main

main@lists.alug.org.uk

10364 discussions

ssh configuration, I have multiple usernames on one host
by Chris Green 23 Jan '15

23 Jan '15

My hosting provider (TsoHost) provides ssh access for each domain hosted. The ssh login is of the following format:- <site>@shell.gridhost.co.uk The <site> is the first 8 characters of the domain name. What I would like to do in my ssh_config file is something like:- Host site1 site2 site3 site4 HostName shell.gridhost.co.uk User %h However this doesn't work of course becase the %h doesn't work in the User field. Can anyone see any easy way of doing this except to simply repeat the whole block for each domain, as in:- Host site1 HostName shell.gridhost.co.uk User site1 -- Chris Green

1 0

[ALUG Announce] 3rd Monday Monthly Ipswich Social Meeting : The Mulberry Tree ALUG
by samwise 18 Jan '15

18 Jan '15

ALUG Announce Please send announcements to Announce(a)lists.alug.org.uk Unsub, change settings via http://lists.alug.org.uk/mailman/listinfo/announce ----- The monthly "Third Monday" ALUG Ipswich Social Meeting is back tomorrow, 18th January, at 20:00: The Mulberry Tree 5 Woodbridge Road IPSWICH IP4 2EA Tel: 01473 225776 Map/Directions URI: http://maps.google.co.uk/?q=IP4+2EA WWW: https://www.facebook.com/MULBERRYHOSPITALITY The Mulberry Tree, previously known as The Milestone Beer House, is a grade 2 listed building in the centre of Ipswich. It is located at the intersection between Woodbridge Road and the A1156, across the road from the old Odeon cinema and not far from the Regent Theatre. It re-opened on Thursday March 29th 2012 after a major refurbishment, under its original name of The Mulberry House and has already begun to regain a good reputation for its selection of beers and ales. It has a sizeable car park to the rear of the building. All are welcome, novices and experienced users. Feel free to ask for further information on the Main ALUG mailing list. I'll be arriving late, before 21:30, but hopefully there will be other regulars there to look out for. Cheers, Peter. -- I am aiming to run the London Marathon 2015 in aid of the PSP Association. All sponsorship gratefully received. :) http://www.bagshot-row.org/marathonformum ----- Send discussion replies to main(a)lists.alug.org.uk (Reply-To set) Unsub, change settings via http://lists.alug.org.uk/mailman/listinfo/announce

1 0

Re: [ALUG] Ubuntu 14.04 LTS get clean
by Richard McLellan 18 Jan '15

18 Jan '15

The apt-get autoremove worked. The other commands were not removing data in the correct place, wherever that was. Thanks for the help. Richard

1 0

Comparitive security of different encryption schemes
by Chris Green 18 Jan '15

18 Jan '15

This should start a good arg...., sorry, discussion going! :-) I currently store various bits of sensitive information in files encrypted using my editor's (my editor is vile) 'crypt' option. This uses the system's crypt() function to encrypt/decrypt the files. The big advantage is simplicity, I simply do:- vi -k <password> file and the file is automatically decrypted and encrypted for me. There are some weaknesses though, crypt() isn't very secure (but see below, it's not *that* bad) and the password floats around in RAM and the environment. So I have been looking for improvements but I want to keep a simple interface. So what I have found so far (including the existing scheme) are as follows:- Existing Scheme =============== The vile editor using the -k command line option. The password is possibly visible to someone who has access to my machine while I'm using it but that's a fairly unlikely scenario. In addition the non-alphanumeric characters I have in my passwords mess up the dispay somewhat. The crypt() encryption isn't very secure *but* it's actually not easy to brute force. I tried encryption breaking tools like unixcrypt-breaker and they only work if the 'statistics' files have stuff quite similar to what you're decrypting. Since the files I have encrypted are fairly random (very few actual words in there) the encryption breaking generally produces rubbish. The only case where it came up with one approximate hit was where I had put a password string repeatedly in the statistics files which was also on the file to decrypt (thinks, vary my passwords more!). Use an encfs file system ======================== This is fairly simple, I already use it for some other storage, it wouldn't be too difficult to write a wrapper script for my editor to simplify usage. It uses the AES cipher, 192 or 256 bits. There are some reports that it needs updating to be really secure in the modern environment but it's probably 'good enough'. Use 'pass' with a GnuPG key =========================== The 'pass' program is effectively a wrapper script that makes it easy to use a GPG key for encrypting files. I've played with it a bit and (once I'd worked out how to generate my GPG key) it was pretty simple to use and provides me with the sort of interface I want. This thus gives a choice of key types and sizes. The object of the exercise (encrypted files) is to keep important, confidential things safe but easy to access. In particular I have electronic banking details and such in one file, that's probably the most sensitive one. Ease of access is important, as is portability, I need to use this on more than one computer. A USB stick is *not* the answer for me, I'll lose the stick! The big advantage of the 'existing scheme' is simple portability as it's just part of the editor I use everywhere. It's to protect against people finding out my passwords etc., the computers with the files on are reasonably secure (as in unlikely to be stolen). I guess the most likely thing to happen is someone getting access to the files so the most important thing is to be sure that the encryption is difficult to break. So - what to choose? I think my feeling is that the choice is between 'do nothing' (vi plus crypt()) and 'pass' with a GnuPG key. What does the team think? -- Chris Green

