About this list Date view Thread view Subject view Author view Attachment view

From: Fernando Serto (fernando_at_serto.com.br)
Date: Sat 02 Aug 2003 - 12:56:55 BST


> > I'm not shure but sshd probly has that kind of feature
> That would be good.. any info?

LAMMER SOLUTION:

well I really don't know if you can redirect ssh to the internal vservers,
but, for sure you can create something like this:
- the user fserto is the root owner of the www vserver
- on the root server, I created a shell like this (maybe /bin/fserto_shell):
    #!/bin/bash
    /usr/bin/ssh 192.168.1.123 -lroot
- change fserto's shell on /etc/passwd to /bin/fserto_shell on the root
server

when the user connects to the root vserver using his username he would run
the ssh to the internal box:
root_at_skywalker:~# ssh skywalker -lfserto
fserto_at_skywalker's password:
Last login: Sat Aug 2 18:57:16 2003 from skywalker.serto.local
Linux 2.4.20ctx-17.
root_at_192.168.1.123's password:
Linux 2.4.20ctx-17.
root_at_www:~#

stupid?? I know you should not use this for a commercial environment,
but.... for a city council for example...

question: is there any security problems with this "first thing that poped
into my head" solution??


About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Sat 02 Aug 2003 - 13:19:23 BST by hypermail 2.1.3