: I opted to encrypt my home, enter the passphrase and soon as I log out and rebooted, I got stuck with a message about /var/lib/ICEauthority file and other messages. So I've been trying to fix one issue at the time. The bottom line is that I'm trying to get to my private folder. Dropped in recovery mode:
[Code]...
View 3 Replies
View Related
Feb 18, 2010
In my ~/.ssh I have a number of public keys and one private key (id_rsa). How can I verify which one makes a pair with the private one.Or, can one generate the public one from the private key (in reasonable time)?
View 4 Replies
View Related
Jan 26, 2011
I'm currently successfully using the Terminal Server Client to connect to an SBS 2003 server at a remote location. I've been trying to figure out if it's possible to connect to any of the XP machines on the LAN behind it. I currently have to use RWW in IE on a VirtualBox XP machine to do that, and I'd love to be able to get rid of VirtualBox completely.
The server has 2 NICs, one connected to the internet, and the other connected to the LAN. There is only one public IP. The computer I'd most like to connect to has a static, private IP. Anybody done anything like this or have any thoughts on how to get it to work?
View 2 Replies
View Related
Feb 12, 2011
My Ubuntu server is now providing routing duties to my network, but I'm having trouble opening ports to my network. I have a DynDNS account, so the IP is always current, but I can't ping even my IP directly.
My network map looks like
Internet > SpeedTouch DSL modem with DHCP > eth1 > Ubuntu > eth0 > LAN
With the modem providing a 192.168.1.xx IP to eth1, I can browse fine. The default gateway is my modem. I switched to the public IP of the modem so I could use iptables for firewall duties, but I was locked out of the internet. No gateway was set when I did that, but eth1 received the public IP of my modem.
How can I use the public IP assigned to eth1?
View 6 Replies
View Related
Jun 8, 2011
I have been using a self signed certificate on my ubuntu server 10.4, using Apache.Today I bought a certificate from optimumssl. I created the csr and copied the key to the /etc/ssl/private as before. I then copied the newly supplied certificate to /etc/ssl/certs as before and changed my /etc/apache2/sites-enabled/domainname to pint to the correct certificate name.I now can't start Apache as I have this error below[error] SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
View 1 Replies
View Related
Sep 26, 2010
I have a virtual private server that I am trying to connect to using x11vnc. I ran this through ssh to setup gnome
sudo apt-get install gnome-core
sudo apt-get install gdm
sudo /etc/init.d/gdm start
sudo dpkg-reconfigure xserver-xorg
I later ran sudo apt-get install ubuntu-desktop to see if that would help.
Code:
#cat /etc/issue
Ubuntu 10.04.1 LTS
l
Code:
#sudo startx
Fatal server error:
xf860OpenConsole: Cannot open /dev/tty0 (No such file or directory)
I assume this is because it probably doesn't have a video card.
[Code]...
View 4 Replies
View Related
Sep 22, 2009
i am working on fedora 10 and configured dns on my college lan which already has it's dns at 192.168.5.20 .So i configured my private dns server at 192.168.101.91 which is my ip too.And the domain name is the host name of my system for example server.onkie.com.MY dns port 53 is shown when i do nmap localhost but but doesnt show when i do nmap 192.168.101.91 .Also when tested my server on other computers on my lan with there primary dns as 192.168.5.20 and secondary as 192.168.101.91 they cant access my site at my system with the name server.onkie.com . nmap localhost
[Code]...
View 1 Replies
View Related
Jul 6, 2009
My goal is to have users(Unix Users like root on host1) use evolution /sendmail to send and receive emails between users( Unix users either from host1 or any other host on n a private network. The network is a private network with a few servers without any connection to Internet and no DNS. They resolve one another by /etc/hosts. with smtp configured am able to send and receive emails on one machine(host1) from unix user abc on host1 to user xyz on host1 and vice versa. the commad i used to test is host1@abc #echo "this is a test mail" |mailx zyx@host1 But when i tried sending from user abc on host1 to user xyz on host2 its giving error for DNS unable to resolve hostname.
the commad i used to test is host1@abc# echo "this is a test mail" |mailx zyx@host2 create a simple sendmail config so that i can send mails between multiple hosts using unix usernames within one network. I can use one of the server as mail server and rest as clients. I dont want to configure any other softwares for pop or imap access. I want to keep it simple and use evolution on the clients to send emails between one another on the private network without internet.
View 1 Replies
View Related
Nov 18, 2010
I have a server with Private IP and without any public IP. I want to transfer files to the private IP. I can log in to the Private IP through SSH. So basically I installed vsftpd in the server with Public Ip and tried to ftp the public ip from the private ip but it is not working.
View 1 Replies
View Related
Jul 27, 2011
I run a server that is connected to several other boxes in a private network (192.168.0.0). I have had no problems previously, but upon a reinstall of Debian squeeze I have no connectivity to the private network: a ping of other addresses on that network fail. Ping and connection to outside world is fine. This box is configured similarly to another on this private network which connects successfully. I have quadruple-checked all my basic information. I post my ifconfig below of the malfunctioning device, then the ifconfig for equivalent nic on a box connected succesfully to the private network.
