12-02-2019
So how would you normally connect to the super-secure server? Console only perhaps?
It may well be just best to have a scheduled job on the server that posts the information somewhere. This could be by syslog (as mentioned before) or perhaps it could use ssh/scp to connect out and send them somewhere sensible. You could probably also get the server to HTTP-post a file to a webserver that has a cgi-script and just writes the file somewhere.
One wonders just how sensitive the server must be to not trust the administrator to sign on. You could open SSH incoming but limit access by coding up /etc/security/access.conf (or a file under /etc/security/access.conf.d) to restrict to an approved group. If you are paranoid, you could deny user/password access and force SSH keys to be used and make sure that the private keys matching the approved public keys are not shared.
There will be lots of ways to control SSH access, but we would need to understand the worries that the Security team have about the admin team and how far they would permit you to go.
Would a service account that has one function (to collect this information) be acceptable to them?
I hope that this helps with some options,
Robin
10 More Discussions You Might Find Interesting
1. Shell Programming and Scripting
Hi,
I am trying to write a script, which queries a db to get the names of processes, stores it in a file and then checks if that process is running on a remote server. However I am not getting it right, could anyone help me out.
#!/bin/sh
echo "select Address from Device where Cust =... (5 Replies)
Discussion started by: amitsayshii
5 Replies
2. UNIX for Dummies Questions & Answers
Hi All,
I am new to unix. Can anyone tell me "How to check the status of the processes running for the current user?"
Regards,
Ravindaran S (1 Reply)
Discussion started by: ravind27
1 Replies
3. Solaris
Hi,
I have username/password for a remote server. I would like to have list of filenames and their size in a particular directory of remote server.
Now Problem is - I can not use rsh command as I can not modify rhost file of remote server.
Thanks in advance.
Sanjay (1 Reply)
Discussion started by: sanjay1979
1 Replies
4. Shell Programming and Scripting
I have a script that counts the number of oracle processes running on the system:
if
then
and it continues based on whether or not it finds running processes. Now we would like to move oracle to a separate server, but keep the application (and this script) on the old machine.
Is there a... (9 Replies)
Discussion started by: Wotan31
9 Replies
5. Shell Programming and Scripting
Hi ,
How to check whether web server is running from remote machine
How to check whether web server is running on web server itself
Can any one help me soon (1 Reply)
Discussion started by: satheeshkr_cse
1 Replies
6. AIX
Hello,
Please help me with a script with which I can check long running processes on the database server and the os is AIX.
Best regards,
Vishal (5 Replies)
Discussion started by: Vishal_dba
5 Replies
7. Shell Programming and Scripting
Hi guys,
So i am in server1 and i have to login to server 2, 3,4 and run some script there(logging script) and output its result. What i am doing is running the script in server2 and outputting it to a file in server 2 and then Scp'ing the file to server1. Similarly i am doing this for other... (5 Replies)
Discussion started by: srkmish
5 Replies
8. Shell Programming and Scripting
I want to check how many processes are running with same names and get their respective counts.
ps -ef|grep -Eo 'process1|process2|process3| '|sort -u | awk '{print $2": "$1}'
Output would look like :
$ ps -ef|grep -Eo 'process1|process2|process3| '|sort | uniq -c | awk '{print $2":... (8 Replies)
Discussion started by: simpltyansh
8 Replies
9. Shell Programming and Scripting
I have a script on a Linux box which scp the files to windows server without any issues. but there are time frames where the windows server will not be available due to maintenance. hence I need to check if the remote location is available before running the scp command.
scp... (3 Replies)
Discussion started by: gpk_newbie
3 Replies
10. UNIX for Beginners Questions & Answers
HI
can someone help me to check the process running more than 2 hours.
I have the below command which shows the time and process id, however, I only need the processes running more than 2 hours. (8 Replies)
Discussion started by: Vinod
8 Replies
LEARN ABOUT MOJAVE
jstack
jstack(1) General Commands Manual jstack(1)
NAME
jstack - stack trace
SYNOPSIS
jstack [ option ] pid
jstack [ option ] executable core
jstack [ option ] [server-id@]remote-hostname-or-IP
DESCRIPTION
jstack prints Java stack traces of Java threads for a given Java process or core file or a remote debug server. For each Java frame, the
full class name, method name, 'bci' (byte code index) and line number, if available, are printed. With the -m option, jstack prints both
Java and native frames of all threads along with the 'pc' (program counter). For each native frame, the closest native symbol to 'pc', if
available, is printed. C++ mangled names are not demangled. To demangle C++ names, the output of this command may be piped to c++filt.
NOTE - This utility is unsupported and may or may not be available in future versions of the J2SE SDK. jstack is not currently available
on Windows platforms or on the Linux Itanium platform.
PARAMETERS
Options are mutually exclusive. Option, if used, should follow immediately after the command name.
pid process id for which the stacktrace is to be printed. The process must be a Java process. To get a list of Java processes
running on a machine, jps may be used.
executable Java executable from which the core dump was produced.
core core file for which the stack trace is to be printed.
remote-hostname-or-IP
remote debug server's (see jsadebugd) hostname or IP address.
server-id optional unique id, if multiple debug servers are running on the same remote host.
OPTIONS
-m prints mixed mode (both Java and native C/C++ frames) stack trace.
-h Prints a help message.
-help Prints a help message.
SEE ALSO
pstack(1) c++filt(1) jps(1) jsadebugd(1)
KNOWN BUGS
Mixed mode stack trace, the -m option, does not work with the remote debug server.
13 June 2004 jstack(1)