I have a ubuntu machine that is connected to my house's sound system. Is there a way I can control what it is playing remotely? I have SSH access if necessary.
I typically use Rhythmbox to play music.
littleblackbox is publishing "private keys" that are accessible on publicly available firmwares. Debian calls these "snake-oil" certs. Most of these routers are securing their HTTPS certs with these, and as I think about it, I've never seen one of these internal admin websites with certs that wasn't self signed.
Given a webserver on IP 192.168.1.1, how do you secure it to the point that Firefox doesn't offer warnings (and is still secured)?
littleblackbox is publishing "private keys" that are accessible on publicly available firmwares. Debian calls these "snake-oil" certs. Most of these routers are securing their HTTPS certs with these, and as I think about it, I've never seen one of these internal admin websites with certs that wasn't self signed.
Given a webserver on IP 192.168.1.1, how do you secure it to the point that Firefox doesn't offer warnings (and is still secured)?
I can get the password and group from the LDAP client
getent passwd
getent group
work sucessfully
But when I try 'su USERNAME' the name from the LDAP server or 'ssh USERNAME@localhost' it prompt me a user password, I typed exactly the USERNAME password but it return "su : Authentication Failure" or "Permission denied, Please try again". I don't know why? it only work when I was at root at the client and "su USERNAME"
I would like to setup a gaming VPN. Ie. I have some games that work over LAN and would like to play them with people that are not on my LAN. I know I can do this with OpenVPN.
My ultimate goal would be to run OpenVPN portably on my host OS and not even need any virtualization. As such i don't want to install it on my host, but i'm fine with running it portably. I'm even fine with temporarily adding registry keys, and then running a .reg file to remove these entries once i'm done. To this effect i have installed OpenVPN on a virtual machine and diffed the registry. I then manually (using a .reg file) added all the keys that seem important on my host OS and copied the installation folder of OpenVPN onto my host machine. Then i try to run openVPN GUI 1.0.3 as a test and it says "Error opening registy for reading (HKLM\SOFTWARE\OpenVPN). OpenVPN is probably not installed". I verified that that key is indeed in the registry with all subkeys and it looks correct. I have tried running the GUI as an administrator and in compatibility mode with no success. I am running Windows 7.
If this fails then i would be happy with installing OpenVPN on a virtual machine in VMWare but they key is that i will be running the game installed on my host machine. The first question for this option is if this is even possible. The second is, that I can't get the VM to have internet access if I use bridging but i can if i use NAT. Is it possible to do this game VPN setup with VMWare guest OS running using NAT?
Summary of questions:
-Is it possible to run openVPN portably and if so what did i miss above?
-If it's not possible to run it portably, then can setup a gaming LAN by installing OpenVPN in a guest OS with NAT and how can i do this?
-If the above is not possible then can i install OpenVPN in a guest using bridging and if so how can i set this up with a Windows 7 host and Windows XP guest as currently i can't get the guest to be able to access the internet in bridging mode, but it working in NAT mode.
-In general is there any good documentation on setting up a gaming LAN with OpenVPN (i am using 2.1.4) as i have never set up a VPN of any sort before so any help would be much appreciated.
Thanks!
Certain letters are suddenly showing up as fractions in Mac's Mail program. Specifically,
lowercase a = 1/2
lowercase b = 1/4
lowercase c = 3/4
Capitalized, they work fine, the other keys are working fine, and this only happens with this particular program, but I can't figure out what to change or what's wrong.
It's Mac OS X 10.4.11 and an update was applied last night but other than that nothing's been changed (that I know of, I'm asking for someone else).
Thanks.
My server has 2 ips: x.x.x.73 and x.x.x.248. I can access my site via these ips,
using Web browser.
{Now, from a CentOS machine (not my server), using terminal}
If I:
dig @x.x.x.73 mydomain.com
dig @x.x.x.248 mydomain.com
I get the result:
Connection timed out; no server could be reached.
Could somebody please tell me how to fix it? Thank you.
