similar to: Host name lookup failure using hostbased authentication

Hi, I am trying to configure OpenSSH to allow root logins, without success so far. So I could really use some advice. This is my server configuration: AllowUsers = thomas root AuthenticationMethods hostbased,publickey ExposeAuthInfo = no ForceCommand none GSSAPIAuthentication no HostbasedAcceptedAlgorithms ssh-ed25519 HostbasedAuthentication yes HostbasedUsesNameFromPacketOnly yes HostKey

On Mon, 23 Oct 2023 at 00:43, Thomas K?ller <thomas at koeller.dyndns.org> wrote: > There is a nasty problem when using hostbased authentication: Suggestions: - "host" does DNS lookups, but is your system's nsswitch.conf or equivalent actually configured to use DNS? - have you turned off DNS lookups in sshd with "UseDNS no" in sshd_config? - you could try

On 12.03.20 19:09, Christoph Anton Mitterer wrote: > On Wed, 2020-03-11 at 21:39 +0100, Thomas Koeller wrote: > IMO, the idea itself sounds not the best... one must assume that such > invoked programs are not written "safe"... and thus an attacker could > potentially cause the system to run such programs a huge number of > times. As the anticipated action of the program is

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, as I said before on this list I use the vorbiscomment utility in my music file management perl script and I've just noticed that it has huge problems with German umlauts. "ö", for example, becomes "ö", which is QUITE annoying. In xmms, the tags are displayed correctly, though. I'm using the newest libraries and

Hello all, I have an HTPC connected 24/7 to the Internet running Mythbuntu. I also have a web/email host that runs Dovecot for email and provides IMAP and POP3 access. I understand that Dovecot supports Push IMAP and I could, for example, use Thunderbird to connect to my email host to receive instant email as it arrives. I would like to add a Dovecot IMAP server on my HTPC (for increased

Hi, sifting through my system's logs, I noticed many break-in attempts by rogue ssh clients trying long lists of common passwords. For some time now I pondered different approaches to counter these, but could not come up with a solution that really satisfied me. I finally reached the conclusion that any countermeasures required support in sshd itself, and created the attached patch. If

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, is there a way to read the encoder version from encoded .oggs? If yes, what's the easiest way to do it? - -- - -M - ------- Magnus von Koeller <magnus@vonkoeller.de> ------ Georg-Westermann-Allee 76 / 38104 Braunschweig / Germany Phone: +49-(0)531/2094886 Mobile: +49-(0)179/4562940 lp1 on fire (One of the more obfuscated

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I've been off this list for a while now so I lost touch with ogg vorbis development. Could somebody please bring me up to date? As I take, the current RC2 release contains full 1.0 feature support (incl. channel coupling). Does this mean I can now start encoding all of my music as a ~128kbit/s ogg bitstream without fear of reduced

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, ince I'm currently working on a program that manages all my music files and am working on Ogg Vorbis support right now, I have two questions: 1. Should Tag names (i.e. "ARTIST=") be lower- or uppercase. I've encountered both and right now I automatically uppercase everything I get and then write it to the file that way. 2.

On 08-08-2018 7:48, Ian Evans wrote: > My webserver also houses our mailserver. There's about six users on > that mail system and I'm thinking it would be good to back up the > mailboxes to my always on HTPC computer at home, which is reachable > via a dynamic IP service. > > I know (or think) I need to use doveadm-backup for this but rather > than reinvent the wheel

Hey guys, I wrote to this list previously, saying I needed a perl module to do Ogg Vorbis tag reading / writing. People pretty much pointed me to the Ogg::Vorbis module that wrapped around libvorbisfile and I should extend that to writing streams, not only reading them. Well, awright, I thought, let's do it. Problem is, though: The download links on freshmeat are all broken and I don't

Hey guys, I wrote to this list previously, saying I needed a perl module to do Ogg Vorbis tag reading / writing. People pretty much pointed me to the Ogg::Vorbis module that wrapped around libvorbisfile and I should extend that to writing streams, not only reading them. Well, awright, I thought, let's do it. Problem is, though: The download links on freshmeat are all broken and I don't

Hi, I just converted all my hard disk filesystems from ext2 to ext3. This worked perfectly fine for all non-root fs, but I am having trouble converting the root fs, too. Here's what I did: 1. rebuilt my kernel (2.4.20, x86) with ext3 support linked in statically - no module. 2. Added a journal file to my root fs using 'tune2fs -j'. 3. Added 'rootfstype=ext3' to the

Hey all, I just tried running a 'make rpm' on a fresh install of Fedora Core 4 and ran into an error near the end of the build process. This is the output of the build when the error occurs: done rm -f /tmp/asterisk/var/lib/asterisk/mohmp3/sample-hold.mp3 mkdir -p /tmp/asterisk/var/spool/asterisk/voicemail/default/1234/INBOX :>

Hello, I have the idea brewing for some time in my mind - to build Linux based HTPC. It would be used for movies, cable (analog for now) recording, Stepmania, backup station, etc. And I would like to get some information before proceeding to estimate the cost. Which one of the Linux projects would you suggest and why? MythTV, Freevo or something else? Is CentOS good for such task or I should

My webserver also houses our mailserver. There's about six users on that mail system and I'm thinking it would be good to back up the mailboxes to my always on HTPC computer at home, which is reachable via a dynamic IP service. I know (or think) I need to use doveadm-backup for this but rather than reinvent the wheel (or use the wrong wheel altogether) I'm wondering if anyone can

Hello, I wanted to recompile syslinux64.exe (windows 64bit binary) on ubuntu. The default ./find-mingw64.sh script failed to locate mingw64 on ubuntu, even after root at htpc:~# apt-get install gcc-mingw-w64 So I had to patch the script to let it find mingw64 on ubuntu as well. Patch is below, please apply to syslinux sources: --- syslinux-4.05/win64/find-mingw64.sh.orig 2012-08-28

I've copied vorbis@xiph on this message simply because it will be interesting there, but also to give those who haven't yet subscribed to the advocacy list a taste of the things that (should) happen there. As you know we are planning to sell vorbis shirts, both to promote the vorbis format and to raise some money for the Xiph.org Foundation. I have been talking to an online retailer

Hi, I am looking into using coreboot to speed up the booting of my HTPC, while looking at the payloads they offer I thought that perhaps a syslinux derivative would be nice to have as a payload due to it's flexibility. Is this possible? or something you would be interested in adding support for? Regards, Ryan

On 8/7/2018 5:08 PM, Adi Pircalabu wrote: > - Since you're on dynamic IP at home, set up a VPN tunnel using the > mailserver as server and HTPC as client. OpenVPN is ubiquitous and > widely supported. > - rsync your mailboxes using the tunnel connection. > This way you can back up your entire server, not only the mailboxes. Instead of openvpn, I use openssh. Use compression