which ssh app do you use

hello dear linux-friends

run opensuse 13.2 - which tools are needed for ssh

can i install it via yast

love to hear from you

greetings

In my experience, ssh is installed by default.

I enable the sshd service and open the firewall. I use “rsync” (also installed by default).

I also use “scp”, “ssh-agent”, “ssh-keygen” (but not very often), “ssh-add”; these are all part of the standard “openssh” install.

Hi
I also use sftp, can be used from the command line or from Nautilus sftp://user@host/some/place/on/the/remote.

I use ssh-keygen and keys on all my systems…

I also use ssh with virt-manager to access my systems running kvm.

hello dear Nrickert and Malcom - many many thanks for the reply

this helps alot;:

well i guess that i i have to enable SSH on OpenSuSE 13.1

according to this hints i need to do following: http://wiki.aoxoa.com/Enabling_SSH_on_OpenSuSE_13.1



martin@linux-70ce:~>   netstat -an | grep :22
udp        0      0 fe80::221:63ff:fed1:123 :::*                                
martin@linux-70ce:~> 

furthermore i did the folloiwng steps:


su - 
  systemctl enable sshd.service

see the output:


martin@linux-70ce:~> kgpg -k
martin@linux-70ce:~>   netstat -an | grep :22
udp        0      0 fe80::221:63ff:fed1:123 :::*                                
martin@linux-70ce:~>   su -
Passwort: 
linux-70ce:~ # 
linux-70ce:~ #   systemctl enable sshd.service
ln -s '/usr/lib/systemd/system/sshd.service' '/etc/systemd/system/multi-user.target.wants/sshd.service'
linux-70ce:~ # ^C
linux-70ce:~ # 

well - as it seems i am ready - am i !?

i need to port forward now - can i go for it…!?

Hi
On the internet facing side, always use an obscure port and change it on a regular basis, eg 12222 and then forward that internally to which ever port you have configured on the ssh server. Just keeps any bots or hackers looking if they get your ip address…

hello dear Malcom

my friend who works on a server-backend for me - (which means that he adminstrates the server) uses a certain port.

**on a sidenote: **at the moment we struggle with accessing the site via webmin ACL

so we go another way - i want to use a tunnel to a certain port.

how to do that.

first i need to enable ssh on the linux

well at the moment:i do not think it is all set up yet.
we should get something back from the netstat indicating something is listening on port 22, not that like with :221

see above -

dear Malcom - how to enable the ssh the right way…
and on a sidenote - do i need any additional ssh keys…

and and all help will be greatly appreciated

greetings dilbertone

well the question is - i did the systemctl,
i have to check if netstat show the listener on :22?

On 2014-11-25 22:06, dilbertone wrote:
>
> well the question is - i did the systemctl,
> i have to check if netstat show the listener on :22?

Eum… technical questions on the chat forum? :-?

I think you should ask a moderator to move the thread.


Cheers / Saludos,

Carlos E. R.
(from 13.1 x86_64 “Bottle” at Telcontar)

hello dear Robin - good evening

many many thanks for the reply. sure thing; this is a important thread to me. Probably a moderator can move the thread.

regarding the issue; i think that i have to do something more.

 
martin@linux-70ce:~> kgpg -k
martin@linux-70ce:~>   netstat -an | grep :22
udp        0      0 fe80::221:63ff:fed1:123 :::*                                
martin@linux-70ce:~>   su -
Passwort: 
linux-70ce:~ # 
linux-70ce:~ #   systemctl enable sshd.service
ln -s '/usr/lib/systemd/system/sshd.service' '/etc/systemd/system/multi-user.target.wants/sshd.service'
linux-70ce:~ # ^C
linux-70ce:~ # ssh localhost
ssh: connect to host localhost port 22: Connection refused
linux-70ce:~ # systemctl status sshd
sshd.service - OpenSSH Daemon
   Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled)
   Active: inactive (dead)

linux-70ce:~ # 

i have to do some thing - the tunnel is not ready - Do you think that i have to restart the system in order to geht the tunnel up and running?

any and all help is greatly appreciated

I get:


% netstat -an | grep :22
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      
tcp        0      0 :::22

