vpsBible Forums » Forum: Remote Access

vpsBible Forums » Forum: Remote Access - Recent Posts http://vpsbible.com/forums/forum/remote-access Setup Unmanaged VPS for Linux Noobs! en-US Fri, 10 Feb 2012 01:20:04 +0000 http://bbpress.org/?v=1.0.2 <![CDATA[Search]]> q http://vpsbible.com/forums/search.php xere on "App always running" http://vpsbible.com/forums/topic/app-always-running#post-2752 Mon, 02 Jan 2012 12:06:54 +0000 xere 2752@http://vpsbible.com/forums/ Hi, I am new. First, my history: I have a Wndows VPS because I should keep running a trading windows application continuosly, auto-scanning the stock market and so on... But a Windows VPS is expensive, more than a Linux one. I have done some research with Virtual Box, creating an Ubuntu machine, installing some apps as a lightweight graphical environment, a VNC server, ssh server, wine and the trading app, with a minimal RAM consumption. My question is: I need to keep running the VPS (adding the needed apps at the autostart) 24 hours/day and 365 days/year. But if I start a Putty session with an admin user (that is, a ssh session), when I close Putty, the session ends and the VPS stop? Then, I thought that a solution maybe, that I arrange the VPS for autologin, and just share the desktop via VNC (tightvnc, by instance) when I would see what is happening. Is this idea right, or are there another ways to do it? Thanks. Alan Son on "How to Give SFTP User Specific Access to a Directory?" http://vpsbible.com/forums/topic/how-to-give-sftp-user-specific-access-to-a-directory#post-2730 Mon, 28 Nov 2011 14:59:49 +0000 Alan Son 2730@http://vpsbible.com/forums/ I ended up building a new Linode with the latest stackscript as I found that Unbuntu 8.04 LTS does not support this. Upgrading was just not going well for me. Also with a little help from guys on the IRC channel at Linode I get it working. Alan Son on "How to Give SFTP User Specific Access to a Directory?" http://vpsbible.com/forums/topic/how-to-give-sftp-user-specific-access-to-a-directory#post-2727 Mon, 21 Nov 2011 22:55:26 +0000 Alan Son 2727@http://vpsbible.com/forums/ Hi Ollie, I have been following the <a href="http://vpsbible.com/remote-access/sftp-chroot-openssh-jail/" rel="nofollow">http://vpsbible.com/remote-access/sftp-chroot-openssh-jail/</a> tutorial. When restarting ssh I get the following error. I am racking my brain as to what the problem is. /etc/ssh/sshd_config: line 79: Bad configuration option: ChrootDirectory /etc/ssh/sshd_config line 79: Directive 'ChrootDirectory' is not allowed within a Match block Any ideas?? robertjakobson on "Permission Denied" http://vpsbible.com/forums/topic/permission-denied-1#post-2536 Thu, 18 Aug 2011 13:38:30 +0000 robertjakobson 2536@http://vpsbible.com/forums/ Will try to do everything once again. But I did do everything you stated that needed to be done. Perhaps simply repeating the steps one by one again will be the answer. Will let you know. the_guv on "Permission Denied" http://vpsbible.com/forums/topic/permission-denied-1#post-2535 Thu, 18 Aug 2011 06:56:21 +0000 the_guv 2535@http://vpsbible.com/forums/ Sounds like your SSH configuration, Robert. <code>nano /etc/ssh/sshd_config</code> Check your setup with <a href="http://vpsbible.com/security/harden-ssh-create-firewall/" rel="nofollow">http://vpsbible.com/security/harden-ssh-create-firewall/</a> (arguably the most important guide on this site) ... ... you added "newuser" to the AllowUsers directive? Got your keys setup between the new user's home dir and your Mac? (You can use the same *public* authentication key twice, shared between remote /home/USER/.ssh directories as detailed in that tut and in the authentication keys guide - <a href="http://vpsbible.com/security/linux-linux-openssh/" rel="nofollow">http://vpsbible.com/security/linux-linux-openssh/</a> - but for security's sake only do that if both users are you, else create individual keys for different human users). You Mac doesn't need the key dup'ed, only the VPS user ~ (user home) directories. ... Come to think of it, ten-to-one that last point is your problem ... ssh can't find the user's key. robertjakobson on "Permission Denied" http://vpsbible.com/forums/topic/permission-denied-1#post-2534 Thu, 18 Aug 2011 06:36:36 +0000 robertjakobson 2534@http://vpsbible.com/forums/ Hi, I am simply