Notices
Page 5 of 6 « First 34 5 6
Reply
Thread Tools
fatalsaint is offline fatalsaint
2009-12-18 , 18:46
Posts: 3,428 | Thanked: 2,856 times | Joined on Jul 2008
#41
You need either a separate user with a password, or to set a password for the user "user".

You can either do this:
sudo gainroot
passwd user
<set password>
or

sudo gainroot
useradd -m ssh_user
passwd ssh_user
<set password>
(I can't guarantee useradd is on the system - could be adduser, or maybe have to do it by hand.)

Also, since you said you were going to look into keys, I recommend setting:

PasswordAuthentication no

in your sshd config as well. Then you can only use keys.
Last edited by fatalsaint; 2009-12-18 at 18:48.
 

The Following User Says Thank You to fatalsaint For This Useful Post:
blubbi's Avatar
blubbi is offline blubbi
2009-12-18 , 18:50
Posts: 288 | Thanked: 113 times | Joined on Dec 2009 @ Germany
#42
Just use keys...

new users are added with:
Code:
useradd -m -N bla
passwd bla
Cheers
Bjoern
Last edited by blubbi; 2009-12-18 at 18:57.
 
Dave999's Avatar
Dave999 is offline Dave999
2009-12-18 , 18:54
Posts: 7,071 | Thanked: 9,040 times | Joined on Oct 2009 @ Moon! It's not the East or the West side... it's the Dark Side
#43
ok. thx meanwile.

created new user and password, will user have same permissions as root.

If i change this to no, can't log in whith root anymore. but can user change it back to yes

PermitRootLogin no

but if stop shh. noone can connect to the phone so that should also be pretty secure?
Last edited by Dave999; 2009-12-18 at 19:02.
 
fatalsaint is offline fatalsaint
2009-12-18 , 18:55
Posts: 3,428 | Thanked: 2,856 times | Joined on Jul 2008
#44
No. User will be a normal user with no privileges. You will probably need to add the new user to /etc/sudoers (best to use the command visudo if available) in order to sudo gainroot... or if your root user has a password (which I believe it does since you are using it to login via SSH) then you can just run:
Code:
su -
<root password>
as the new user and become "super user", ala Root.

edit: (root can of course change it back once you get root privs, but the user itself will not be able to change it back).
Last edited by fatalsaint; 2009-12-18 at 18:58.
 
blubbi's Avatar
blubbi is offline blubbi
2009-12-18 , 18:56
Posts: 288 | Thanked: 113 times | Joined on Dec 2009 @ Germany
#45
Well just think about it...

You changed it once and you can change it in the same way with a new user (don't know if for "sudo gainroot" the user has to be in the "wheel" group or if you must add it to "sudoers")

Just for clarification:

To successfully use "su -" the user has to be in the group wheel (see "usermod --help" how to add a user to a groupe) but there is no group wheel so I guess this will not work. (If it was supposed to work that way, we would not need "sudo gainroot")

To run "sudo" the user has to be configured in /etc/sudoers.

Cheers
Bjoern
Last edited by blubbi; 2009-12-18 at 19:03.
 

The Following User Says Thank You to blubbi For This Useful Post:
z3phyr is offline z3phyr
2009-12-19 , 06:23
Posts: 104 | Thanked: 10 times | Joined on Dec 2009
#46
Originally Posted by rambo View Post
1. get root terminal (open terminal, type "root")
2. run command "update-rc.d -f remove ssh"

To start/stop the SSH server in root shell use command "/etc/init.d/ssh start" or "/etc/init.d/ssh stop"



No, you should be able to get a root shell by simply typing "root" in the terminal.



I don't think so, not that it matters much upon next install it will probably prompt you for a new one anyway.

kwotski was faster than me: but the update-rc.d is in general the recommended way to muck around with the rc.d directories.
how come i cant stop and start the server anymore. it worked the first time, it would say ssh stop/start when i put in the command

now it says nothing and i cant stop the server
 
blubbi's Avatar
blubbi is offline blubbi
2009-12-19 , 14:32
Posts: 288 | Thanked: 113 times | Joined on Dec 2009 @ Germany
#47
Have you ever heard of "ps"? No, not Hores power!

Check for running sshd services with "ps -ef | grep sshd"

Second, if you run a command, let us know what EXACTLY you did and what EXACTLY the system returned.

Third what do you EXACTLY want to achieve? In most cases there is more than one way to do it.

When something does not work, try to run the program in debug mode and force it NOT to detach and NOT to become a Daemon.
For sshd this would be "sshd -d -f /path/to/configfile"

This means for you:
- Check for running sshd daemons -> kill them
- This one is not required, but makes things easier for us: restart your phone
- Read this: http://wiki.maemo.org/Root_access
- Run sshd in debug mode (see above)
- Try what you want to
- Tell us what you Exactly did
- Tell us exactly how the system responded to your input.

Cheers
Bjoern
 
krk969's Avatar
krk969 is offline krk969
2010-01-06 , 15:09
Posts: 754 | Thanked: 630 times | Joined on Sep 2009 @ London
#48
Originally Posted by blubbi View Post
Hey, why not use keys to authenticate...
.....

And just another hint for those who can't get a connection to there device when connected to the Internet via GPRS/UMTS.
Some providers do NAT, so the IP address the phone gets assigned is a none routeable address and thus you will not be able to connect to your device. Use some sort of VPN (OpenVPN) to get rid of that nasty problem.

Cheers
Bjoern
could Bjoern/anybody elaborate on it a bit more please.
Im trying to ssh into my N900 over a GPRS/3G connection and I cant seem to do it using the IP address asscoiated with the gprs0 interface.

cheers
 
blubbi's Avatar
blubbi is offline blubbi
2010-01-06 , 15:46
Posts: 288 | Thanked: 113 times | Joined on Dec 2009 @ Germany
#49
Originally Posted by krk969 View Post
could Bjoern/anybody elaborate on it a bit more please.
Im trying to ssh into my N900 over a GPRS/3G connection and I cant seem to do it using the IP address asscoiated with the gprs0 interface.

cheers
Please make sure you IP is a valid one and not a private IP wich will not be routed:

According to RFC 1918, the following IP networks are for private nets which will never be connected to the Internet:

10.0.0.0 - 10.255.255.255
172.16.0.0 - 172.31.255.255
192.168.0.0 - 192.168.255.255

If your gprs0 IP falls into one of those three ranges, your only hope to ssh into your phone is via a VPN connection (OpenVPN)

Cheers
Bjoern
__________________
My website:My Applications:
 
krk969's Avatar
krk969 is offline krk969
2010-01-08 , 08:10
Posts: 754 | Thanked: 630 times | Joined on Sep 2009 @ London
#50
Originally Posted by blubbi View Post
Please make sure you IP is a valid one and not a private IP wich will not be routed:
...
If your gprs0 IP falls into one of those three ranges, your only hope to ssh into your phone is via a VPN connection (OpenVPN)

Cheers
Bjoern
Hi,

Yes my IP on gprs0 interface is private.
in the 10.0.0.0 - 10.255.255.255 range

Could you please elaborate how to use openVPN to connect via ssh on a GPRS connections.
Ive never used the openVPN .

cheers
 
Reply
Page 5 of 6 « First 34 5 6

« Previous Thread | Next Thread »

 
Forum Jump


All times are GMT. The time now is 01:57.

Contact Us - Home - Archive - Top