Changes

Jump to navigation Jump to search

Linux: SSH (view source)

Revision as of 09:20, 16 January 2020

327 bytes added ,  09:20, 16 January 2020
m
no edit summary
Line 44: Line 44:  
===Check/close open tunnels===
 
===Check/close open tunnels===
 
  <nowiki>
 
  <nowiki>
−
  netstat -n --protocol inet | grep ':22'
+
  netstat -n --protocol inet | grep ':22'
−
  sudo lsof -i -n | egrep '\<ssh\>'
+
  sudo lsof -i -n | egrep '\<ssh\>'
−
  sudo lsof -i -n | egrep '\<sshd\>'</nowiki>
+
  sudo lsof -i -n | egrep '\<sshd\>'</nowiki>
    
'''To close open tunnels'''<br />
 
'''To close open tunnels'''<br />
Line 90: Line 90:  
===$HOME/.ssh/config===
 
===$HOME/.ssh/config===
 
  <nowiki>Host morpheus
 
  <nowiki>Host morpheus
−
      IdentityFile ~/.ssh/Trinity.pub
+
      IdentityFile ~/.ssh/Trinity.pub
−
      User rafa
+
      User rafa
−
      port 10535
+
      port 10535
−
 
+
 
−
  === $WORK/.ssh/config ===
+
  === $WORK/.ssh/config ===
−
  Host flirt
+
  Host flirt
−
      IdentityFile ~/.ssh/Trinity.pub
+
      IdentityFile ~/.ssh/Trinity.pub
−
      User rafa
+
      User rafa
−
      port 10536</nowiki>
+
      port 10536</nowiki>
    
(connections config)
 
(connections config)
 
  <nowiki>Host fpsim-frontend
 
  <nowiki>Host fpsim-frontend
−
      IdentityFile ~/.ssh/DNC-FKY.pem
+
      IdentityFile ~/.ssh/DNC-FKY.pem
−
 
+
 
−
  Host *
+
  Host *
−
      ServerAliveInterval 30
+
      ServerAliveInterval 30
−
      ServerAliveCountMax 2
+
      ServerAliveCountMax 2
−
 
+
 
−
  Host mi6.rra.lan
+
  Host mi6.rra.lan
−
      IdentityFile ~/.ssh/rra_fake.pem
+
      IdentityFile ~/.ssh/rra_fake.pem
−
      User rra
+
      User rra
−
 
+
 
−
  Host leaks.rra.lan
+
  Host leaks.rra.lan
−
      IdentityFile ~/.ssh/rt_rsa
+
      IdentityFile ~/.ssh/rt_rsa
−
      User xe50582
+
      User xe50582
−
 
+
 
−
  Host news.menupayapp.com
+
  Host news.menupayapp.com
−
      IdentityFile ~/.ssh/rra_id.pem
+
      IdentityFile ~/.ssh/rra_id.pem
−
      User ubuntu
+
      User ubuntu
−
 
+
 
−
  Host 20.1.40.109
+
  Host 20.1.40.109
−
      IdentityFile ~/.ssh/rt_rsa
+
      IdentityFile ~/.ssh/rt_rsa
−
      User rra
+
      User rra
−
 
+
 
−
  Host gitrra.dyndns.org
+
  Host gitrra.dyndns.org
−
      IdentityFile ~/.ssh/DNC-FKY.pem
+
      IdentityFile ~/.ssh/DNC-FKY.pem
−
      User ubuntu
+
      User ubuntu
−
 
+
 
−
  Host mapper1
+
  Host mapper1
−
      IdentityFile ~/.ssh/id_rsa
+
      IdentityFile ~/.ssh/id_rsa
−
      HostName WF00MPA1.igrupobbva
+
      HostName WF00MPA1.igrupobbva
−
      User pi
+
      User pi
−
 
+
 
−
  Host mapper2
+
  Host mapper2
−
      IdentityFile ~/.ssh/id_rsa
+
      IdentityFile ~/.ssh/id_rsa
−
      HostName WF00MPA2.igrupobbva
+
      HostName WF00MPA2.igrupobbva
−
      User pi
+
      User pi
−
 
+
 
−
 
+
 
−
 
+
 
−
  # LEAVE THIS ONES AT THE BOTTOM (WILDCHARS) First match will be used  
+
  # LEAVE THIS ONES AT THE BOTTOM (WILDCHARS) First match will be used  
−
  Host 20.1.40.*
+
  Host 20.1.40.*
−
      IdentityFile ~/.ssh/rt_rsa
+
      IdentityFile ~/.ssh/rt_rsa
−
      User xe50582
+
      User xe50582
−
 