More information:
If I log in to my server using ssh and do:
dig @x.x.x.73 mydomain.com
dig @x.x.x.248 mydomain.com
I can see my zone shown as expected:
; <<>> DiG 9.3.6-P1-RedHat-9.3.6-16.P1.el5_7.1 <<>> @x.x.x.73 mydomain.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12757
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2
;; QUESTION SECTION:
;mydomain.com. IN A
;; ANSWER SECTION:
mydomain.com. 38400 IN A x.x.x.73
mydomain.com. 38400 IN A x.x.x.248
;; AUTHORITY SECTION:
mydomain.com. 38400 IN NS ns2.mydomain.com.
mydomain.com. 38400 IN NS ns1.mydomain.com.
;; ADDITIONAL SECTION:
ns1.mydomain.com. 38400 IN A x.x.x.73
ns2.mydomain.com. 38400 IN A x.x.x.248
;; Query time: 20 msec
;; SERVER: x.x.x.73#53(x.x.x.73)
;; WHEN: Sun Jan 15 11:46:30 2012
;; MSG SIZE rcvd: 129
BIND version 9.3.6, Centos 5.
Logging to my server using ssh, do inga "dig google.com"
also shows expected results.
Is it possible to keep a network alias - without specifying the IP address in the hosts file? For instance, I have abcd.efgh.com but want abcd -> abcd.efgh.com so that ping and ssh work as they normally would.
I want it to work with dynamic IP on abcd.efgh.com, that's why I don't want to state the IP address explicitly.
I've been using an SSH proxy to my home network to encrypt my internet surfing, which is fine. But the connection is much slower than the direct one, and when I'm downloading large files I'd rather go around the proxy. Currently, I send it to Downthemall, go to FoxyProxy and disable the proxy, cancel and resume the download, then when it's started go back to FoxyProxy and re-enable it. Is there any way I can just get DownThemAll stuff to skip the foxyproxy?
I'm on ubuntu. I only have sftp access to a remote server. The remote server disabled shell, so i can't use ssh or scp command.
Is there a way for me to recursively get the entire /var/www directory onto my localhost?
Hi!
Is there any online web-service, that offers portmap? My corporate proxy allows only 80 port connections, and I need ssh (20 port). So I could connect to http://some-proxy.org/mysite_80/ and use it as gateway?
Our team rolled puppet out to our systems over the last six months. We're managing all sorts of resources, and some of them have sensitive data (database passwords for automated backups, license keys for proprietary software, etc.).
Other teams want to get involved in the development of (or at least be able to see) our modules and manifests. What have other people done to continue to have secure data moving through Puppet, while sharing the modules and manifests with a larger audience?
I have a VPS, until now I used the default root user for SSH access and everything. For security reasons I'd like to use a different user for root, terminal access and sudo operations. So I created another user, gave him the sudo and every other perm.
The problem is that all the system files belongs to root. What happens if I set PermitRootLogin No for root? Those files wouldn't be editable by the new root user!
I can connect to other computers on my home network (ubuntu + OSX machines) using the IP address, but I can't connect using the netbios name.
On the mac the name appears in Finder but if I try to connect (goconnect to server smb://[email protected]) it doesn't work, while smb://[email protected] does. Same with ssh, ping and afp between the macs.
This is a intermittent problem. It has worked in the past.
Hello all,
I'm using Windows Vista, and I was wondering if I can put shortcuts for applications.Like for example, if I press a certain combination of keys I get notepad, or something like that. If those shortcuts were already there, how can I know them?
Another thing, if I have an application that runs on media files for example, can I add it on the " Right Click" menu when I right click on media files. I hope you got that :)
Thanks alot :)
I am setting up a sort of personal dropbox for our customers on a CentOS 6.3 machine. The server will be accessible thru SFTP and a proprietary http service base on PHP. This machine will be in our DMZ so it has to be secure. Because of this I have apache running as an unprivileged user, hardened the security on apache, the OS, PHP, applied a lot of filtering in iptables and applied some restrictive TCP Wrappers. Now you might have suspected this one was coming, SELinux is also set to enforcing.
