similar to: [PATCH] Allow matching HostName against Host entries

This is a better approach to persistent control masters than my previous attempt. Instead of forking before we make the connection, do so only when the original session has closed -- much like the code for '~&' backgrounding already does. My earlier patch for 'ControlPath none' still applies and is required, btw. --- openssh/clientloop.c~ 2005-06-17 03:59:35.000000000 +0100

Hi list, I use ssh a lot and I often need to connect to hosts whose host key has changed. If a host key of the remote host changes ssh terminates and the user has to manually delete the offending host key from known_hosts. I had to do this so many times that I no longer like the idea ;-) I would really like ssh to ask me if the new host key is OK and if I want to add it to known_hosts. I talked

The attached patch is against openssh-4.3_p2 to allow non-root users to vpn in over ssh. root access is still needed on client side (or an sudo solution). Currently, I have it working with an sudo command to configure a tap interface on the server side. eg to ssh into my gentoo server: # ssh -fw any:any user at ssh_server.box "sudo /etc/init.d/net.tap0 restart" Then, configure the

Scenario: I have access to a semi-public (about 30 users) server where I keep my webpage. Occasionally, especially if I'm on the road. I use this as a bounce point to get to "secured" systems which only allow ssh from certian IP's. (Ignoring the discussion on spoofing, since we have host keys) But host keys are the problem. If anyone gets root on this hypothetical

Attached (and inline) is a patch to add the following config options: ControlBindMask ControlAllowUsers ControlAllowGroups ControlDenyUsers ControlDenyGroups It pulls the peer credential check from client_process_control() in ssh.c, and expounds upon it in a new function, client_control_grant(). Supplemental groups are not checked in this patch. I didn't feel comfortable taking a shot

Hi, (I'm not subscribed to the list, so please CC me on reply.) I'd like to request adding a feature to OpenSSH: Task: ~~~~~ It is quite sometime useful to invoke a program prior to connecting to an ssh server. The most common use case will probably be port knocking. That is a small program sends certain packets to a server and the server reacts to this by unlocking the ssh port, which

Gidday all - I've got a 1700VA dynamix UPS which is USB. The previous model (with a serial port) worked wonderfully with megatec, but this new one with USB is not working. It feels like the kernel is not handing the USB device properly. The web has not yeilded any useful info. What can I do from here? I'm not sure if its a kernel problem or a UPS config problem, but I'm hoping

Gidday all - I've got a 1700VA dynamix UPS which is USB. The previous model (with a serial port) worked wonderfully with megatec, but this new one with USB is not working. It feels like the kernel is not handing the USB device properly. The web has not yeilded any useful info. What can I do from here? =========================================== [root at hera ups]# lsusb Bus 006 Device 002:

Try to ping from client to server with its hostname. Sounds like dns problem. ping server Then try to ping its ip address. Then try to add server address to host file. Ex 192.168.8.30 server.example.com[1] server Best M On May 26, 2016 12:02, "Nico Speelman" <nico at speelmanrobben.nl[2]> wrote: Hello, I've been trying to add a new server to my Samba 4 Active directory, but

Jul 13 08:19:15 hera dovecot: fstat 75 : Value too large for defined data type Jul 13 08:19:18 hera dovecot: fstat 75 : Value too large for defined data type Jul 13 08:19:20 hera dovecot: fstat 75 : Value too large for defined data type Jul 13 08:19:27 hera dovecot: fstat 75 : Value too large for defined data type Jul 13 08:19:27 hera dovecot: fstat 75 : Value too large for defined data type Jul

[sorry if this isn't threaded right... I just subscribed] Theodore Ts'o wrote: > > There are two reasons for the reserve. One is to reserve space on the > partition containing /var and /etc for log files, etc. The other is > to avoid the performance degredation when the last 5-10% of the disk > space is used. (BSD actually reserves 10% by default.) Given that > the

I sent the following message to the list nearly two weeks ago and didn't receive a single response. In fact, I haven't received any replies to the last 3-4 questions I have asked (over the past 6 months). Maybe it is my wording??? I see the messages in the digest, so I know they are going to the list. :-) I have no right to complain and only cause to be very happy with the rest of

What's wrong with the Asterisk CLI history? When I exit the CLI, and re-enter, the last command in the history always defaults to 'stop now'. This is very bad, and it's caused accidental shutdowns more than once. Connected to Asterisk 1.2.9.1 currently running on hera (pid = 17399) Verbosity is at least 3 hera*CLI> A No such command 'A' (type 'help' for help)

Hi all! I work as a computer technician for a small school and have recently upgraded our network to use samba servers. Our main computers are a PDC, a BDC, a file server and a backup server, all using Red Hat Fedora Core 3 as a base. The clients on our network consist of machines with Windows XP and a few with Windows NT. Everything seems to work just fine except for some minor but annoying

Hello! I've configured SSH-VPN between two subnets and it works fine. Option Tunnel=yes in config file is set. The problem I run into is that normal SSH login to root account does not terminate on "exit" command. > ssh root at pig pig> exit ;; screen is cleared but does not return to prompt <ctrl-C> Killed by signal 2. ctrl-D does not work. Running ssh with -vvv has

Try to ping from client to server with its hostname. Sounds like dns problem. ping server Then try to ping its ip address. Then try to add server address to host file. Ex 192.168.8.30 server.example.com server Best M On May 26, 2016 12:02, "Nico Speelman" <nico at speelmanrobben.nl> wrote: > Hello, > > I've been trying to add a new server to my Samba 4 Active

Numerous how-tos all over the Internet show how one would set up a tunnel using ssh, e.g.: ssh -f -o Tunnel=ethernet <server_ip> true I was wondering if there's a way to subsequently acquire the names of the local and remote tun/tap interfaces (e.g., using the default "-w any:any") for subsequent automatic tunnel configuration, e.g.: ip link set $TapDev up ip link set

The kernel has just been upgraded on my server to 2.4.24 by the datacenter, but I noticed in the messages log the following messages when restarting shorewall: Jan 7 11:24:00 hera modprobe: modprobe: Can''t locate module iptable_nat Jan 7 11:24:00 hera modprobe: modprobe: Can''t locate module iptable_nat Jan 7 11:24:02 hera projnet1: Shorewall Restarted Should I be worried?

Hi guys, I'm having a really strange problem, which I'm pretty sure has only appeared since my last upgrade (1.2.12.1) . It's about NAT and Qualify. I'm using Asterisk to register with some external SIP providers. However, they're always marked as UNREACHABLE, when they weren't before! A typical debug looks like this: hera*CLI> sip reload Reloading

My keys are secured with a passphrase. That's good for security, but having to type the passphrase either at every login or at every invocation of ssh(1) is annoying. I know I could invoke ssh-add(1) just before invoking ssh(1), if I keep track of whether I invoked it already, or write some hacky scripts; but the rest of OpenSSH is wonderfully usable without any hacks. Hence, this patch.