SSH - Revision history

Boiarino: /* other issues */

2026-01-16T21:02:44Z

other issues

← Older revision		Revision as of 17:02, 16 January 2026
Line 14:		Line 14:
	ssh -o UserKnownHostsFile=/dev/null <hostname>		ssh -o UserKnownHostsFile=/dev/null <hostname>

			If does not work, comment out following line in your ''/etc/ssh/ssh_config'':

			###GlobalKnownHostsFile /site/etc/ssh_known_hosts

	== old ==		== old ==

2026-01-15T20:02:50Z

← Older revision		Revision as of 16:02, 15 January 2026
Line 6:		Line 6:

	and then probably reboot, not sure.		and then probably reboot, not sure.


	== other issues ==		== other issues ==
Line 13:		Line 14:
	ssh -o UserKnownHostsFile=/dev/null <hostname>		ssh -o UserKnownHostsFile=/dev/null <hostname>


			== old ==

	First, enable X11 forwarding: uncommented and properly set 2 following lines in ''/etc/ssh/ssh_config'' file:		First, enable X11 forwarding: uncommented and properly set 2 following lines in ''/etc/ssh/ssh_config'' file:

2026-01-15T20:02:22Z

← Older revision		Revision as of 16:02, 15 January 2026
Line 1:		Line 1:
			== RHEL9 ==

	On RHEL9 machines, to be able to ssh to old machines (like vme controllers under CentOS5), run following as root:		On RHEL9 machines, to be able to ssh to old machines (like vme controllers under CentOS5), run following as root:

Line 5:		Line 7:
	and then probably reboot, not sure.		and then probably reboot, not sure.

			== other issues ==

	To ssh ignoring 'Offending key in /site/etc/ssh_known_hosts' do following:		To ssh ignoring 'Offending key in /site/etc/ssh_known_hosts' do following:

2025-09-11T13:51:19Z

← Older revision		Revision as of 09:51, 11 September 2025
Line 1:		Line 1:
			On RHEL9 machines, to be able to ssh to old machines (like vme controllers under CentOS5), run following as root:

			update-crypto-policies --set LEGACY

			and then probably reboot, not sure.


	To ssh ignoring 'Offending key in /site/etc/ssh_known_hosts' do following:		To ssh ignoring 'Offending key in /site/etc/ssh_known_hosts' do following:

2019-07-01T20:55:30Z

← Older revision		Revision as of 16:55, 1 July 2019
Line 61:		Line 61:
	(on Linux ''/etc/init.d/sshd restart'')		(on Linux ''/etc/init.d/sshd restart'')

	7. If need to make ssh without password between different clon machines for some user, login as that user and do following:		7. If need to make ssh without password between different clon machines for some user, login as that user and do following (chmod commands are important !):

			mkdir .ssh
			chmod 700 .ssh
	cd .ssh		cd .ssh
	ssh-keygen -t rsa		ssh-keygen -t rsa
Line 67:		Line 70:
	#cp id_rsa.pub authorized_keys		#cp id_rsa.pub authorized_keys
	ssh-copy-id <machine_name_you_are_in>		ssh-copy-id <machine_name_you_are_in>
			chmod 600 *

			After that for this user all machines with the same home directory have to be accessible without typing password. If machine has different home directory, copy contents of the 'id_rsa.pub' into remote machine 'authorized_keys' file.

	8. Tunneling: for example to tunnel from home to clontrig0 for vnc (port 5902) do following:		8. Tunneling: for example to tunnel from home to clontrig0 for vnc (port 5902) do following:

2017-09-15T16:05:58Z

← Older revision		Revision as of 12:05, 15 September 2017
Line 64:		Line 64:
	cd .ssh		cd .ssh
	ssh-keygen -t rsa		ssh-keygen -t rsa
	<hit return ~~on password prompt~~>		<hit return 3 times>
	cp id_rsa.pub authorized_keys		#cp id_rsa.pub authorized_keys
			ssh-copy-id <machine_name_you_are_in>

