Difference between revisions of "Ssh"

From DWIKI
Line 6: Line 6:
  ssh -A -t -l user webserver.dmz \
  ssh -A -t -l user webserver.dmz \
  -L 8080:localhost:8080
  -L 8080:localhost:8080
==SSH tunnel with putty==
ttps://www.skyverge.com/blog/how-to-set-up-an-ssh-tunnel-with-putty/


==Failed publickey==
==Failed publickey==

Revision as of 17:21, 12 September 2017

FAQ

multihop tunnel

ssh -A -t -l user jump-host \
-L 8080:localhost:8080 \
ssh -A -t -l user webserver.dmz \
-L 8080:localhost:8080


SSH tunnel with putty

ttps://www.skyverge.com/blog/how-to-set-up-an-ssh-tunnel-with-putty/

Failed publickey

  • acccess rights?

14: No supported authentication methods available [preauth]

Putty not configured to look at correct private key?


chrooted sftp

Per group:

/etc/ssh/sshd_config

 Match Group sftponly
   ChrootDirectory %h
   ForceCommand internal-sftp
   AllowTcpForwarding no
   PermitTunnel no
   X11Forwarding no
 #Remember this one to close Match block!
 Match all

Per user:

remove host key

ssh-keygen -R hostname
 Match User username
   ChrootDirectory %h
   ForceCommand internal-sftp
   AllowTcpForwarding no
   PermitTunnel no
   X11Forwarding no
 #Remember this one to close Match block!
 Match all

The ChrootDirectory must be owned by root.root with permissons 755. If you want group based access rights, you can do that in subdirectories.

ssh tunnel

ssh -L 1234:192.168.100.2:80 remotehost

And then connect to localhost:1234

rsync only as root