similar to: Setting up a userID for an SSH tunnel

On 19 Jan 2016 05:32, "Gordon Messmer" <gordon.messmer at gmail.com> wrote: > > On 01/18/2016 03:04 PM, Robert Moskowitz wrote: >> >> I need/desire to set up a userID for an SSH tunnel, but not allow said user to have a login to the server. > > > The user needs to be able to log in to a shell that does nothing interactively. You might be able to set the

I added via visudo my userid for authorization of me ALL(ALL) NOPASSWD: ALL and I still cannot run yum as me. Is this just not possible?

On 01/18/2016 03:04 PM, Robert Moskowitz wrote: > I need/desire to set up a userID for an SSH tunnel, but not allow said > user to have a login to the server. The user needs to be able to log in to a shell that does nothing interactively. You might be able to set the shell to /usr/bin/cat...

at http://wiki.openpbx.org/tiki-index.php?page=Easy+route+to+building+OpenPBX.org there is the following adduser command: adduser --no-create-home --ingroup openpbx --disabled-password --disabled-login openpbx This does NOT seem to be the right format for Centos. So far, using man, I have come up with; adduser -M -g openpbx What else do I need?

I followed the setup instructions from http://www.owlriver.com/tips/non-root/ (link from the Centos wiki). All this is done on another 'clean' system, so I have to read the terminal screen there and tell what went wrong here. I then followed my colleague's instructions to get the tar, untar, autogen, configure, and finally make rpm. Well it was that make rpm command that finally

I tried to use tightvnc back in August and had some help, but I stopped due to IPv6 support. Now I am back at tightvnc and cannot get the server started. This is on a new Centos install that did have regular vncserver working on it (I did a yum erase vnc-server first). So I have a working /etc/sysconfig/vncserver and my user has the appropriate ~/.vnc files that worked with regular vnc.

Is there an easy way or anyway to establish a 128 bit encrypted tunnel between a handful of centos 5.2 boxes? I am not familiar with this at all. Jerry

As I plow through the Kernel source to figure out why the BEET patch is not working, I notice that there are two similar directories under ~/rpmbuild/BUILD/kernel-2.6.18: linux-2.16.18.i386 and linux-2.16.18.i686 So which one am I suppose to be patching? Currently, the patch starts out with: diff -urN a/net/ipv4/xfrm4_input.c b/net/ipv4/xfrm4_input.c I followed the kernel source setup

Hi everyone, first post to the list, be gentle with me! Perhaps I'm missing something here, but it appears to me that many password database extra fields currently aren't much use inside SQL queries? All boolean fields like nologin/nodelay/nopassword are set if the column is present in the returned query, regardless of value (including NULL) For example, say you have a query like:

I need vtun working over IPv6. The version from rpmforge does not seem to support IPv6 (binds to 0.0.0.0:5000 if I specify binding to the interface, and won't let me put in an IPv6 address for address binding). So I was pointed to the KAME (which does not provide any FC/RHEL support. The person who sent me there provided a makefile that he said works on Linux, but did not work for me:

On 09/10/15, Robert Moskowitz wrote: ---------------- Quoted text ------------------------ I just tried the following: rsync -ah --stats "ssh -p613 -l root" 192.168.192.2:/root/samba.PDC/ /home/rgm/data/htt/httnet/homebase/new/root/ And it failed with: Unexpected remote arg: 192.168.192.2:/root/samba.PDC/ rsync error: syntax or usage error (code 1) at main.c(1330) [sender=3.1.1] I

Started implementing the MasterUser changes to my config files so I can finally offer SPA for pop3/imap. Things are working fine with the MasterUser (horray!), however one of my guys started using SPA with Outlook Express and started getting another users mailbox. Turns out to be related to NTLM. His Outlook express is configured for the username of 'johnsmith'. However, you'll see

We try to run a reliable ssh tunnel vis systemd. This is the unit configuration file: {{{ [Unit] Description=Tunnel For %i After=network.target [Service] User=autossh ExecStart=/usr/bin/ssh -o "ExitOnForwardFailure yes" -o "ServerAliveInterval 60" -N -R 40443:installserver:40443 -R 8080:installserver:8080 ExecStartPre=-/usr/bin/ssh tunnel@%i "for pid in $$(ps -u

I would like to be able to check my bank account while we are on holiday. I know the bank's site is encrypted from the start - the login page is https and Verisign-trust encrypted - but is there any risk in using public wireless networks for jobs like this? It sounds secure enough, but maybe I'm paranoid.... Anne -------------- next part -------------- A non-text attachment was

I am getting the following on my 'new box' for my DNS server: Date: Wed, 20 Feb 2013 13:58:04 -0500 From: To: Subject: [abrt] full crash report User-Agent: Heirloom mailx 12.4 7/29/08 abrt_version: 2.0.8 cmdline: ro root=/dev/mapper/vg_onlo3-root_01 rd_NO_LUKS rd_LVM_LV=vg_onlo3/root_01 LANG=en_US.UTF-8 +rd_NO_MD SYSFONT=latarcyrheb-sun16 KEYBOARDTYPE=pc KEYTABLE=us

I want to seriously work with IPv6 and not have stray IPv4 functions messing with me. So in /etc/sysconfig/network, I commented out NETWORKING=yes. I have NETWORKING_IPV6=yes. In /etc/sysconfig/network-scripts I altered ifcfg-eth0, setting BOOTPROTO=none. That was enough for eth0 to only have IPv6 working on it (have IPV6INIT=yes and IPV6_AUTOCONF=yes). But lo had IPv4. So I commented

Pulling out what little hair I have here, but stumbled onto a possible problem. I have a server running C6 apache that is set up with personal directories and no problem showing the files. You can see it at: medon.htt-consult.com/~rgm/pogo So I have a C7 apache server I am building. Files I create on the new server are listing fine. Files I have copied (with cp -avr ...) get permission

Hi, Could not conceive an working set-up for an IPSEC VPN made with racoon/setkey on which I have one address on my side acting as an SNAT router for all traffic from my network to a network segment on the far side. my network --- my gateway ---------------------- remote network 10.0.0.0/24 - 10.0.0.1 (10.253.0.2) -- tunnel - 192.168.0.0/22 All traffic starts on my side, so if I can

I am running vsftp pretty much 'out of the box', though I turned off IPv4 and have it listening on IPv6. I have stopped ip6tables, as the simple rule to enable port 21 is not allowing gftp to connect (pasv mode, I think). gftp to the IPv6 address, it connects and gets a directory listing. I am running gftp from my normal login userid, connecting to my normal login userid on the

Hello List, I'm not enterelly sure that I'm on the rist place to ask this question, sorry if not. The question is simple, *how to test simply a ssh tunnel ?* I just want to make sure the the tunnel i'm opening is letting information goes through it without problem, and I want to avoid any other point of failure when testing. for example let's say I run ssh -L