Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #166121

Re: ssh-ing in inside private network

From Lisi Reisz <lisi.reisz@gmail.com>
Newsgroups linux.debian.user
Subject Re: ssh-ing in inside private network
Date 2016-03-31 14:30 +0200
Message-ID <riJTB-4Vs-33@gated-at.bofh.it> (permalink)
References <riJgS-4jD-23@gated-at.bofh.it> <riJAd-4KT-11@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


Great!  Thankl you!  I now have a starting point for my questions.

On Thursday 31 March 2016 12:28:57 tomas@tuxteam.de wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Thu, Mar 31, 2016 at 12:43:49PM +0100, Lisi Reisz wrote:
> > I want all the computers on my private network to be able to shh into
> > each other.  In Jessie, what do I have to do where in what config file?
> > Presumably some port is shut??

> Since your question was pretty general, I preferred to go with a terse,
> bird's perspective answer. Let's tackle the details when they come up.

Great!  Thankl you!  I now have a starting point for my questions.
>
> 0. Each computer should be able to "see" port 22 (ssh) of each other's
>    (I'm assuming you go with the default port for ssh, this can be
>    changed, but I wouldn't do that without some reason)

How do I check this?  I suspect that it may be the problem, so the problem may 
in fact be on the computer I want to ssh from, if the Jessie computer cannot 
see it?  Oh!  Let us use their names.  the computer running Wheezy is called 
Tux-II.  The computer running Jessie is called Eros.

> 1. Each computer should have an SSH server running (on Debian that would
>    be package openssh-server: in Debian it has priority "optional": I'd
>    double-check that it's installed)

It is installed.  How do I check that it is running?

> 3. To connect, you need also an openssh-client (since this has priority
>    "standard" n Debian, chances are that it's there already)

It is installed and running.  I can ssh from Eros, but not into it.  If I just 
try to ssh from Tux-II to Eros, I get the error "Could not connect to host 
192.168.0.4.".  I'm actually "fish"ing, but same difference.

I get a more helpful message form ssh:
lisi@Tux-II:~$ ssh peter@192.168.0.4
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ECDSA key sent by the remote host is
d9:2e:38:29:07:f8:8a:6d:4b:dd:28:60:ad:c9:e5:a3.
Please contact your system administrator.
Add correct host key in /home/lisi/.ssh/known_hosts to get rid of this 
message.
Offending ECDSA key in /home/lisi/.ssh/known_hosts:3
ECDSA host key for 192.168.0.4 has changed and you have requested strict 
checking.
Host key verification failed.
lisi@Tux-II:~$

Previously (under Wheezy) using Fish, I have been getting the first part of 
the message and asked if I want to accept the new identification.  Fish 
presumably then edited the file.  So I need static IPs fast!  or a hosts 
file?  I have some learning to do.  Static IPs I have no problem over, I just 
need to do it.  It clearly needs to move up my priority list.  (New router.  
reserved MAC numbers not yet set up in teh DHCP section.)

I have to go now, but I think you have solved it!!  (I hadn't researched how 
to use ssh itself.  :-(  I was scared of it. :-(  )

Thank you.  I'll continue later!

I'm most grateful, Tomas.

Lisi



>    You can check all these three by trying from each host "ssh
> user@the-other-host" and studying the responses.
>
> Since your question was pretty general, I preferred to go with a terse,
> bird's perspective answer. Let's tackle the details when they come up.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-03-31 13:50 +0200
  Re: ssh-ing in inside private network <tomas@tuxteam.de> - 2016-03-31 14:10 +0200
    Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-03-31 14:30 +0200
      Re: ssh-ing in inside private network <tomas@tuxteam.de> - 2016-03-31 15:10 +0200
        Re: ssh-ing in inside private network David Wright <deblis@lionunicorn.co.uk> - 2016-03-31 20:20 +0200
      Re: ssh-ing in inside private network Brian <ad44@cityscape.co.uk> - 2016-03-31 16:10 +0200
        Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-05-31 21:40 +0200
          Re: ssh-ing in inside private network John Hasler <jhasler@newsguy.com> - 2016-05-31 22:10 +0200
          Re: ssh-ing in inside private network Joe <joe@jretrading.com> - 2016-05-31 23:00 +0200
            Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-01 00:30 +0200
              Re: ssh-ing in inside private network Joe <joe@jretrading.com> - 2016-06-01 09:50 +0200
          Re: ssh-ing in inside private network Stephen Powell <zlinuxman@fastmail.com> - 2016-06-01 01:00 +0200
            Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-01 01:30 +0200
              Re: ssh-ing in inside private network Stephen Powell <zlinuxman@fastmail.com> - 2016-06-01 01:50 +0200
                Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-01 02:20 +0200
                Re: ssh-ing in inside private network John Hasler <jhasler@newsguy.com> - 2016-06-01 02:30 +0200
                Re: ssh-ing in inside private network Richard Hector <richard@walnut.gen.nz> - 2016-06-01 09:50 +0200
                Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-01 12:30 +0200
          Re: ssh-ing in inside private network Richard Hector <richard@walnut.gen.nz> - 2016-06-01 01:00 +0200
            Re: ssh-ing in inside private network John Hasler <jhasler@newsguy.com> - 2016-06-01 01:20 +0200
            Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-01 01:20 +0200
              Re: ssh-ing in inside private network Dan Purgert <dan@djph.net> - 2016-06-01 14:20 +0200
                Re: ssh-ing in inside private network Mark Fletcher <mark27q1@gmail.com> - 2016-06-01 15:50 +0200
                Re: ssh-ing in inside private network Dan Purgert <dan@djph.net> - 2016-06-01 17:00 +0200
                Re: ssh-ing in inside private network David Wright <deblis@lionunicorn.co.uk> - 2016-06-01 20:00 +0200
                Re: ssh-ing in inside private network Dan Purgert <dan@djph.net> - 2016-06-02 22:20 +0200
                Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-03 11:10 +0200
                Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-03 11:10 +0200
                Running without X was: Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-03 11:30 +0200
                Re: Running without X was: Re: ssh-ing in inside private network Dan Purgert <dan@djph.net> - 2016-06-03 15:50 +0200
                Re: Running without X was: Re: ssh-ing in inside private network David Wright <deblis@lionunicorn.co.uk> - 2016-06-03 16:40 +0200
                Re: Running without X was: Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-03 18:40 +0200
          Re: ssh-ing in inside private network David Wright <deblis@lionunicorn.co.uk> - 2016-06-02 00:10 +0200
            Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-03 11:00 +0200
              Re: ssh-ing in inside private network Lisi Reisz <lisi.reisz@gmail.com> - 2016-06-03 11:40 +0200
      Re: ssh-ing in inside private network Bob Bernstein <poobah@ruptured-duck.com> - 2016-03-31 19:50 +0200
    Re: ssh-ing in inside private network Brian <ad44@cityscape.co.uk> - 2016-03-31 14:40 +0200
      Re: ssh-ing in inside private network <tomas@tuxteam.de> - 2016-03-31 15:20 +0200
        Re: ssh-ing in inside private network Brian <ad44@cityscape.co.uk> - 2016-03-31 15:50 +0200
          Re: ssh-ing in inside private network <tomas@tuxteam.de> - 2016-03-31 16:20 +0200

csiph-web