Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I've successfully VPNed to my University server on a Fedora 17 Linux terminal.

$ sudo openconnect -u UNIVERSITY_USERNAMEID sslvpn.nameofuniversity.edu
[sudo] password for PCUSERNAME: 
Attempting to connect to xxx.xxx.xxx.xxx:xxx
SSL negotiation with sslvpn.nameofuniversity.edu
Connected to HTTPS on sslvpn.nameofuniversity.edu
GET https://sslvpn.nameofuniversity.edu/
Got HTTP response: HTTP/1.0 302 Object Moved
SSL negotiation with sslvpn.nameofuniversity.edu
Connected to HTTPS on sslvpn.nameofuniversity.edu
GET https://sslvpn.nameofuniversity.edu/+webvpn+/index.html
Please enter your username and password.
Password:
POST https://sslvpn.nameofuniversity.edu/+webvpn+/index.html
Got CONNECT response: HTTP/1.1 200 OK
CSTP connected. DPD 30, Keepalive 0
Connected tun0 as xxx.xx.xx.xx, using SSL

After this, I opened a new terminal and executed an ssh command which normally works when I'm on campus. I get the following output on the terminal:

# ssh -vvv -Y UNIVERSITY_USERNAMEID@server
OpenSSH_5.9p1, OpenSSL 1.0.0j-fips 10 May 2012
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 50: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to server [xxx.xxx.xx.xx] port 22.
debug1: Connection established.
debug1: permanently_set_uid: 0/0
debug1: identity file /root/.ssh/id_rsa type -1
debug1: identity file /root/.ssh/id_rsa-cert type -1
debug1: identity file /root/.ssh/id_dsa type -1
debug1: identity file /root/.ssh/id_dsa-cert type -1
ssh_exchange_identification: Connection closed by remote host

To no avail, I've appended the following to file /etc/hosts.allow

SSHD: ALL
SSHD: .nameofuniversity.edu : all
SSHD: ipaddress : all

What can be wrong here?

share|improve this question
    
What do the logs on the sshd server say? –  Jenny D Aug 24 '12 at 6:52
    
I'm not sure. Admittedly, I'm new to this. Also, I don't have root permissions. My objective is to launch the Cadence EDA program via command line. Normally, when I'm on campus on a linux machine, I access the servers via ssh. If I'm at home (off-campus), I use NoMachine or XManager on Windows to launch the RedHat Desktop environment which enables me to pull up the terminal and launch the EDA software. –  arcticanalog Aug 24 '12 at 17:23

2 Answers 2

Two of the possibilities are:

  1. the host you're trying to ssh into only allows connections from certain IP addresses (e.g. addresses on one or more of the university's VLANs). They may not have configured it to recognise VPN addresses as "local".

  2. the host is configured to allow password-based auth from certain addresses but requires an ssh key from all other addresses. If this is the case, create a public & private key pair and insert the public key into your ~/.ssh/authorized_keys file the next time you login from within the university.

I've configured the latter on many machines at the university I work at (and on my home machines and on several other machines) - it's a convenient way of allowing remote ssh access to users without making the host vulnerable to the constant barrage of script-kiddies attacking the ssh port. Users can set up public key access when they're on campus, and use it to connect from home (or a conference or whatever).

share|improve this answer
    
Third possibility: VPN isn't setting up the routing table correctly. Traffic isn't actually going over the vpn. Check using ip route get. –  derobert Aug 24 '12 at 18:15
    
Yesterday I could VPN. Today I can't. I chatted with a Technical Help & Support staff and he asked me to check a University UserID Self-management website which shows a list of service access privileges for my student account. He asked if I saw a listed privilege for Border VPN Access, which I didn't. A ticket's been submitted to a Linux Admin to look into it. –  arcticanalog Aug 25 '12 at 5:40

So it's official. The Linux Admin disclosed that since I've applied for a semester leave, my student Border VPN Access privilege has been revoked. I'm guessing my privilege was changed after I posted this question because prior to posting I was able to VPN but was just unable to SSH.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.