RE: Port forwarding confusion

2007-08-27 Thread Patrick Morris
I have a hard time getting the following situation sorted out and would appreciate any input to solve it. I'm in a firewalled LAN which provides a ssh-proxy to access outside machines which I have to use like so: 1) build tunnel ssh [EMAIL PROTECTED] -L 2022:OUTSIDEBOX:22 2) make

Re: Read from remote host web01.sti.local: Connection reset by peer

2007-05-11 Thread Patrick Morris
[EMAIL PROTECTED] wrote: I've got a couple of servers, which have started kicking me out of the ssh connection just after I enter the correct password, basically I get prompted for the password, then immediately the following message appears; Read from remote host web01.ms.sti.local:

Re: OpenSSH and ftp tunnel

2006-11-14 Thread Patrick Morris
Christopher Reagoso wrote: Looking for a FAQ on using OpenSSH to create an inbound secure tunnel to an insecure FTP server on a Windows 2003 server host. Any good references I've been missing...? As far as protocols go, FTP is a pain in the butt, which is one of the reasons SFTP exists.

Re: Fronting SSH (Linux)Server with Windows repository?

2006-11-13 Thread Patrick Morris
am constrained by the requirements. There are a fwe ways to do that, but one of them would be to use an LDAP PAM module. Where would I be able to find these documentations? Thanks Toadie. On 11/9/06, Patrick Morris [EMAIL PROTECTED] wrote: toadie D wrote: ( new to SSH

Re: limited upload with sftp

2006-11-13 Thread Patrick Morris
Hi Pascal! On Fri, 10 Nov 2006, Pascal Henri wrote: Hi, I use openssh 3.9 (i think it is also the case in 4.4) and i would like to restrict upload capacity in particular directories (more then one) with sftp. How can i do proceed ? with wu-ftpd it is done via rules in ftpaccess. I search

Re: Fronting SSH (Linux)Server with Windows repository?

2006-11-10 Thread Patrick Morris
toadie D wrote: ( new to SSH and Linux Security) Is it possible to run a SSH Server on Linux that has a repository on a Windows machine? I'm not sure what you mean by repository here, but if I'm following you, it sounds like you just want to authenticate SSH against AD. There are a fwe ways

Re: where are sshd log files located?

2006-11-03 Thread Patrick Morris
E. Hakan Duran wrote: I am a novice user of openssh. I apologize in advance for my silly question below, but recently I started having connection problems from my work computer to home computer via ssh. I am trying to locate the ssh server's log files but I don't know where they are located.

Re: slow ssh

2006-10-30 Thread Patrick Morris
gpk wrote: The two locations are connected via site-to-site VPN tunnel. When I try to ssh from a server at location 1 to a server at location 2 over the vpn tunnel it takes about 1 minute to get the reponse asking for a password. If I ssh from the same server to the other fedora core 5 server on

RE: Decrypting an ssh session knowing the private key?

2006-10-07 Thread Patrick Morris
I would like to write a program that could deycrypt ssh communication by using the private key of the server computer. This should be possable right? And I should be able to use libraries the openssh has already writen. In fact the majority of the code should already be writen right? I

RE: openssh: Enabling sftp, but disabling ssh?

2006-09-05 Thread Patrick Morris
Does anybody know if it's possible, using openssh, to allow file transfer to/from a machine, using sftp, for a specific userid, and disallow ssh login/remote command execution for that same userid? Other userids on the machine should be unaffected. You should be able to set the user to an

RE: Incremental delay in ssh

2006-08-02 Thread Patrick Morris
-Original Message- From: Christian Grunfeld [mailto:[EMAIL PROTECTED] Sent: Monday, July 31, 2006 2:59 PM To: secureshell@securityfocus.com Subject: Incremental delay in ssh Does anybody knows if there is a way to set incremental delays against failed ssh logins ? I am using

Re: ssh as non-root user

2006-07-24 Thread Patrick Morris
.. Original Message ... On Mon, 24 Jul 2006 15:45:47 +0200 Nathan Jackson-Eeles [EMAIL PROTECTED] wrote: As far as I know, shadow passwords shoudn't affect pubkey logins, in fact any password policies on the machine will be overridden if you use pubkey auth. This is only true if you