trying to create a new user, other than the root, with adduser and I can create one and use it with "su - newuser" but when I try to login into it from my Mac Terminal using newuser@ip I get the "Permission Denied" error, after having entered the password. What on earth could be the problem, does anybody know? R. Anthony Solis on "How to Give SFTP User Specific Access to a Directory?" http://vpsbible.com/forums/topic/how-to-give-sftp-user-specific-access-to-a-directory#post-2459 Fri, 22 Jul 2011 02:12:00 +0000 R. Anthony Solis 2459@http://vpsbible.com/forums/ Man, you are the best. I'm gonna try this out on a cloned server first. No more development or testing on the live servers! Thanks Ollie! the_guv on "How to Give SFTP User Specific Access to a Directory?" http://vpsbible.com/forums/topic/how-to-give-sftp-user-specific-access-to-a-directory#post-2449 Wed, 20 Jul 2011 13:07:45 +0000 the_guv 2449@http://vpsbible.com/forums/ good timing m8 :P <a href="http://vpsbible.com/remote-access/sftp-chroot-openssh-jail/" rel="nofollow">http://vpsbible.com/remote-access/sftp-chroot-openssh-jail/</a> R. Anthony Solis on "How to Give SFTP User Specific Access to a Directory?" http://vpsbible.com/forums/topic/how-to-give-sftp-user-specific-access-to-a-directory#post-2448 Wed, 20 Jul 2011 02:35:53 +0000 R. Anthony Solis 2448@http://vpsbible.com/forums/ I have some clients who are developers and like to get into the folders via SFTP. Well actually FTP but I won't let them. :) How can I limit the SFTP user to their website directory only? Don't want them messing with the other websites. Ant Marcus West on "Mac versions of Putty, Pagent & WinSCP" http://vpsbible.com/forums/topic/mac-versions-of-putty-pagent-winscp#post-2331 Sun, 26 Jun 2011 13:11:16 +0000 Marcus West 2331@http://vpsbible.com/forums/ <a href="http://www.youtube.com/watch?v=NFacYhPT6rk" rel="nofollow">http://www.youtube.com/watch?v=NFacYhPT6rk</a> Amended version of video Marcus West on "Mac versions of Putty, Pagent & WinSCP" http://vpsbible.com/forums/topic/mac-versions-of-putty-pagent-winscp#post-2330 Sat, 25 Jun 2011 20:19:56 +0000 Marcus West 2330@http://vpsbible.com/forums/ <a href="http://media.shinywhitebox.com/marcus-west/terminal-demoli-ssh-21" rel="nofollow">http://media.shinywhitebox.com/marcus-west/terminal-demoli-ssh-21</a> I did a vid...for whoever it may help.. spot the stupid mistakes at the end *AllowUsers (capital U) ** should finish with <service ssh restart> hmmm...think I need to work from a script... Marcus West on "Mac versions of Putty, Pagent & WinSCP" http://vpsbible.com/forums/topic/mac-versions-of-putty-pagent-winscp#post-2329 Sat, 25 Jun 2011 18:10:52 +0000 Marcus West 2329@http://vpsbible.com/forums/ I finally got things working..used the WP stack Marcus West on "Mac versions of Putty, Pagent & WinSCP" http://vpsbible.com/forums/topic/mac-versions-of-putty-pagent-winscp#post-2328 Sat, 25 Jun 2011 18:10:07 +0000 Marcus West 2328@http://vpsbible.com/forums/ Cheers Guv... Wordpress security...lol, yes I've had that a while now...better not do a Disney, I think its close to a year. I've just done a video for Ben...if its any good, maybe save you some tedious yards. the_guv on "Mac versions of Putty, Pagent & WinSCP" http://vpsbible.com/forums/topic/mac-versions-of-putty-pagent-winscp#post-2327 Sat, 25 Jun 2011 16:49:20 +0000 the_guv 2327@http://vpsbible.com/forums/ PS .. Hiawatha is very nice and I'd love to do something on that, and Cherokee f'rinstance .. but .. don't hold your breath. .. The focus for this next phase is server maintenance, Apache (cos so many want it, using Nginx as a reverse proxy) .. but especially security topics and scripts. the_guv on "Mac versions of Putty, Pagent & WinSCP" http://vpsbible.com/forums/topic/mac-versions-of-putty-pagent-winscp#post-2326 Sat, 25 Jun 2011 16:43:34 +0000 the_guv 2326@http://vpsbible.com/forums/ hey Marcus, "seems like I was being nasty saying that the support is minimal." No, you were right! I've been generally crap while writing the book. What with earning a crust and, for the book, spieling off what I reckon has amounted to the equivalent of about 200 tutorials here, it's been a hard slog this year. At long last though, I am back, vpsB is my foremost focus for the next year, the next phase of this project, and I'm only