2 4

Ubuntu 14.04 LTS get clean
by Richard McLellan 18 Jan '15

18 Jan '15

Hello folks. I am very much lost with all the programs taken out of this version. I last used a version 10.xx with lots of programs. However, I am unable to clear a folder which is low on space. I forget where the folder is but it's where the updates are stored. The popup box tells me to use sudo apt-get clean but this does nothing when I use the terminal. How can I get this resolved? Thanks. Richard

3 2

One fine Thursday
by Anthony Anson 15 Jan '15

15 Jan '15

Was the Norwich meeting last week or will it be tomorrow? Nothing seen in Announcements. -- Tony http://www.girolle.co.uk/

3 6

Slow SSH connection
by Richard Lewis 15 Jan '15

15 Jan '15

Hello ALUG, I've noticed recently that all my SSH logins take some time (around 5-10 seconds). I found that I can configure sshd with the option: UseDNS no to fix this. However, that's not quite satisfactory. For one thing, I can only do that on hosts where I manage the sshd. And for another, it doesn't explain why connecting to *all* the servers I normally do became slow at the same time. So I've been looking for anything on my local computer that's making them slow but so far haven't been able to find anything. From the verbose output I can see that ssh waits after: debug1: SSH2_MSG_SERVICE_REQUEST sent debug2: service_accept: ssh-userauth debug1: SSH2_MSG_SERVICE_ACCEPT received debug2: key: /home/mas01rl/.ssh/id_rsa (0x7fc503a76690), debug2: key: /home/mas01rl/.ssh/id_dsa ((nil)), debug2: key: /home/mas01rl/.ssh/id_ecdsa ((nil)), debug2: key: /home/mas01rl/.ssh/id_ed25519 ((nil)), and then continues from: debug1: Authentications that can continue: publickey,password debug3: start over, passed a different list publickey,password debug3: preferred publickey,gssapi-keyex,gssapi-with-mic,keyboard-interactive,password after a pause of 5-10 seconds. I noticed some discussion about the GSSAPI key exchange and how that can cause delays if you don't have Kerberos credentials. So I tried disabling it, but that didn't make any difference; and there weren't any relevant Kerberos error messages in the output anyway. (Also notice from the above output that I also tried changing the order of authentication methods to make GSSAPI come after publickey.) Any suggestions what else could be wrong? Or is it really that all the servers need to have 'UseDNS no'? And if so, what has changed about them all to make this necessary? Or could it be something to do with my network set up? Thanks, Richard -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Richard Lewis j: ironchicken(a)jabber.earth.li @: lewisrichard http://www.richardlewis.me.uk/ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

4 4

Using clamav (or other) to detect web application exploits
by Mark Rogers 14 Jan '15

14 Jan '15

Are there any clamav definition repositories that detect things like PHP shell scripts etc that might be uploaded as part of an exploit of something like Joomla? Or are there other tools that scan the filesystem looking for signs of an exploit? My google attempts have drawn a blank; there's plenty of external tools for trying to find an exploitable hole, but I'm talking about something to run internally to find evidence that a hole has been exploited, which isn't the same thing. A definition file for clamav seems the most obvious approach but I'm open to suggestions. Mark -- Mark Rogers // More Solutions Ltd (Peterborough Office) // 0844 251 1450 Registered in England (0456 0902) 21 Drakes Mews, Milton Keynes, MK8 0ER

1 0

DVD drive not recognised?
by Bev Nicolson 12 Jan '15

12 Jan '15

I'm attempting to burn an MP3 onto a DVD but there are a few problems not least of which that I'm a novice at this. I'm using DVD-R. My DVD drive doesn't appear to be recognised by either Brasero or XfBurn. It's told me one of them is full but I've clearly not done things properly as it won't play in my CD player. I need help. Ubuntu 12.04 LTS. Bev

2 2

VPN, are there tutorials for the uninitiated anywhere?
by Chris Green 11 Jan '15

11 Jan '15

I'm thinking about using a VPN for remote access to my desktop machine when out and about. The obvious choice (?) is to run an OpenVpn server on my desktop machine and clients on my laptop or whatever when I'm away. I won't want to get access from 'foreign' machines on which I don't have the ability to install stuff. I've wandered around the OpenVpn website and can follow (I think!) all the technical stuff about how to install it etc. and how to run clients. What I don't understand and nowhere seems to tell me is what it actually does for me as a user. I mean there I am away from home somewhere and I've connected to the server using the OpenVpn client - then what? I don't think I get a home machine desktop as such, so what do I get? If I want to access my address book or configure my router what do I do? -- Chris Green

4 4

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

main