<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Contradictory statements.. PermitTTY is a much cleaner solution, but it throws a connection error ? Do you realize updates/upgrades will screw up enhancement added to your conf file?</div><div><br></div><div>Go with a jailkit, it will save you the pain.<br><br>Sent from my iPhone</div><div><br>On May 18, 2015, at 10:29, Yuv Joodhisty <<a href="mailto:locustv2@gmail.com">locustv2@gmail.com</a>> wrote:<br><br></div><blockquote type="cite"><div><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><div dir="ltr">Hey guys,<div><br></div><div>I looked at your suggested methods and it seems that the PermitTTY is a much cleaner solution.</div><div><br></div><div>I just tried using this method by adding a group 'sshusers' which then i allowed using AllowGroups sshusers followed by PermitTTY 0.</div><div>When i try to ssh using this config, i am getting a connection error. It doesn't even prompt for the user's password. Any idea?</div><div><br></div><div>Also how can i have PermitTTY 0 for only a specific group while the rest can run a shell?</div><div><br></div><div>Thanks<br>Yuv</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, May 15, 2015 at 8:15 PM, Keshwarsingh Nadan <span dir="ltr"><<a href="mailto:Keshwarsingh.Nadan@servihoo.net" target="_blank">Keshwarsingh.Nadan@servihoo.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto"><div>Chroot ? Much better?<br><br>Sent from my iPhone</div><div><div class="h5"><div><br>On May 15, 2015, at 20:09, Loganaden Velvindron <<a href="mailto:gnukid1@yahoo.co.uk" target="_blank">gnukid1@yahoo.co.uk</a>> wrote:<br><br></div><blockquote type="cite"><div>
<div style="color:#000;background-color:#fff;font-family:HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,Sans-Serif;font-size:14px"><div>Dear Yuv,</div><div><br></div><div dir="ltr">Please set a User/Match rule in sshd for this user and disable PTY allocation using:</div><dl><dt style="margin-top:1.00em"><br></dt></dl><div>
<b>PermitTTY 0.</b></div><div><br></div><div><b>No TTY allocation doesn't allow a user to run a shell. He can only tunnel :)</b></div><div><br></div><div><b><br></b></div><dl><dt style="margin-top:1.00em"><br></dt></dl><dl><dt style="margin-top:1.00em"><br></dt><dt style="margin-top:1.00em"><br></dt></dl><div dir="ltr">
</div><dl><dt style="margin-top:1.00em"><br></dt></dl><div><span></span></div> <br><div><br><br></div><div style="display:block"> <div style="font-family:HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,Sans-Serif;font-size:14px"> <div style="font-family:HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,Sans-Serif;font-size:16px"> <div dir="ltr"> <font face="Arial" size="2"> On Thursday, 14 May 2015, 14:01, Yuv Joodhisty <<a href="mailto:locustv2@gmail.com" target="_blank">locustv2@gmail.com</a>> wrote:<br> </font> </div> <br><br> <div><div><div><div dir="ltr">I prefer SSH Tunneling also and it is easier to configure than a VPN.<div><br clear="none"></div><div>But i have some question though. Let's say you have a small server and other users need to access it via ssh tunneling. Is there any way to create a very limited user on linux for this purpose? A user who cannot do any root commands, sudo su, etc.., or even cannot do anything at all. I don;t know much about user administration on linux.</div><div><br clear="none"></div><div>Thanks<br clear="none">Yuv</div></div><div><br clear="none"><div>On Thu, May 7, 2015 at 10:24 AM, selven <span dir="ltr"><<a rel="nofollow" shape="rect" href="mailto:pcthegreat@gmail.com" target="_blank">pcthegreat@gmail.com</a>></span> wrote:<br clear="none"><blockquote style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div dir="ltr">I prefer to do tunneling via ssh that to fiddle with anything vpn, though i don't do these for users. Mostly for private use. <br clear="none"><div><div><br clear="none"><div><div><div>On Wed, May 6, 2015 at 8:04 PM, Yuv Joodhisty <span dir="ltr"><<a rel="nofollow" shape="rect" href="mailto:locustv2@gmail.com" target="_blank">locustv2@gmail.com</a>></span> wrote:<br clear="none"></div></div><blockquote style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div dir="ltr">Hey guys, what do you think about SSH Tunneling, a.k.a Poor Techie's VPN vs VPN. Anyone here got experience in using any of these want to share some thoughts?<div><br clear="none"></div><div>Regards<span><font color="#888888"><br clear="none">Yuv</font></span></div></div>
<br clear="none"></div></div>__________________________________________________________<br clear="none">
Linux User Group of Mauritius (LUGM) Discuss mailing list<br clear="none">
Website: <a rel="nofollow" shape="rect" href="http://lugm.org/" target="_blank">http://lugm.org</a><br clear="none">
Mailing list archive: <a rel="nofollow" shape="rect" href="http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/" target="_blank">http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/</a><br clear="none">
Forum: <a rel="nofollow" shape="rect" href="http://lugm.org/forum/" target="_blank">http://lugm.org/forum/</a><br clear="none">
