Tag Info

New answers tagged

2

Sort of figured it out. Obviously something in the config file was stopping the server from starting. After implementing each file change one line at a time, finally found it was the ForwardAgent no line in the config that was causing problems. After some more digging, found that you could start the daemon direct instead of through the services to see if ...


1

Seems like your solution on openssh mailing list seems to be quite bearable. Reposting also here: Match exec "ping -q -c 1 -t 1 %n | grep '192\.168\.'" StrictHostKeyChecking no UserKnownHostsFile /dev/null Source: http://lists.mindrot.org/pipermail/openssh-unix-dev/2015-August/034335.html


0

Your netmaks are incorrect. If you want to include private networks, you should use : 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 This is probably why you do not match, rather than a ssh bug.


1

I was answering similar question on Superuser.com, but after the responses I am not longer sure if it is right. In short, I believe that it is currently not possible and even openssh-7.0 is out, but these bugs were not fixed so we will have to urge upstream. Also there is alternative answer with positive feedback, but I guess this is the way how you are ...


1

Alas, chroot(2) must be called as root.


4

from the ssh_config man page: HostKeyAlgorithms Specifies the protocol version 2 host key algorithms that the client wants to use in order of preference. The default for this option is: ecdsa-sha2-nistp256-cert-v01@openssh.com, ecdsa-sha2-nistp384-cert-v01@openssh.com, ...


1

ssh -Q key Unless you have an ancient version of OpenSSH, in which case uhhhh source dive, or run ssh -v -v -v ... and see if what you want appears there.


2

redirect stderr into /dev/null host=`uname -n` SSHKey=`ssh-keyscan $host 2> /dev/null` echo $SSHKey >> /root/.ssh/known_hosts


3

You could potentially do this using screen (which you may need to install) and SSH keys. You need to log in as root and then run 'screen -US friend' (install if necessary), run whatever commands you need to do, and the detach from that (using 'Ctrl-A D') to leave it running. Then in /root/.authorized_keys add your friend's id_rsa.pub or id_dsa.pub key. ...


1

I think that something like doesn't exists and maybe never do, is super insecure for example how do you know that is your friend and not a bad guy using the same user ? The other problem is that you need to be logged all the time waiting for somebody to knock your door But I think that I see your problem you don't want a change the password because you ...


0

Even though the answer given by Celada sounds very plausible, this wasn't the problem in my situation. Initially I've added the key with phpldapadmin and apparently this software adds something at the end of the key that causes the base64 encoding to be triggered. I've deleted the key and added it again with webmin and this time the key is returned as ...


4

Base64 encoding in LDAP output is not a problem and does not need to be "solved". It's part of the syntax of the LDIF format for representing LDAP data in texual form. You will notice that in the LDIF output, data encoded with Base64 is preceded by a double colon instead of a single colon: key1: value1 key2:: dmFsdWUy In this example, the first value ...



Top 50 recent answers are included