RE: SCP hangs wile coying large files

2006-07-21 Thread Patrick Morris
-Original Message- From: Kevin Armstrong [mailto:[EMAIL PROTECTED] Sent: Thursday, July 20, 2006 3:54 PM To: secureshell@securityfocus.com Subject: SCP hangs wile coying large files Hello, I'm trying to scp a large file (9 gig) from a Sun server, OS Solaris 8 to a Sun Ultra 5

RE: Jail dont work for users

2006-07-07 Thread Patrick Morris
This configuration work OK for loggin with an SFTP client. The user home is changed to the /datos/chroot/cssa and its chrooted to / . This is not OK. The correct chroot directory for the user is /datos/chroot/ . Of course, I can change to the root directory /, and this is the problem. I

Re: Installation problem: ./configure

2006-06-23 Thread Patrick Morris
You need the development package (don't have a Debian box handy to tell you what it's called... probably something like zlib-devel). On Wed, 21 Jun 2006, EJG wrote: On Debian Linux, kernel linux-image-2.6.15-1-486, after I donload the file: openssh-4.3p2.tar.gz, untar this and then execute

RE: Remote portforwarding and virtualhost

2006-06-20 Thread Patrick Morris
I have a machine with a public IP. I want to remote portforward one of the webserver port (80) to this machine. The webserver is apache with 5 virualhosts. If I forward the connection to the public IP machine, I am not able to get the corresponding webpages from the virtualhosts.

RE: Port Forwarding - Firewall Traversal

2006-06-07 Thread Patrick Morris
From: Henry Kupets [mailto:[EMAIL PROTECTED] I have a host (Oracle app.server) in DMZ that I need to access through HTTP on port 1810 from the Windows PC that resides inside the LAN. The firewall does not allow traffic through port 1810 but allows traffic through port 9000. (When I

RE: FW: SSH/SFTP rc problem in Solaris.

2006-05-10 Thread Patrick Morris
everybody. Pierre. -Original Message- From: Patrick Morris [mailto:[EMAIL PROTECTED] Sent: vendredi 5 mai 2006 21:27 To: secureshell@securityfocus.com Subject: RE: FW: SSH/SFTP rc problem in Solaris. Just tried this on a Red Hat box (EL4). I get a return code of 0 for the same commands

RE: FW: SSH/SFTP rc problem in Solaris.

2006-05-08 Thread Patrick Morris
Just tried this on a Red Hat box (EL4). I get a return code of 0 for the same commands. We have a SSH return code problem when we use SSH in batch in Solaris. We haven't this problem on RedHat. bash-2.05$ cat a.sftp ls -l pwd get b.txt ls -l bash-2.05$ sftp -b a.sftp

RE: X11 tuneling: a hard to fix problem

2006-04-20 Thread Patrick Morris
Let me be the first (of probably many) to say this... Don't. This opens up a gaping security hole, and won't help one iota with SSH tunneling. -Original Message- From: Jason Mitchell [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 18, 2006 5:20 PM To: [EMAIL PROTECTED] Cc:

RE: using ssh for login authifcation

2006-04-12 Thread Patrick Morris
It does indeed sound like what you have isn't so much an SSH issue as it is a PAM configuration one. It sounds like you may want to just disable the use of PAM in your SSH configuration altogether. Without knowing anything specific about your configuration, I don't know if that's a valid option

RE: No username prompt SSHD

2006-04-06 Thread Patrick Morris
This is most likely because your SSH client is sending a username. -Original Message- From: asterix2112 [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 05, 2006 6:28 AM To: secureshell@securityfocus.com Subject: No username prompt SSHD All, Hi, this is probably a dumb newbie

RE: Null-passphrase vs ssh-agent

2006-03-13 Thread Patrick Morris
No, it's not. If someone has the private key file, they can log in with it. If it's got a passphrase, they need to know that, too. Even with ssh-agent, someone has to enter the passphrase at some point. That makes it infinetely more secure than passphraseless keys. -Original Message-

RE: Connection timed out

2006-02-16 Thread Patrick Morris
Can you telnet to port 22? If not, either SSH is not running, or the port is firewalled. -Original Message- From: Damm, Edward F. (E. Buddy) [mailto:[EMAIL PROTECTED] Sent: Monday, February 13, 2006 8:45 AM To: secureshell@securityfocus.com Subject: Connection timed out Hi, I have a