TuxTraining

Although using public key authentication instead of passwords is a great method for increasing the security of SSH transfers, transferring SSH identity keys can be a royal pain. First, you create your key pairs; then, you copy the public key into the correct locations on all the machines you want to log into. The keys must be in a particular format, and you must go into the correct directory with the correct permissions. Fortunately, ssh-copy-id, a slick utility included with OpenSSH, makes it easy.
(more…)

I noticed recently that ssh connections from my Ubuntu laptop to my Debian server would time out and disconnect if I left the connection idle for a long-ish period of time. This really annoyed me, because my
Debian desktop does not exhibit this behavior when connecting to the server.

(more…)

1. sudo vim /etc/ssh/sshd_config and make sure X11Forwarding  is set to yes on the box you are ssh’ing too.
2. ssh -v -X -C xxx.xxx.xxx.xxx     (-X specifies X forwarding, -C specifies compression, -v is verbose)
3. once logged in, simply execute “xinit” if it’s not already running on that box, and then fire off the name of your application.  Examples:
   1. gnome-session (will start gnome)
   2. startkde (will start kde)
   3. firefox (will forward firefox to your machine)

Port forwarding, or tunneling, is a way to forward otherwise insecure TCP traffic through SSH Secure Shell. You can secure for example POP3, SMTP and HTTP connections that would otherwise be insecure.

There are two kinds of port forwarding: local and remote forwarding. They are also called outgoing and incoming tunnels, respectively.

Local port forwarding forwards traffic coming to a local port to a specified remote port. For example, all traffic coming to port 1234 on the client could be forwarded to port 23 on the server (host).

(more…)

I had to set up a chrooted user account with scp-Access to let people upload files to a server in order not to let them browse the whole filesystem.
All the tutorials I found on the Internet described only the process of patching either the openssh-sources or installing a separate program to be used as a Shell.

So Wolfgang Fuschlberger wrote this Script which does all the work automatically to set up a working chroot-jail.

View the source

Download the file make_chroot_jail.sh.

(more…)