If you are not seeing something similar, then try rebooting and see if that changes anything.

hello dear Nrickert

many thanks for the quick reply.

on a quick check - (and without a restart) - i get the following

linux-70ce:~ # % netstat -an | grep :22
linux-70ce:~ #  netstat -an | grep :22
udp        0      0 fe80::221:63ff:fed1:123 :::*                                
linux-70ce:~ # 


well - now i do a restart and will have a look if something will get better…

i will come back in about 20 minutes …

many many thanks for all your help - this forum is so supportive - and you do a great great job here :wink:

many thanks

hello again

after the restart - i get the folloing

martin@linux-70ce:~> % netstat -an | grep :22
martin@linux-70ce:~> netstat -an | grep :22
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      
tcp        0      0 :::22                   :::*                    LISTEN      
udp        0      0 fe80::221:63ff:fed1:123 :::*                                
martin@linux-70ce:~> 




Looks good.

 # systemctl enable sshd.service

causes the service to start on future boots.

 # systemctl start sshd.service

starts the service right now.

You originally did only the first of those, so you needed to reboot to get it running.

I use fish with dolphin

Hi
I bet that is one happy dolphin… :wink:

You bet! .

On 2014-11-25 23:26, dilbertone wrote:
>
> hello dear Robin - good evening
>
> many many thanks for the reply. sure thing; this is a important thread
> to me. Probably a moderator can move the thread.

You have to make the request official, using the triangle report button.

> Code:
> --------------------

> martin@linux-70ce:~> su -
> Passwort:
> linux-70ce:~ #
> linux-70ce:~ # systemctl enable sshd.service
> ln -s ‘/usr/lib/systemd/system/sshd.service’ ‘/etc/systemd/system/multi-user.target.wants/sshd.service’
> linux-70ce:~ # ^C

Why do you abort the command?

> --------------------

Besides, you have to both enable and start the service.


Cheers / Saludos,

Carlos E. R.
(from 13.1 x86_64 “Bottle” at Telcontar)

[HR][/HR]PuttY is an excellent GUI for ssh. I believe you can get it straight from the standard OpenSUSE repos.

On Tue, 25 Nov 2014 22:26:01 +0000, dilbertone wrote:

> many many thanks for the reply. sure thing; this is a important thread
> to me. Probably a moderator can move the thread.

Since the thread started with a more generic question, it’d be best to
just create a new thread in the networking forum with your specific
configuration questions in it.

Thanks

Jim


Jim Henderson
openSUSE Forums Administrator
Forum Use Terms & Conditions at http://tinyurl.com/openSUSE-T-C

helllo dear all many many thanks for the hints.

i have been off for some time -now i am back again … many many thanks for your reply.

well i am just testing if the ssh works…




linux-70ce:/home/martin # lsof -i | grep ssh                                                                                                                                        
sshd       785   root    3u  IPv4  11213      0t0  TCP *:ssh (LISTEN)
sshd       785   root    4u  IPv6  11224      0t0  TCP *:ssh (LISTEN)
linux-70ce:/home/martin # ps aux | grep ssh
root       785  0.0  0.0   7440  2320 ?        Ss   19:16   0:00 /usr/sbin/sshd -D
martin    1545  0.0  0.0   5360  1080 ?        Ss   19:16   0:00 /usr/bin/gpg-agent --sh --daemon --write-env-file /home/martin/.gnupg/agent.info /usr/bin/ssh-agent /etc/X11/xinit/xinitrc
martin    1548  0.0  0.0   4180   420 ?        Ss   19:16   0:00 /usr/bin/ssh-agent /etc/X11/xinit/xinitrc
root      3345  0.0  0.0   4408   924 pts/1    S+   20:51   0:00 grep --color=auto ssh
linux-70ce:/home/martin # netstat -natp | grep ssh
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      785/sshd            
tcp        0      0 :::22                   :::*                    LISTEN      785/sshd            
linux-70ce:/home/martin # 


what do you think?`

furthermore: well i could use use telnet to test low level stuff:

what do you think?

if telnet (the low level stuff) runs i would know the DNS resolves,
the server is listening and the firewall allows the port through.

love to her from you
greetings