|
|
Sponsored Content
Top Forums
UNIX for Dummies Questions & Answers
Is it possible for a server to be both a remote and client SSH host?
Post 302269058 by Smiling Dragon on Tuesday 16th of December 2008 07:13:51 PM
12-16-2008
Yep, that's no problem. A server isn't actually ever an ssh client, it just might happen to run one as a particular user 
sshd is the 'remote ssh host' and runs as root, then splits of a version of itself for each user connecting, this split off version runs as the connecting user and looks at $HOME/.ssh/ (on the 'server' side) for keys etc.
ssh is the 'client SSH host' and runs as you, it also looks in $HOME/.ssh/ (on the 'client' side).
If you want a hand laying out what keys need to go where, let us know the usernames you are using and which server they are on (or call them 'user1' etc).
sshd is the 'remote ssh host' and runs as root, then splits of a version of itself for each user connecting, this split off version runs as the connecting user and looks at $HOME/.ssh/ (on the 'server' side) for keys etc.
ssh is the 'client SSH host' and runs as you, it also looks in $HOME/.ssh/ (on the 'client' side).
If you want a hand laying out what keys need to go where, let us know the usernames you are using and which server they are on (or call them 'user1' etc).
|
|
10 More Discussions You Might Find Interesting
1. Shell Programming and Scripting
I am using KSH and I need to check whether the remote host has been configured with ssh public key. Is there any way we can check inside a script? (6 Replies)
Discussion started by: praveenbvarrier
6 Replies
2. Linux
How can i access environment variables on remote host using ssh
example:
# Remote server
$ echo $MAIL
/var/spool/mail/gacf
$
# Local server
$ ssh gacf@server1 'echo $MAIL'
/var/mail/gacf
$
Expected to find:
$ ssh gacf@server1 'echo $MAIL'
/var/spool/mail/gacf
$ (3 Replies)
Discussion started by: brendan76
3 Replies
3. Shell Programming and Scripting
i want a script with expect or perl or shell which will do ssh to remote host...it will take commandline argument and run the script in remote host.......
i.e that will be like ./ssh.exp remoteip username passwd /tmp.kk.sh
can someone help me on this? (1 Reply)
Discussion started by: Aditya.Gurgaon
1 Replies
4. Shell Programming and Scripting
Hi, could anyone please tell me how to ssh to remote host foo and execute command on it and print the result on local host?
Thanks,
Paresh (1 Reply)
Discussion started by: masaniparesh
1 Replies
5. Solaris
server is ok, I can login on console. however, when I use SSH teachia, there is no repsond.
i have check ps-ef | grep ssh, it shows ok. restart ssh too. still not working.
Anything else I need to check?
# ps -ef | grep ssh
root 24706 1 0 Jun 12 ? 0:00... (7 Replies)
Discussion started by: uuontario
7 Replies
6. Shell Programming and Scripting
Hi all
I wrote a script to execute a script on several remote hosts, but somehow during the execution of the local script, ssh can't come back from the remote host, so that causes my local script hanging... I use the below command to do the job in the local script, any idea?
ssh... (12 Replies)
Discussion started by: bzylg
12 Replies
7. UNIX for Advanced & Expert Users
I do a ssh to remote host(A1) from local host(L1). I then ssh to another remote(A2) from A1.
When I do a who -m from A2, I see the "connected from" as "A1".
=> who -m
userid pts/2 2010-03-27 08:47 (A1)
I want to identify who is the local host who initiated the connection to... (3 Replies)
Discussion started by: gomes1333
3 Replies
8. Shell Programming and Scripting
Hi all,
I have a problem where i'm trying to identify on which remote hosts the apps are running, ssh into it and restart them.
In case more than 1 apps is running on same remote host, i want to be able to group it and ssh only once.
E.g:
app1 = 1.1.1.1
app2 = 1.1.1.2
app3 =... (4 Replies)
Discussion started by: varu0612
4 Replies
9. Shell Programming and Scripting
How should i make the following code working
#!/bin/bash
INPUTFILE="test.txt"
while read STRING; do
IP=`host -t A $STRING | awk '{print $NF}'`
HOSTNAME=`ssh -oPasswordAuthentication=no -oStrictHostKeyChecking=no $IP "hostname"`
echo $HOSTNAME > out.txt
done < $INPUTFILE
At this moment while... (3 Replies)
Discussion started by: urello
3 Replies
10. IP Networking
I am trying to connect to a remote host C from my node host A.
HostA <====> HostB <====> HostC
A tunnel has already been formed using SOCKS5 between HostA and HostC.
Now I want to SSH from A to C. The SOCKS5 IP us 142.133.132.161 and port 1082.
The command I am using is :
ssh -L... (1 Reply)
Discussion started by: Junaid Subhani
1 Replies
LEARN ABOUT ULTRIX
ssh-keysign
ssh-keysign(1M) ssh-keysign(1M) NAME
ssh-keysign - ssh helper program for host-based authentication SYNOPSIS
ssh-keysign ssh-keysign is used by ssh(1) to access the local host keys and generate the digital signature required during host-based authentication with SSH protocol version 2. This signature is of data that includes, among other items, the name of the client host and the name of the client user. ssh-keysign is disabled by default and can be enabled only in the global client configuration file /etc/ssh/ssh_config by setting Host- basedAuthentication to yes. ssh-keysign is not intended to be invoked by the user, but from ssh. See ssh(1) and sshd(1M) for more information about host-based authen- tication. /etc/ssh/ssh_config Controls whether ssh-keysign is enabled. /etc/ssh/ssh_host_dsa_key /etc/ssh/ssh_host_rsa_key These files contain the private parts of the host keys used to generate the digital signature. They should be owned by root, readable only by root, and not accessible to others. Because they are readable only by root, ssh-keysign must be set-uid root if host-based authentication is used. ssh-keysign will not sign host-based authentication data under the following conditions: o If the HostbasedAuthentication client configuration parameter is not set to yes in /etc/ssh/ssh_config. This setting cannot be overri- den in users' ~/.ssh/ssh_config files. o If the client hostname and username in /etc/ssh/ssh_config do not match the canonical hostname of the client where ssh-keysign is invoked and the name of the user invoking ssh-keysign. In spite of ssh-keysign's restrictions on the contents of the host-based authentication data, there remains the ability of users to use it as an avenue for obtaining the client's private host keys. For this reason host-based authentication is turned off by default. See attributes(5) for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Availability |SUNWsshu | +-----------------------------+-----------------------------+ |Interface Stability |Evolving | +-----------------------------+-----------------------------+ ssh(1), sshd(1M), ssh_config(4), attributes(5) AUTHORS
Markus Friedl, markus@openbsd.org HISTORY
ssh-keysign first appeared in Ox 3.2. 9 Jun 2004 ssh-keysign(1M)