+
 
−
  Host *.rra.lan
+
  Host *.rra.lan
−
      IdentityFile ~/.ssh/rt_rsa
+
      IdentityFile ~/.ssh/rt_rsa
−
      User xe50582
+
      User xe50582
−
 
+
 
−
 
+
 
−
  Host 10.255.0.*
+
  Host 10.255.0.*
−
      IdentityFile ~/.ssh/rt_rsa
+
      IdentityFile ~/.ssh/rt_rsa
−
      User xe50582</nowiki>
+
      User xe50582</nowiki>
    
==LDAP ldapkeyfile==
 
==LDAP ldapkeyfile==
Line 178: Line 178:  
create file: /home/user/.ssh/config with the following content: (client side) chmod 600
 
create file: /home/user/.ssh/config with the following content: (client side) chmod 600
 
  <nowiki>
 
  <nowiki>
−
  Host *
+
    Host *
−
      ServerAliveInterval 60
+
        ServerAliveInterval 60
−
      ServerAliveCountMax 2</nowiki>
+
        ServerAliveCountMax 2</nowiki>
 
For each user, or ading to /etc/ssh/ssh_config
 
For each user, or ading to /etc/ssh/ssh_config
 
  ServerAliveInterval 60
 
  ServerAliveInterval 60
Line 191: Line 191:  
2:
 
2:
 
  <nowiki>
 
  <nowiki>
−
  echo 60 > /proc/sys/net/ipv4/tcp_keepalive_time</nowiki>
+
  echo 60 > /proc/sys/net/ipv4/tcp_keepalive_time</nowiki>
    
Shell script to reconnect on broken pipe:
 
Shell script to reconnect on broken pipe:
Line 245: Line 245:  
==SSH Config==
 
==SSH Config==
 
Path ~/.ssh/config
 
Path ~/.ssh/config
 +
 +
== Kill User sessions ==
 +
<syntaxhighlight lang="bash">
 +
ps aux | grep xe84049 | grep sshd | awk '{print $2}' | xargs -n 1 sudo kill -9
 +
</syntaxhighlight>
 +
 
===Work===
 
===Work===
 
  <nowiki>Host fpsim-frontend
 
  <nowiki>Host fpsim-frontend
−
      IdentityFile ~/.ssh/DNC-FKY.pem
+
      IdentityFile ~/.ssh/DNC-FKY.pem
−
      User ubuntu
+
      User ubuntu
−
  Host *
+
  Host *
−
      ServerAliveInterval 30
+
      ServerAliveInterval 30
−
      ServerAliveCountMax 2
+
      ServerAliveCountMax 2
−
 
+
 
−
  Host 10.255.0.*
+
  Host 10.255.0.*
−
      IdentityFile ~/.ssh/rt_rsa
+
      IdentityFile ~/.ssh/rt_rsa
−
      User xe50582
+
      User xe50582
−
 
+
 
−
  Host leaks.rra.lan
+
  Host leaks.rra.lan
−
      IdentityFile ~/.ssh/rt_rsa
+
      IdentityFile ~/.ssh/rt_rsa
−
      User xe50582
+
      User xe50582
−
 
+
 
−
  Host news.menupayapp.com
+
  Host news.menupayapp.com
−
      IdentityFile ~/.ssh/rra_id.pem
+
      IdentityFile ~/.ssh/rra_id.pem
−
      User ubuntu
+
      User ubuntu
−
 
+
 
−
  Host 20.1.40.109
+
  Host 20.1.40.109
−
      IdentityFile ~/.ssh/rt_rsa
+
      IdentityFile ~/.ssh/rt_rsa
−
      User rra
+
      User rra
−
 
+
 
−
  Host 20.1.40.*
+
  Host 20.1.40.*
−
      IdentityFile ~/.ssh/rt_rsa
+
      IdentityFile ~/.ssh/rt_rsa
−
      User xe50582
+
      User xe50582
−
 
+
 
−
 
+
 
−
  Host pdgrt.rra.lan
+
  Host pdgrt.rra.lan
−
      User rra
+
      User rra
−
 
+
 
−
 
+
 
−
  host geoip.dyndns.org
+
  host geoip.dyndns.org
−
      IdentityFile ~/.ssh/rra_springfield.pem
+
      IdentityFile ~/.ssh/rra_springfield.pem
−
      User ubuntu
+
      User ubuntu
−
 