glad, with the extension to 24 months, that I'll be able to share that with this community that's sponsored this project. I'm exceedingly grateful for your input here, re Macs and SSH. I'll dust off my Hackintosh, play with this and add a MacTut to the docs here. A sweet addition indeed. "seems to be a crease or two in the set-up process" Really? I can say I've been using the script seamlessly, as have others, I know for sure, this very week. Then again, never say never. For crying out loud let me know what problems you've had, please. "wordpresssecurity.co.uk" Now that's intriguing! What's that for, then? I guess you've seen <a href="http://guv.li/wpvps" rel="nofollow">http://guv.li/wpvps</a> ? My book's "WordPress 3 Ultimate Security". Looks like we've got some common interests there. "At the start, you just fill in all conditions "" for your wordpress install, and paste into your terminal, correct?" You are talking about the script variable here, no? If so, yes, do as the #comments say, filling those in as suggested. Much of my time over the next couple of months is about making this script more user-friendly. Again, comments appreciated. "ok, working now" So what was the issue? Something, I suspect, wasn't clear. Pleased you got it going though. Marcus West on "Mac versions of Putty, Pagent & WinSCP" http://vpsbible.com/forums/topic/mac-versions-of-putty-pagent-winscp#post-2325 Sat, 25 Jun 2011 10:26:37 +0000 Marcus West 2325@http://vpsbible.com/forums/ ok, working now Marcus West on "Mac versions of Putty, Pagent & WinSCP" http://vpsbible.com/forums/topic/mac-versions-of-putty-pagent-winscp#post-2324 Sat, 25 Jun 2011 08:05:49 +0000 Marcus West 2324@http://vpsbible.com/forums/ In answer to your question Guv.... I am good up to the end of the PHP module. Here's the proof: <a href="http://www.wordpresssecurity.co.uk/" rel="nofollow">http://www.wordpresssecurity.co.uk/</a> but getting WP up is a real problem. I must be doing something wrong. At the start, you just fill in all conditions "" for your wordpress install, and paste into your terminal, correct? Marcus West on "Mac versions of Putty, Pagent & WinSCP" http://vpsbible.com/forums/topic/mac-versions-of-putty-pagent-winscp#post-2316 Fri, 24 Jun 2011 20:11:55 +0000 Marcus West 2316@http://vpsbible.com/forums/ Ok , seems like I was being nasty saying that the support is minimal. Sorry bout that Olly. Once I've got this Ngine running, i am sure I'll be more than happy with my £5 a year subscription. But there seems to be a crease or two in the set-up process Olly, I'll send you some info. (And any chance you can do a Hiawatha guide?) Marcus West on "Mac versions of Putty, Pagent & WinSCP" http://vpsbible.com/forums/topic/mac-versions-of-putty-pagent-winscp#post-2313 Fri, 24 Jun 2011 17:26:43 +0000 Marcus West 2313@http://vpsbible.com/forums/ Its actually easier than you think Ben...but it still took my ages...probably because I am thick. 1) Forget windows (in every possible sense) Here's what I do on Ubuntu 10.04 LTS (any Ubuntu / Debian ) firstly create these passwords and usernames in a text doc. (I lock my text doc away using TrueCrypt - not essential tho) Server host password (stars = numbers) ************************ Server IP + log in ssh <a href="mailto:root@111.11.111.11">root@111.11.111.11</a> Root password ************************ New root password ************************ Username roger User password ************************* Mysql password (if you create using lastpass don't use symbols, just numbers and letters) ******************** OK. That's all there to paste in as you go along. Now 1) rebuild your server! 2) log in as root (e.g. ssh <a href="mailto:root@111.11.11.11">root@111.11.11.11</a>) 3) <adduser roger> (or whatever username you want to use) 4) paste in password (twice) 5)<visudo> 6) under root ALL(ALL:ALL)ALL roger ALL(ALL:ALL)ALL (clear a line with enter - don't know if that matters) ctrl X = save y you can quickly change your root passwd if u want <passwd> put in new passwd OK. NOW TO change file <nano /etc/ssh/sshd_config> change ur port - put something under about 63000, eg, 42678 & disable root login. so, change yes to no. permitrootlogin no I think it is already "uncommented", but make sure it is "uncommented". (i.e. it should not have the # at the start). OK. CTRL X & save now restart ssh <service ssh restart> [sometimes it is </etc/init.d/ssh restart>] ok, all good? if you go back into the sshd_config file <nano /etc/ssh/sshd_config> your changes should now be in operation ok. you have basic security. Now for keypair. Open a new terminal.