Questions:
1.Could it be a cable problem? (I don't see how since the cables have not been changed I do not believe since my reinstallation).
2. What about the difference in the last lines of eth1 below and eth2 of the successful box. Is it significant that the bad eth1 reads Memory:fc3a0000-fc3c0000
View 5 Replies
View Related
Mar 1, 2011
I keep getting the above message when trying to login to my server using a private key,is there something I am missing from the configs here?Quote:
#$OpenBSD: sshd_config,v 1.73 2005/12/06 22:38:28 reyk Exp $
# This is the sshd server system-wide configuration file. See
# sshd_config(5) for more information.
[code]...
View 8 Replies
View Related
Jul 6, 2010
Im using postfix on my server and i need change a ip adresses for mail boxes.Example : xxx@xxx.com using x.x.x.1 ip adres.and i need yyy@xxx.com how it can use x.x.x.2 adress.How can i do that ?And i need count which mail how much mail sended .How can i count and limit ?
View 2 Replies
View Related
Jun 12, 2010
i am trying to build a server that will allow us to jump to a private ip scheme. GB1 65.20.x.x gb2 1.1.x.x if i ssh to the 65.24 ip and configure gb2 i lose access to the server completely. am i missing a route somewhere? BTW this is ubuntu server 10.04
View 5 Replies
View Related
May 13, 2011
I want to know that it is possible to do public and private ftp server in one host without using tcp wrapper.
View 1 Replies
View Related
Nov 4, 2010
system is RedHat v4. I removed root: admin-name@domain from /etc/aliases then ran /usr/bin/newaliases.
The admin does not get the emails but now the email generated by the cronjobs is being sent to my-name@domain outlook email from "root@localhost.localddomain". No other changes were made. Where should I start looking for the definition of sent crontab email to my-name@domain?
View 3 Replies
View Related
Jun 30, 2011
Me and my friends have a website about games and stuff. The web hotel we use clears the app-pool when it has been inactive for 15 minutes. We don't have that many users yet so this is a problem because it takes ages to load if it has been inactive. I came up with the brilliant idea of calling the website with a script from my private server at home every 5 minutes or so. That way it would never go down.
I used some lines from another of my scripts:
wget -q -O - http://homepage.se/ > /path/to/a/file.txt
cat /dev/null > /path/to/a/file.txt
and put it in crontab.
The script runs and all and I think it's better now but we can't know for sure if it is the scripts doing. Sometimes it's just as slow as ever and I start to think the script doesn't do anything. I've tried adding more wget-lines to fetch some different pages from the site and now running it every 3rd minute. No difference. Does anyone know another way to call a website in a way that would solve my problems? Am I using the wrong options with wget maybe? I've tried lynx (and piping to file) but it didn't work.
View 7 Replies
View Related
Feb 16, 2009
I'm probably dreaming, but I have a hobby project in mind that I would like feed I have an opportunity to purchase a 3 year old fully populated (14 x 3Ghz dual Xeon nodes) IBM bladecenter relatively inexpensively.I thought it would be fun to set it up as a beowulf cluster with open source xen and test the market to see what people would pay for Private virtual machines.
My thoughts are to use 64 bit Centos 5 as a base to get the beowulf cluster up and then load xen.I haven't really looked at the market but I figure I should be able to run 50 private virtual machines charging say $50 per month. I figure I can use rsync to backup the virtual machines to a different location. I plan to connect to linux based Network Storage running 3 x sata 1TB drives, probably via iSCSI. Along with the drive capacity currently on the blades I should get 2-3Tb online capacity over a Gbit network. (Cisco 14 + 4 network switch module)
I realise I have a bit of setup work to do and before I go investing a lot of time and a little money I'd appreciate some pragmatic advice as to why this may be a stupid venture.
View 2 Replies
View Related
May 15, 2011
a friend of mine is doing a small website-project in school (group of ~6 people). They want to use git as VCS and need acces to a server. I have an account on the server from university, but - of course - no root access.
I could create private/public keys for them, to SSH into my account, but I don't want them to have this power I found 'git-shell', which seems to be used for restricted access with git (although I'm not sure whether I understood the functionality).
My question is: Is it possible to configure SSH keys in that way, that the server runs them (and only them) in git-shell in a specified directory (using ~/.ssh/{config,authorized_keys})?
So that they can
- log in with their SSH key
- use git, execute scripts etc.
- use git push/pull from their private+school PC
- work only in a specific directory (like chroot) eg. ~/web-project/
[Code]...
View 2 Replies
View Related
Apr 6, 2010
I need to install Trac on a server that's on a private development VLAN (no internet access). Obviously Trac needs to go out over the internet to download/install various things. Does anyone know of an RPM or tarball out there that I can use to install Trac without being connected to the net?
View 2 Replies
View Related
Feb 6, 2010
We are trying to define an appliance based on Suse for an application server and Web server Apache, so we would like to know configuration best practices for network and security, is there any paper/doc about best practices?
View 3 Replies
View Related
Nov 4, 2009
I bought a web hosting account(cPanel) and I want to create my own name server(ns1 and ns2.mydomain.com). So when I want to host addon domain, I can point them to my name server instead of hosting company name server.
View 10 Replies
View Related
