Limit commands

From: Jonathan Villa (jvilla_at_innovativesource.net)
Date: 04/28/05

  • Next message: Darren Tucker: "Re: Limit commands" 
    Date: Thu, 28 Apr 2005 16:35:14 -0500 (CDT)
To: secureshell@securityfocus.com

    I've read over and over documentation concerning per-account server config and
    forced commands...

    Perhaps my understanding is incorrect, but I've gathered that I can force the
    execution of a particular command upon login...

    The command I want to execute is "/usr/bin/cvs server" although, for testing, I'm
    simply trying /bin/echo a test

    this is my setup

    Fedora Code 3
    OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003
    SSH 2 only allowed

    Public key authentication works flawlessly for the past several months

    On server I have following

    ~/.ssh/authorized_keys
    ~/.ssh2/myuser.pub
    ~/.ssh2/authorization

    In ~/.ssh2/authorization I have
    #SSH 2 only
    Key myuser.pub
    Command "/bin/echo a test"

    and when I login in via putty... nothing happens... no logs, nothing...

    ideally, once I get this set up, I would like to remove the .ssh2 directory and just
    the .ssh.... Also, I though I read in O'Reilly's SSH book that "Your authorization
    file can contain not only keys but also other keywords or options to control the SSH
    server in powerful ways"

    I don't see this happening...

    Totally clueless right now... 

    -- 
Jonathan
  • Next message: Darren Tucker: "Re: Limit commands"

    Relevant Pages

    • How can I restrict incoming root rsync over ssh to specified command?
      ... will use rsync over ssh to pull certain directories from the ssh ... Here's an example of the command, ... Even with the server locked up in a room with no user ...
      (comp.os.linux.security)
    • Re: rsync and ssh simple question
      ... possible to tie an SSH key to a specific command on a remote server, ... For instance, when you run rsync over ssh, the local rsync command ...
      (RedHat)
    • Re: [Info-ingres] problems with ssh
      ... Check the SSHD log on the server for errors. ... ancient version of SSH, unfortunately. ... the command seems to have functioned - but just wont terminate and leaves a process hanging around. ... Duckman: You got anymore of those glues? ...
      (comp.databases.ingres)
    • Re: ssh: start vnc server remotely
      ... > I have x11vnc on my computer and I want to start the server using ssh ... > command in ssh and that command just runs on the computer I'm connected ... The only people for me are the mad ones -- the ones who are mad to live, mad to talk, mad to be saved, desirous of everything at the same time, the ones who never yawn or say a commonplace thing, but burn, burn, burn like fabulous yellow Roman candles. ...
      (comp.os.linux.misc)
    • RE: Writing output of a Shell command directly to a file
      ... > activity on the host box during a full backup. ... > backup server it's self (since the backup server may actually ... I can do this on the command line with a ... If you look in the SSH module at the sshroutine, ...
      (perl.beginners)