Enabling SSH in mandrake 9.2 - sshd vs. sshd-xinetd

DogTags · 11-24-2003, 11:58 AM

Hi All

Been trying to get ssh to work on Mandrake 9.2, reading lots-o-threads

Services

- The sshd service is running, but there is no /etc/xinetd.d/sshd file

- The sshd-xinetd service is not running, but a /etc/xinetd.d/sshd-xinetd file exists

- Another thing about the sshd-xinetd service is that it has an empty checkbox next to "Start when requested", but when you click the Info button, it tells you "sshd server, xinetd version. Don't run the standalone version if you run this."

------

1. Which version should we try to run? sshd or sshd-xinetd? How are they different?

2. What are we missing? We've tried to access via ssh by running first the sshd and then sshd-xinetd, but can't connect through either a user account or root

Thanks very much

Mikhail_16 · 11-24-2003, 01:25 PM

sshd is good. Thats all you need.

do 'locate ssh_config' to find out where the config file is.

DogTags · 11-24-2003, 03:38 PM

Okay, I've located ssh_config:

/etc/ssh/ssh_config

There is also:

/etc/ssh/sshd_config

-----

Here is my ssh_config:

Code:

#	$OpenBSD: ssh_config,v 1.16 2002/07/03 14:21:05 markus Exp $

# This is the ssh client system-wide configuration file.  See
# ssh_config(5) for more information.  This file provides defaults for
# users, and the values can be changed in per-user configuration files
# or on the command line.

# Configuration data is parsed as follows:
#  1. command line options
#  2. user-specific file
#  3. system-wide file
# Any configuration value is only changed the first time it is set.
# Thus, host-specific definitions should be at the beginning of the
# configuration file, and defaults at the end.

# Site-wide defaults for various options

# Host *
#   ForwardAgent no
#   ForwardX11 no
#   RhostsAuthentication no
#   RhostsRSAAuthentication no
#   RSAAuthentication yes
#   PasswordAuthentication yes
#   HostbasedAuthentication no
#   BatchMode no
#   CheckHostIP yes
#   StrictHostKeyChecking ask
#   IdentityFile ~/.ssh/identity
#   IdentityFile ~/.ssh/id_rsa
#   IdentityFile ~/.ssh/id_dsa
#   Port 22
#   Protocol 2,1
#   Cipher 3des
#   Ciphers aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc
#   EscapeChar ~

Host *
  ForwardX11 yes
  Protocol 2,1
    StrictHostKeyChecking no

-------------------------------------

1. Should I change anything?

2. In the Mandrake Control Panel, there is no "ssh" service. There ones listed are:

- sshd (which is started at boot)
- sshd-xinetd (which is dormant until called)

3. Is something missing? Should there be an "ssh" service listed in the Mandrake Control Panel?

-------------------------------------

Thanks for your help

Mikhail_16 · 11-24-2003, 03:41 PM

remove protocol 1's, just leave 2. Security issue.
Everything else is fine.

DogTags · 11-24-2003, 03:53 PM

Okay, I knocked it down to:

Protocol 2

and restarted the sshd service, but no luck

Should I add something to hosts.allow maybe?

Thanks

Mikhail_16 · 11-24-2003, 04:08 PM

oh, make sure that you disable your firewall/iptables, or change the settings to allow ssh connections.

DogTags · 11-25-2003, 09:43 AM

Quote:

oh, make sure that you disable your firewall/iptables, or change the settings to allow ssh connections.

No firewall is enabled.

I searched for the iptables, and it appears that this has not been enabled, either. I found the iptables setup script - /etc/rc.d/init.d/iptables, and in there it says that the iptables file should exist at /etc/sysconfig/iptables, but it doesn't anywhere. I did a locate for iptables, but /etc/sysconfig/iptables was nowhere.

However, in webmin, there was a spot to start/stop the iptables service, but I can't officially say that it did either because the /etc/sysconfig/iptables file still doesn't show up.

Regarding allowing ssh connections, is there a setting somewhere? I am able to turn the service on, but I haven't found a config file so far that has something like ssh=yes

Thanks, again, for all your help

DogTags · 11-25-2003, 12:17 PM

I got both ftp and ssh figured out

The key was the hosts.deny file

Look here:

http://www.linuxquestions.org/questi...351#post619351

Thanks for all your help and suggestions

HTH