(shell , new window) <ssh-keygen> this appears: Enter file in which to save the key (/Users/marcuswest/.ssh/id_rsa): just type enter now, put in a nice keygen password. DO NOT LEAVE THIS ON YOUR PC. Have it written down in about three places. e.g gy6£$kI')nn%£$£bnf now, add in your keygen password. Ok, you now have a keypair created. close that terminal in your main (first) terminal EXIT now log back in with ssh <a href="mailto:roger@111.11.111.11">roger@111.11.111.11</a> -p42678 (or whatever) So you log back in, then, (you can do this step directly from the VPS bible.) <mkdir /home/guvnr/.ssh> <nano /home/guvnr/.ssh/authorized_keys> HERE YOU COPY AND PASTE IN YOUR PUBLIC AUTHENTICATION KEY. You open finder, (bottom left of screen) then GO (top bar) then from menu, GO TO FOLDER, then search for <~/.ssh> then open id.rsa.pub, and then copy and paste the entire contents . [this is optional - you can now 'CTRL + W' and search 'ssh', it will take you to the start of the public key. Make sure it is one gap after rsa ssh-rsa fnwerifrfirbfq ] <chown -R guv:guv /home/guv/.ssh> <chmod 700 /home/guv/.ssh .chmod 600 /home/gu/.ssh/authorized_keys> now exit log out. now log back in <ssh <a href="mailto:roger@111.111.11.11">roger@111.111.11.11</a> -p47628> it should ask you your keygen password type it in, and you should get access THAT'S ALMOST IT. now in this session, it won't ask your keypair again. FINALLY go into the sshd_config this time sudo, because you are not root so, <sudo nano /etc/ssh/sshd_config> and add at the end: usePAM no useDNS no AllowUsers roger disallow X11forwarding and most importantly disallow password entry passwordauthentication no and that's it the_guv on "Mac versions of Putty, Pagent & WinSCP" http://vpsbible.com/forums/topic/mac-versions-of-putty-pagent-winscp#post-2311 Fri, 24 Jun 2011 16:59:40 +0000 the_guv 2311@http://vpsbible.com/forums/ oh, and when it is working, ensure to change .. PasswordAuthentication yes to PasswordAuthentication no adn restart ssh again, open another terminal instance, have a cheer and carry on! the_guv on "Mac versions of Putty, Pagent & WinSCP" http://vpsbible.com/forums/topic/mac-versions-of-putty-pagent-winscp#post-2310 Fri, 24 Jun 2011 16:58:24 +0000 the_guv 2310@http://vpsbible.com/forums/ the main thing when adding keys is to ensure you have:- PasswordAuthentication yes .. set in the /etc/ssh/sshd_config file, and that you've then reset ssh:- /etc/init.d/ssh restart Having done that you will be able to test the keys by opening a second window (don't close the first, to be safe). If there's a key problem it's almost always an issue, as explained in the guide, with the "spacing", say, an added space or a wrapped line, in the server key file:- /home/USER/.ssh/authorized_keys .. in which case, cos you're not locked out, you can back-track. Ben on "Mac versions of Putty, Pagent & WinSCP" http://vpsbible.com/forums/topic/mac-versions-of-putty-pagent-winscp#post-2308 Fri, 24 Jun 2011 10:06:53 +0000 Ben 2308@http://vpsbible.com/forums/ Hi Olly Will give Cyberduck another bash. I got teh keypair working fine, but now I'm locked out when on both PC & Mac when I try and use auth keys. I can get in with using just terminal commands & using a password. Need to back track - as I only have the pc key in now - and that just doesnt let me in. Fun & games for a change! the_guv on "Mac versions of Putty, Pagent & WinSCP" http://vpsbible.com/forums/topic/mac-versions-of-putty-pagent-winscp#post-2304 Thu, 23 Jun 2011 22:59:41 +0000 the_guv 2304@http://vpsbible.com/forums/ hey Ben, Cyberduck's generally regarded as the user/protocol-friendly option for Macs (SFTP as well as SSH, f'rinstance). jb explained his method in <a href="http://vpsbible.com/forums/topic/adding-the-ssh-keypair-in-os-x" rel="nofollow">http://vpsbible.com/forums/topic/adding-the-ssh-keypair-in-os-x</a> .. Marcus, did that not work for you? Ben on "Mac versions of Putty, Pagent & WinSCP" http://vpsbible.com/forums/topic/mac-versions-of-putty-pagent-winscp#post-2303 Thu, 23 Jun 2011 