IRC: #<a rel="nofollow" shape="rect" href="http://linux.mu/" target="_blank">linux.mu</a> on Freenode<span><font color="#888888"><br clear="none"></font></span></blockquote></div><span><font color="#888888"><br clear="none"><br clear="all"><br clear="none">-- <br clear="none"></font></span><div><div dir="ltr"><div style="margin:0in 0in 0pt"><b><span style="color:#262626;font-size:10pt" lang="EN-GB">Pirabarlen Cheenaramen </span></b><span style="color:#262626;font-size:10pt" lang="EN-GB">| $3|v3n<b> </b></span></div>
<div style="margin:0in 0in 0pt"><font color="#404040"><span style="font-size:11px"><span lang="EN-GB"></span>L'escalier</span></font></div>
<div style="margin:0in 0in 0pt"><span style="color:#404040;font-size:8pt" lang="EN-GB">mobile: +230 549 24 918</span></div>
<div style="margin:0in 0in 0pt"><span style="color:#1f497d;font-size:8pt" lang="EN-GB"><a rel="nofollow" shape="rect" href="mailto:god@hackers.mu" target="_blank"></a></span></div>
<div style="margin:0in 0in 0pt"><span style="color:rgb(31,73,125);font-size:8pt" lang="EN-GB"><a rel="nofollow" shape="rect" href="http://thegodof.net/" target="_blank">blog</a> || <a rel="nofollow" shape="rect" href="http://godify.me/" target="_blank">fb</a> || <a rel="nofollow" shape="rect" href="http://hackers.mu/pgpselven.txt" target="_blank">pgp</a><br clear="none"></span></div><div style="margin:0in 0in 0pt"><span style="color:#1f497d;font-size:8pt" lang="EN-GB"></span></div>
<div style="margin:0in 0in 0pt"><span style="color:rgb(31,73,125);font-size:11px">/*memory is like prison*/ (user==selven)?free(user):user=malloc(sizeof(brain));</span></div>
<div style="margin:0in 0in 0pt"><span style="color:#1f497d;font-size:8pt" lang="EN-GB"></span><span style="font-family:Webdings;color:#336600;font-size:8pt" lang="EN-GB">P </span><span style="color:#336600;font-size:8pt" lang="EN-GB">Save electricity & disk space. Cat this mail to >/dev/null 2>&1 after use.<br clear="none"></span><span style="color:#1f497d;font-size:8pt" lang="EN-GB"></span></div></div></div>
</div></div></div></div>
<br clear="none">__________________________________________________________<br clear="none">
Linux User Group of Mauritius (LUGM) Discuss mailing list<br clear="none">
Website: <a rel="nofollow" shape="rect" href="http://lugm.org/" target="_blank">http://lugm.org</a><br clear="none">
Mailing list archive: <a rel="nofollow" shape="rect" href="http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/" target="_blank">http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/</a><br clear="none">
Forum: <a rel="nofollow" shape="rect" href="http://lugm.org/forum/" target="_blank">http://lugm.org/forum/</a><br clear="none">
IRC: #<a rel="nofollow" shape="rect" href="http://linux.mu/" target="_blank">linux.mu</a> on Freenode<br clear="none"></blockquote></div><br clear="none"></div></div></div><br><div>__________________________________________________________<br clear="none">Linux User Group of Mauritius (LUGM) Discuss mailing list<br clear="none">Website: <a shape="rect" href="http://lugm.org/" target="_blank">http://lugm.org</a><br clear="none">Mailing list archive: <a shape="rect" href="http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/" target="_blank">http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/</a><br clear="none">Forum: <a shape="rect" href="http://lugm.org/forum/" target="_blank">http://lugm.org/forum/</a><br clear="none">IRC: #<a href="http://linux.mu" target="_blank">linux.mu</a> on Freenode</div><br><br></div> </div> </div> </div></div></div></blockquote><blockquote type="cite"><div><span>__________________________________________________________</span><br><span>Linux User Group of Mauritius (LUGM) Discuss mailing list</span><br><span>Website: <a href="http://lugm.org" target="_blank">http://lugm.org</a></span><br><span>Mailing list archive: <a href="http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/" target="_blank">http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/</a></span><br><span>Forum: <a href="http://lugm.org/forum/" target="_blank">http://lugm.org/forum/</a></span><br><span>IRC: #<a href="http://linux.mu" target="_blank">linux.mu</a> on Freenode</span></div></blockquote></div></div></div><br>__________________________________________________________<br>
Linux User Group of Mauritius (LUGM) Discuss mailing list<br>
Website: <a href="http://lugm.org" target="_blank">http://lugm.org</a><br>
Mailing list archive: <a href="http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/" target="_blank">http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/</a><br>
Forum: <a href="http://lugm.org/forum/" target="_blank">http://lugm.org/forum/</a><br>
IRC: #<a href="http://linux.mu" target="_blank">linux.mu</a> on Freenode<br></blockquote></div><br></div>
</div></blockquote><blockquote type="cite"><div><span>__________________________________________________________</span><br><span>Linux User Group of Mauritius (LUGM) Discuss mailing list</span><br><span>Website: <a href="http://lugm.org">http://lugm.org</a></span><br><span>Mailing list archive: <a href="http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/">http://discuss.lugm.org/pipermail/discuss_discuss.lugm.org/</a></span><br><span>Forum: <a href="http://lugm.org/forum/">http://lugm.org/forum/</a></span><br><span>IRC: #linux.mu on Freenode</span></div></blockquote></body></html>