Tag Info

Hot answers tagged

5

Local port forwarding means forwarding a port on the SSH client machine through the SSH server machine, not onto it. The IP address you specify in the argument is any address/hostname reachable from you SSH server. Thus if the Wintendo box is behind the server you are able to SSH into, and reachable from it, you simply can do this on your client: $ ssh -L ...


3

In many systems, your only entry point into the system is via ssh. On a brand new install without having created a user account yet, the only account you may have is root. Then even if you have multiple accounts, what if you are using external authentication, and your authentication system fails. You need to be able to get back in the box and fix it. You ...


3

From serverfault: You can easily make it a function in your .bashrc: function fingerprints() { local file="$1" while read l; do [[ -n $l && ${l###} = $l ]] && ssh-keygen -l -f /dev/stdin <<<$l done < $file } and then do: $ fingerprints .ssh/authorized_keys


2

Screen is a bit heavy handed. A second way is to use the old school method of nohup. nohup script command 2>&1 > /dev/tty1 & The nohup command captures all hangup signals and ignores them, so the the command left after will not receive and there for not stop on closing your terminal.


2

Method #1 - Using timeouts via SSHD/SFTPD If the connections are over SSH you can set these settings on the SSHD's side in the config file /etc/ssh/sshd_config. ClientAliveInterval 30 ClientAliveCountMax 5 Where these settings have the effect: ClientAliveInterval: Sets a timeout interval in seconds (30) after which if no data has been received from the ...


2

Your distribution is the most likely cause for these insecure default values. Different distributions ship different default configurations. On the other hand it might be a bad idea to start a network service without prior configuration. Admins tend to have their special needs and at least take a look at the configuration after installation if not shipping ...


1

Wild guess: There is nothing wrong with your machines in particular, but you are in a network "secured" by a firewall which keeps tracks of tcp connections. When the firewall feels your connection has been idle for too long, it will consider it dead. This means the firewall doesn't think it's a good idea to forward tcp segments that belong to that ...


1

You try to achieve several things here: Connect to a host without user interaction Run some script and save its output To 1: It is best to generate an ssh key pair with ssh-keygen and store the public key on your host machine. Generate it without using a password, then ssh won't ask you for one on connection. Use client$ ssh -i <keyfile> to ...


1

SSH does not have insecure defaults (at least not the ones you mention). Protocol 1 has been disabled by default since OpenBSD 4.7 (released in 2010). Even when Protocol 1 was still enabled by default, it would only have been used if the client requested it, and the client (like I think all clients that support protocol version 2) uses protocol version 2 ...


1

Here you go: find /path/to/keys/directory -type f -name "*.pub" -exec ssh-keygen -lf {} \; | awk '{print $2}' Edit: Whops, ok. get it now. here you go: while read line; do ssh-keygen -lf "$line"; done < <(cat authorised_keys_file) (if this file have one key per line)


1

This application looks like what you're looking for. It's call gsutil. This pages discusses how to install gsutil, a tool that enables you to access Google Cloud Storage from the command-line. gsutil runs on Linux/Unix, Mac OS, and Windows. To use gsutil, you must have Python 2.6.x or 2.7.x installed on your computer. gsutil does not currently run ...


1

I think that the error does not come from the -net statement, but from: -chardev socket,host=localhost,port=7777,server,nowait,id=port1-char The statement uses already the port 7777. For the port forwarding, with -net user,hostfwd=tcp::7777-:8001 it works fine when not setting up the virtio serial channel. If I understand right, you want to set up a ...



Only top voted, non community-wiki answers of a minimum length are eligible