RE: More on passwordless logins
From: Ifan Jones (ifan_at_draig.co.uk)
Date: 06/30/03
- Previous message: jhidalgo: "Re: Second instance if SSH not running"
- Maybe in reply to: Ifan Jones: "More on passwordless logins"
- Next in thread: Brian Hatch: "Re: More on passwordless logins"
- Reply: Brian Hatch: "Re: More on passwordless logins"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 30 Jun 2003 16:21:47 +0100 To: "Brian Hatch" <secure-shell@ifokr.org>
Thanks Brian I'll give the debug a go
Sorry, I didn't mean to reply to you persoanlly, so I'll cc this to the
list in case anyone else out there finds it usefull.
My command= line was missing only the last " - the gopp script looks
like this....
#!/bin/bash
/usr/bin/sudo /usr/sbin/pppd noauth proxyarp 192.168.0.100:192.168.2.100
The two IP addresses being what I want the ppp adapters to use.
-----Original Message-----
From: Brian Hatch [mailto:secure-shell@ifokr.org]
Sent: 30 June 2003 15:00
To: Ifan Jones
Subject: Re: More on passwordless logins
> Which (I think) gives my vpn user rights to run pppd. pppd is
launched
> from a small script called gopp which is launched from the authorized
> keys file as follows...
>
> no-X11-forwarding,command="/home/vpn/gopp
(Seems like you've left out the rest of the 'command=' part...)
It's important that the pppd options match, both on the command
line and the defaults in /etc/ppp. Make sure pppd is in debug mode
and check the syslogs to see if you can see what's going on. Also,
you might want to add a bit of debug stuff in gopp, such as
#!/bin/sh
# this is gopp
DEBUG=/home/vpn/debug.txt
exec 2>$DEBUG
echo "Gopp started at "`date` >&2
echo "Gopp pid is $~ >&2
echo "Gopp arguments $@" >&2
...
echo "running /usr/bin/pppd arg1 arg2 arg3" >&2
/usr/bin/pppd arg1 arg2 arg3
echo "pppd exited with $?" >&2
--
Brian Hatch bourne_shell$ eval `host -a
Systems and cur.pgp.ifokr.org|awk -F\"
Security Engineer '{print $2}'`| gpg --import
http://www.ifokr.org/bri/
Every message PGP signed
- Previous message: jhidalgo: "Re: Second instance if SSH not running"
- Maybe in reply to: Ifan Jones: "More on passwordless logins"
- Next in thread: Brian Hatch: "Re: More on passwordless logins"
- Reply: Brian Hatch: "Re: More on passwordless logins"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|