- WLUG - wlug.mailman3.com

Re: [Wlug] pubkey authentication in openssh

by Mike Leo

yes....have only the users you want to use pubkeys generate keys and share the public one by putting it in that users ~/.ssh(2) on each server. ssh-keygen is the command to make the keys. --- Eric Stein <eastein(a)WPI.EDU> wrote: > Does anyone know a way to force pubkey authentication for only certain > users but allow password for others? > Eric > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Feb. 17, 2006

running scripts as someone else

by Mike Leo

I brought this up last night, but the suggestions did not help. Basically i have a "thing" i need to run at boot as someone else. init scripts are launched at boot as root, so somewhere in the script, I have to become someone else to execute this "thing". sample thing: su -l LNVAPP008SSH -c "/usr/local/bin/ssh2 -p 32497 -R51180:LNVAPP008:80 -l LNVAPP008SSH n2web043" This works just fine when logged in as root or as the LNVAPP008SSH user from the command line. The ssh has been setup so that this user (LNVAPP008SSH) does not need to pass a password to initiate the ssh tunnel. However, when this is called from a script, it fails trying to look for a password. I am surmizing that the script is still acting as root when it makes the ssh connection. When i put a printenv in the script, it reports me as still being root, not the LNVAPP008SSH user. I also have another situation that I need to apply this too. This seems like it should be something someone else in the world has done before. So any thoughts on this would be greatly appreciated. Thanks Mike

Feb. 17, 2006

Re: [Wlug] pubkey authentication in openssh

by John Stoffel

Eric> Does anyone know a way to force pubkey authentication for only certain Eric> users but allow password for others? Can you explain what you're trying to do here? I've done some publick key stuff, but mostly for scripts which don't want passwords, and which are restricted to only a subset of commands. If you want to limit the publickey users to only run certain commands that you control, just setup their ~/.ssh2/authorized_keys file properly withthe public key and the locked down command of your choice. The SSH book has some decent examples. John

Feb. 17, 2006

Re: [Wlug] Specify which nic gets named eth0

by John Stoffel

Mike> I have a RHAS4 2.6 kernel install with 6 NIC's. How do i tell Mike> it which nic I want to be labeled eth0? Udev? Mike> specifically, i have 2 nics built into the mobo, and 2 dual port Mike> addon cards. Mike> I want eth0 to be nic1 on the mobo, and eth1 to be nic2 on the Mike> mobo. What happened to nic0? Ok, I'm being a smartass... :] Mike> By default it is assigning those nics to eth4 and eth5. It's probably due to how the PCI bus get ennumerated. Try using the 'nameif' command to fix which MAC address is bound to which eth* name. You'll probably need to do: udevinfo -a -p /sys/class/net/eth0 and see what shows up. It might be best to do this after setting up all six interfaces (not caring what is where) so you can get their MAC addresses and put them into the table. John

Feb. 17, 2006

Re: [Wlug] Specify which nic gets named eth0

by Chuck Anderson

On Fri, Feb 17, 2006 at 12:41:21PM -0800, Mike Leo wrote: > yes, but that will only assign the right mac to the wrong NIC. > eth0 will still be assigned to the "extra" nic port, not the one I want. > but thanks for replying. HWADDR doesn't assign MAC addresses to NICs. It just matches the NIC device with that hardware address. MACADDR actually reprograms the MAC used by a NIC.

Feb. 17, 2006

Re: [Wlug] MySQL replication question

by Jeff Moyer

==> Regarding [Wlug] MySQL replication question; Bill Mills-Curran <bill(a)mills-curran.net> adds: bill> Does anyone have experience with MySQL's replication capabilities? bill> I'm running versions 4.1.8 and 4.1.14 servers on linux and windows, bill> and I have a very remote site where I'd like to support replication. bill> The data changes very slowly, but the link has 300 ms (ping) latency bill> and has a small (but noticeable) amount of down time. bill> Does it work well enough to be considered reliable for critical bill> applications? I think you would get a more accurate answer posting on a MySQL list. http://lists.mysql.com/replication -Jeff

Feb. 17, 2006

Re: [Wlug] Specify which nic gets named eth0

by Jeff Moyer

==> Regarding Re: [Wlug] Specify which nic gets named eth0; Mike Leo <mleo963(a)yahoo.com> adds: mleo963> yes, but that will only assign the right mac to the wrong NIC. mleo963> eth0 will still be assigned to the "extra" nic port, not the one I mleo963> want. mleo963> but thanks for replying. Hmm, will an alias in /etc/modprobe.conf help, then? For example: alias eth0 tulip This will only work if the ethernet cards use different drivers, obviously. -Jeff mleo963> --- Jeff Moyer <jmoyer(a)redhat.com> wrote: >> ==> Regarding [Wlug] Specify which nic gets named eth0; Mike Leo >> <mleo963(a)yahoo.com> adds: >> mleo963> I have a RHAS4 2.6 kernel install with 6 NIC's. How do i tell it mleo963> which nic I want to be labeled eth0? >> mleo963> specifically, i have 2 nics built into the mobo, and 2 dual port mleo963> addon cards. >> mleo963> I want eth0 to be nic1 on the mobo, and eth1 to be nic2 on the mleo963> mobo. >> mleo963> By default it is assigning those nics to eth4 and eth5. >> You can specify a hardware address in the ifcfg-ethX scripts: >> >> HWADDR=00:04:23:B3:B4:C3 >> >> -Jeff >>

Feb. 17, 2006

pubkey authentication in openssh

by Eric Stein

Does anyone know a way to force pubkey authentication for only certain users but allow password for others? Eric

Feb. 17, 2006

Re: [Wlug] Specify which nic gets named eth0

by Mike Leo

yes, but that will only assign the right mac to the wrong NIC. eth0 will still be assigned to the "extra" nic port, not the one I want. but thanks for replying. --- Jeff Moyer <jmoyer(a)redhat.com> wrote: > ==> Regarding [Wlug] Specify which nic gets named eth0; Mike Leo <mleo963(a)yahoo.com> adds: > > mleo963> I have a RHAS4 2.6 kernel install with 6 NIC's. How do i tell it > mleo963> which nic I want to be labeled eth0? > > mleo963> specifically, i have 2 nics built into the mobo, and 2 dual port > mleo963> addon cards. > > mleo963> I want eth0 to be nic1 on the mobo, and eth1 to be nic2 on the > mleo963> mobo. > > mleo963> By default it is assigning those nics to eth4 and eth5. > > You can specify a hardware address in the ifcfg-ethX scripts: > > HWADDR=00:04:23:B3:B4:C3 > > -Jeff >

Feb. 17, 2006

Re: [Wlug] Specify which nic gets named eth0

by Jeff Moyer

==> Regarding [Wlug] Specify which nic gets named eth0; Mike Leo <mleo963(a)yahoo.com> adds: mleo963> I have a RHAS4 2.6 kernel install with 6 NIC's. How do i tell it mleo963> which nic I want to be labeled eth0? mleo963> specifically, i have 2 nics built into the mobo, and 2 dual port mleo963> addon cards. mleo963> I want eth0 to be nic1 on the mobo, and eth1 to be nic2 on the mleo963> mobo. mleo963> By default it is assigning those nics to eth4 and eth5. You can specify a hardware address in the ifcfg-ethX scripts: HWADDR=00:04:23:B3:B4:C3 -Jeff

Feb. 17, 2006