I'm setting up PAM to use MySQL so my users in the web application can login.
These users will all be in a group that can use SSH only for SFTP and users will be chrooted to their own 'home' folder.
To allow this SELinux wants the folders to have the user_home_t tag. Also the parent directory needs to be writable by root only. If these restrictions are not met SELinux will kill the SSH pipe immediately.
The files that need to be accessible thru both http and SFTP so I have made a SELinux module to allow Apache to search/attr/read/write etc. to directories with the user_home_dir_t tag.
As sftp users are stored in MySQL I want to setup their home dirs upon user creation. This is a problem since Apache has no write access to the /home dir, it's only writable by root since it's required to keep SELinux and OpenSSH happy.
Basically I need to let Apache do only a few tasks as root and only within /home. So I need to somehow elevate the privileges temporarily or let root do these tasks for apache instead.
What I need to have apache do with root privileges is the following.
mkdir /home/userdir/
mkdir /home/userdir/userdir
chmod -R 0755 /home/userdir
umask 011 /home/userdir/userdir
chcon -R -t user_home_t /home/userdir
chown -R user:sftp_admin /home/userdir/userdir
chmod 2770 /home/userdir/userdir
This would create a home for the user, now I have an idea that might work, cron.
That would mean the server needs to check for users that have no home every minute, then when creating users the interface would freeze for an average of 30 seconds before the account creation can be confirmed which I do not prefer. Does anybody know if something can be done with sudoers? Or any other idea's are welcome...
Thanks for your time!
So I have a new keyboard Microsoft Ergonomic 4000, that has the standard volume and play/pause media buttons, but doesn't have anything for the next/previous track.
How do I go about setting the programmable keys to do next/previous track?
My ssh connections to my guest vmware box (any OS) are dropped when I suspend (to RAM or to disk) the Win7 host.
It only happens when the connection is through the NAT or HOST network. It works as expected with the bridged one.
I have a copy of Windows 7 Professional that I have downloaded from the MSDN e-academy (thanks to my school). Now, the problem is that these license keys are one-use only.
If I need to reformat or do a factory reset, what is the best way for me to do so, without invalidating my license and screwing me out of an operating system?
I am wondering what is the command in Windows to show the current local directory? I am now working in PUTTY psftp mode, so the current directory is not shown in prompt.
Also is there GUI for ssh and sftp under windows? I don't think PUTTY offer anything GUI?
Thanks!
hi im using vaio- vgn-cr35g....function keys are not working and brightness controll has become a problem , even i m not getting it in more power options,earlier it was there ...can any one help me to overcome the same..........thanku
For a schoolar project, I have to run differents services in a lab enviroment where I'll have 6 computers working as servers, what services can I put together, and what cannot be, in order to prevent security risks, and considereiting that if one service goes down, affects less possible the function of the server farm, the services are:
MySql
Http for intranet
Https
DHCP
IPP
SMTP
LDAP
VPN
SSH
NTP
DNS
NFS
I'll use linux
Hi everyone,
I am about to setup a home network server running Ubuntu Server and I'm currently a bit worried about how to handle network shares and permissions in a good way.
After working a bit lately with Netgears ReadyNAS's units, I have become really spoiled with how easy it was to set up network shares and giving a specific user different levels of network access to a specific share (forbidden access, read, read/write).
How would I accomplish the same with my Ubuntu server through SSH?
Thanks a lot
littleblackbox is publishing "private keys" that are accessible on publicly available firmwares. Debian calls these "snake-oil" certs. Most of these routers are securing their HTTPS certs with these, and as I think about it, I've never seen one of these internal admin websites with certs that wasn't self signed.
Given a webserver on IP 192.168.1.1, how do you secure it to the point that Firefox doesn't offer warnings (and is still secured)?
Hi all,
I have a Fedora 10. NetworkManager is stopped. Network is configured with a static ip address.
On my screen i have this :
How do i disabled that network information output ? I don't see it on SSH, only the main console.
Thanks !