11:19:38 +0000 Ben 2303@http://vpsbible.com/forums/ Hi Marcus Thanks for that, seen that thread earlier. Followed the pointers & that youtube vid was good, so go it going. Just logged in on the mac and it worked. Problem is now I cant log on either on the Mac or PC without disabling auth keys, and entering the password in.............arrggghh! I though at first I had pasted the wrong keys in, but triple checked, and just tried to use the PC key - i.e. revert back to the changes before I entered a second key in authorized keys. Didnt work, getting: "Server unexpectedly closed the network connection" on't PC on the mac its "Connection closed by 80.**.**.**" Which I note you was getting on that thread: "Now when I try to log in I get an immediate: "Connection closed by 178.79.***.***" " Hmm, wonder if logging in on two different machines at the same time with different keys has stuffed it? -- I guess the mac terminal is just the same as putty, looks it. Will give Cyberduck a proper trial - just couldnt get around it properly and I like to have local/server view side by side. Anyway - appreciate the reply & assistance. Ben. Any ideas? Marcus West on "Mac versions of Putty, Pagent & WinSCP" http://vpsbible.com/forums/topic/mac-versions-of-putty-pagent-winscp#post-2302 Thu, 23 Jun 2011 00:03:28 +0000 Marcus West 2302@http://vpsbible.com/forums/ Hi Ben, To create the keypair - follow this. <a href="http://vpsbible.com/forums/topic/adding-the-ssh-keypair-in-os-x" rel="nofollow">http://vpsbible.com/forums/topic/adding-the-ssh-keypair-in-os-x</a> Putty and Pageant alternatives are not required. Cyberduck is good...give it another try. But I have been through the rest of guide here half a dozen times, and it doesn't work, and the support is minimal, so don't expect things to be easy ;) Ben on "Mac versions of Putty, Pagent & WinSCP" http://vpsbible.com/forums/topic/mac-versions-of-putty-pagent-winscp#post-2301 Wed, 22 Jun 2011 12:22:53 +0000 Ben 2301@http://vpsbible.com/forums/ Howdy I'm now swapping my computing needs onto a Mac and I'm looking for Mac equivalent apps for: Putty Pagent WinScp So far, tried CyberDuck & Fugu but havnt been able to get on with them. I love WinSCP - it's made SFTP'ing very easy - especially the sync folders button! Does the mac terminal act like putty? Not been able to get connected (probably due to access keys looking at that other thread on here). Any pointers would be very much appreciated - as I have Win7 on dualboot, but aiming to leave windows forever :) Ben. Marcus West on "Adding the SSH Keypair in OS X" http://vpsbible.com/forums/topic/adding-the-ssh-keypair-in-os-x#post-2249 Mon, 06 Jun 2011 13:44:12 +0000 Marcus West 2249@http://vpsbible.com/forums/ I seem to have sorted things now..cheers JB. Excellent guide. I was trying to do things in reverse order by changing ports and permissions first. It is easier to follow Guv's order. Marcus West on "Adding the SSH Keypair in OS X" http://vpsbible.com/forums/topic/adding-the-ssh-keypair-in-os-x#post-2244 Sat, 04 Jun 2011 20:29:39 +0000 Marcus West 2244@http://vpsbible.com/forums/ Everything went really well Jb..until.. I completed the sshd_config changes as per Guvnr, and then prior to setting my IPtables, I ran /etc/init.d/ssh stop and restart that was more or less it. Now when I try to log in I get an immediate: "Connection closed by 178.79.***.***" Any ideas? SkinnyGeek1010 on "Adding the SSH Keypair in OS X" http://vpsbible.com/forums/topic/adding-the-ssh-keypair-in-os-x#post-2241 Sat, 04 Jun 2011 02:44:47 +0000 SkinnyGeek1010 2241@http://vpsbible.com/forums/ Hi Marcus, If your still having troubles, checkout this video I posted a while back. I used it to make my key pair with OS-X 10.6. <a href="http://vpsbible.com/forums/topic/how-to-setup-openssh-for-os-x-client" rel="nofollow">http://vpsbible.com/forums/topic/how-to-setup-openssh-for-os-x-client</a> Marcus West on "Adding the SSH Keypair in OS X" http://vpsbible.com/forums/topic/adding-the-ssh-keypair-in-os-x#post-2240 Thu, 02 Jun 2011 20:49:55 +0000 Marcus West 2240@http://vpsbible.com/forums/ nice one JB. Much appreciated. A pint is on me. Actually I am more or less doing this....but I am obviously missing some small detail. Off to the '9-5' now, but hopefully will get this sorted soon. ....didn't know about Houdini....