Logging in via SSH

[mresell]

I have had ongoing issues w/ using putty and SSH. I have had a TT going on for a few days, but not getting anywhere. I think the problem is getting the key pairs on the server. Anybody that has had any luck w/ this please let me know. I looked in KB, but some of the info seems unclear.

[somereseller]

You cannot put your keys on the server. You have to use the old password method.

[mresell]

This is odd. Here is the deal. I generated a key pair. The putty logs show I get hung at password. I have check the correct pass a million times. I can get in via ftp and cp. When I enter pass it doesn't show anything, but when you hit enter it refuse you. I guess I need someone to see why it is refusing me on the server side. I will look thru my web logs and see if anything comes to light. I temp disabled my fw and it still wouldn't let me in. What can you do for secure file transfer? Thanks for the response somereseller.

[mresell]

It is now working. So never mind. What is the deal w/ the KB info and the other putty programs like sftp. Can we use any of the others besides shell?

[mresell]

Well YAY! I just got in using sftp and xiplorer. So SFTP does work for anyone who cares to know. Altho it did not accept my ssh1 key, just camoflauge. Better than reg ftp tho. Altho Openssh supports this so I am wondering why it isn't working. I guess it goes back to the key issue. The old alabanza cp's let you past the key in there. They do that for SSL why not SSH? What is all the info in KB about creating a .ssh directory and transferring a key then?

[mresell]

On this subject has anyone checked out this free modified teraterm pro web program or component? Sounds like interesting enhancements to Teraterm.

http://www.ayera.com/teraterm/

[somereseller]

Vortech does not support the convenient key auth, you have to stick to using passwords.

SFtp works great.

You can use putty to setup a tunnel so that you can check your emails "securely" while we wait for APOP/SPOP

The only problems with all these workarounds is that you are limited to 3 ssh sessions per account. This can become a problem if you need to give access to many people.

[mresell]

Thanks for the info on plink I will try that. ixplorer that actually works w/ pscp instead of sftp(like I thought) was buggy so I trashed that. Only supports ssh1 because I believe pscp only does. For sftp I bounced over to ipswitch tho and they have got an awesome deal (9.95) on wsftp pro upgrade which has ssh2 and ssl(which I have not played with yet.) The SSH appears to do some kind of key replacement/exchange tho, but I do have to log in. That was ideal since I used that program mostly anyway, that and DW. Works great of course and super user friendly. Any tips on using the plink to set up a tunnel, by all means let me know. Particularly w/ email client. I use and adore Pegasus because it does everything under the sun and it is fast and clean. Even if I want command line.

<b>When you say limited to 3 ssh per acct. You mean at once right. My understanding is on unix you can only have 1 shell access anyway per user acct. Do you mean only 3 on your entire reseller acct. or what? Confused</b>
Thanks for the info!

[mresell]

I found the tunneling feature in putty and used the instructions for port forwarding, but I am confused about the server address, port and login. I assume login on mail server under session and use email login info, but w/out sending a bunch of user names and passwords I would like to know what the proper <b>Session</b> info would be for setting up a port forwarding situation w/ pop server as an example. I know I have the port forwarding correct just confused about the login for this. Thanks.

[smooshylab]

waking up this thread...

I wanted to set up a tunnel to the mail server, but the mail server doesn't have ssh running on it. Has anyone successfully created a tunnel to check their mail?

Would creating a tunnel to one of the unix servers work? This way, we're at least tunnelling to a machine in the hosted network and any cleartext is contrained to the server farm. (network guys, please confirm my last assumption)

stan

[mresell]

I know myself and somereseller do. I have been using plink for this(part of putty). You have to put in local forwarding port to remote. You have to be logged in via ssh account w/ plink. Remember to save the profile. Then change you email client port to the local one you defined. This way passes aren't in the clear.

[smooshylab]

I use putty and its tunnels feature at work to get to my home machine, but I know that I have ssh running on my home machine. To me, it looks like mail4 doesn't have ssh authentication, and if it does, I don't know what account to use. Should I just be connecting to one of the other machines for which I have ssh access, like unix2 and assume that it is reasonably safe enough that unix2 is connecting to mail4?

Am I mistaken about how the tunnels work?

[mresell]

Putty is alittle conusig on docs. Yes use your ssh account on one of your domains. I am pretty positive it doesn't matter which one. I have used several and all work. All unix. then just setup mail.domain.com thru them. Does not have to be on mail server. Remember hsphere is a cluster or I assume it works because of this.

I take that back cluster doesn't matter. If you can create tunnel...unless certain ports etc are closed shouldn't matter whether cluster or not. It's just a tunnel.