+
 
−
  host rrafara.dyndns.org
+
  host rrafara.dyndns.org
−
      IdentityFile ~/.ssh/DNC.pem
+
      IdentityFile ~/.ssh/DNC.pem
−
      User ubuntu
+
      User ubuntu
−
 
+
 
−
  host deathnote.rra.lan
+
  host deathnote.rra.lan
−
      User rra
+
      User rra
−
 
+
 
−
  host savvius.rra.lan
+
  host savvius.rra.lan
−
      User root
+
      User root
−
 
+
 
−
 
+
 
−
  Host *.rra.lan
+
  Host *.rra.lan
−
      # IdentityFile ~/.ssh/rt_rsa
+
      # IdentityFile ~/.ssh/rt_rsa
−
      User xe50582
+
      User xe50582
−
 
+
 
−
 
+
 
−
  Host 10.255.0.32
+
  Host 10.255.0.32
−
      IdentityFile ~/.ssh/rra_fake.pem
+
      IdentityFile ~/.ssh/rra_fake.pem
−
      user rra
+
      user rra
−
 
+
 
−
  Host aws-gitlab
+
  Host aws-gitlab
−
      IdentityFile ~/.ssh/DNC-FKY.pem
+
      IdentityFile ~/.ssh/DNC-FKY.pem
−
      User ubuntu
+
      User ubuntu
−
  </nowiki>
+
  </nowiki>
 
===Trinity===
 
===Trinity===
 
  <nowiki>Host *.herrerosolis.com
 
  <nowiki>Host *.herrerosolis.com
−
      IdentityFile ~/.ssh/whispers.pem
+
      IdentityFile ~/.ssh/whispers.pem
−
      User ubuntu
+
      User ubuntu
−
 
+
 
−
  Host geoip.dyndns.org
+
  Host geoip.dyndns.org
−
      IdentityFile /media/rafa/secrets/.ssh/rra_springfield
+
      IdentityFile /media/rafa/secrets/.ssh/rra_springfield
−
      User ubuntu
+
      User ubuntu
−
 
+
 
−
  Host morpheus
+
  Host morpheus
−
      IdentityFile ~/.ssh/Trinity.pub
+
      IdentityFile ~/.ssh/Trinity.pub
−
      User rafa
+
      User rafa
−
      Port 10535
+
      Port 10535
−
 
+
 
−
  Host flirt
+
  Host flirt
−
      IdentityFile ~/.ssh/Trinity.pub
+
      IdentityFile ~/.ssh/Trinity.pub
−
      User rafa
+
      User rafa
−
      Port 10536
+
      Port 10536
−
 
+
 
−
  Host kodi
+
  Host kodi
−
      User root
+
      User root
−
      PreferredAuthentications password
+
      PreferredAuthentications password
−
      PubkeyAuthentication no
+
      PubkeyAuthentication no
−
 
+
 
−
 
+
 
−
  #Host bitbucket.org
+
  #Host bitbucket.org
−
  #  IdentityFile ~/.ssh/cpc_bitbucket
+
  #  IdentityFile ~/.ssh/cpc_bitbucket
−
 
+
 
−
  Host peibol.duckdns.org
+
  Host peibol.duckdns.org
−
      User ubuntu
+
      User ubuntu
−
      IdentityFile ~/.ssh/Trinity
+
      IdentityFile ~/.ssh/Trinity
−
 
+
 
−
  Host lightning01
+
  Host lightning01
−
      User pi
+
      User pi
−
      IdentityFile ~/.ssh/Trinity
+
      IdentityFile ~/.ssh/Trinity
−
 
+
 
−
  Host scripting-ssii.rra.lan
+
  Host scripting-ssii.rra.lan
−
      User rra
+
      User rra
−
 
+
 
−
  Host *.rra.lan
+
  Host *.rra.lan
−
      User xe50582
+
      User xe50582
−
 
+
 
−
  Host felixnomada.duckdns.org
+
  Host felixnomada.duckdns.org
−
      User ubuntu
+
      User ubuntu
−
      IdentityFile ~/.ssh/felixInteractions.pem
+
      IdentityFile ~/.ssh/felixInteractions.pem
−
 
+
 
−
  Host bitbucket.org
+
  Host bitbucket.org
−
      IdentityFile ~/.ssh/bitbucket</nowiki>
+
      IdentityFile ~/.ssh/bitbucket</nowiki>
Retrieved from "https://wiki.herrerosolis.com/index.php/Special:MobileDiff/2083"

Navigation menu