	8. Tunneling: for example to tunnel from home to clontrig0 for vnc (port 5902) do following:		8. Tunneling: for example to tunnel from home to clontrig0 for vnc (port 5902) do following:

2016-02-28T05:51:38Z

← Older revision		Revision as of 01:51, 28 February 2016
Line 1:		Line 1:
			To ssh ignoring 'Offending key in /site/etc/ssh_known_hosts' do following:

			ssh -o UserKnownHostsFile=/dev/null <hostname>


	First, enable X11 forwarding: uncommented and properly set 2 following lines in ''/etc/ssh/ssh_config'' file:		First, enable X11 forwarding: uncommented and properly set 2 following lines in ''/etc/ssh/ssh_config'' file:

2014-10-30T19:10:37Z

← Older revision		Revision as of 15:10, 30 October 2014
Line 10:		Line 10:
	PermitUserEnvironment yes		PermitUserEnvironment yes

	2~~. Add two lines in ''/etc/profile'':~~		2. Create ''/etc/ssh/sshrc'' with following contents:

	~~XAUTHORITY=/tmp/.Xauthority.$LOGNAME~~
	~~export XAUTHORITY~~

	3. Create ''/etc/ssh/sshrc'' with following contents:

	HOME=/tmp		HOME=/tmp
Line 35:		Line 30:
	(on RHEL4 ''xauth'' is located at ''/usr/X11R6/bin/xauth'', on RHEL5 at ''/usr/bin'', adjust script accordingly)		(on RHEL4 ''xauth'' is located at ''/usr/X11R6/bin/xauth'', on RHEL5 at ''/usr/bin'', adjust script accordingly)

	4. ~~Create~~ ''/~~root~~/~~.ssh/environment~~'' ~~file with following contents~~:		3. Add two lines in ''/etc/profile'':

	XAUTHORITY=/tmp/.Xauthority.~~root~~		XAUTHORITY=/tmp/.Xauthority.$LOGNAME
			export XAUTHORITY

	5. NOTIFY ALL USERS TO HAVE THAT FILE WITH CORRESPONDING CONTENTS IN THEIR ''$HOME/.ssh'' directories. You can do it for example by placing following into ''/etc/.login'' (on linux you can use ''/etc/csh.login''):		4. NOTIFY ALL USERS TO HAVE THAT FILE WITH CORRESPONDING CONTENTS IN THEIR ''$HOME/.ssh'' directories. You can do it for example by placing following into ''/etc/.login'' (on linux you can use ''/etc/csh.login''):

	if (! -e ~/.ssh/environment ) then		if (! -e ~/.ssh/environment ) then
Line 48:		Line 44:
	echo ""		echo ""
	endif		endif

			5. Create ''/root/.ssh/environment'' file with following contents:

			XAUTHORITY=/tmp/.Xauthority.root

2011-09-27T03:13:55Z

← Older revision		Revision as of 23:13, 26 September 2011
Line 61:		Line 61:
	<hit return on password prompt>		<hit return on password prompt>
	cp id_rsa.pub authorized_keys		cp id_rsa.pub authorized_keys

			8. Tunneling: for example to tunnel from home to clontrig0 for vnc (port 5902) do following:
			ssh -L 5902:localhost:4321 login1.jlab.org
			and then from the same window:
			ssh -L 4321:localhost:5902 clontrig0
			Now if VNCVIEWER on home machine connect to localhost:5902, it will actually connect to clontrig0:5902.

2010-10-01T16:01:35Z

← Older revision		Revision as of 12:01, 1 October 2010
Line 31:		Line 31:
	echo add $DISPLAY $proto $cookie		echo add $DISPLAY $proto $cookie
	fi \| /usr/openwin/bin/xauth -q -		fi \| /usr/openwin/bin/xauth -q -
	fi		fi

	(on RHEL4 ''xauth'' is located at ''/usr/X11R6/bin/xauth'', on RHEL5 at ''/usr/bin'', adjust script accordingly)		(on RHEL4 ''xauth'' is located at ''/usr/X11R6/bin/xauth'', on RHEL5 at ''/usr/bin'', adjust script accordingly)