Koozali.org: home of the SME Server

remote access

jriemens

remote access
« on: May 15, 2005, 08:01:24 AM »
I am new to SME but I love it!

I am trying to logon from my internal network to my SME server with Putty. (telnet or SSH) When I do so, I get the errormessage: "Network error:Connection refused"

On the SME server manager I have set the Secure Shell Settings to "allow local networks"

I have read the manual, chapter 11.1.1. ssh  ;-)
What am I doing wrong here?

TIA,

Jaap

Offline Denbert

  • *
  • 156
  • +0/-0
    • hegnstoften.net
remote access
« Reply #1 on: May 15, 2005, 09:19:24 AM »
See http://forums.contribs.org/index.php?topic=27128.0

Or get the contrib witch add a panel in server-manager "user shell access" - http://mirror.contribs.org/smeserver/contribs/star/mitel/contrib/user-shell-access/

For most users this is the most convenient way to administrate the SSH access.

Any how, if you have enabled SSH access from local network you should be able to login as root, the above contrib makes it possible for users to get access.
/ Denbert
"Success is not final, failure is not fatal: it is the courage to continue that counts" - Sir Winston Churchill

jriemens

remote access
« Reply #2 on: May 15, 2005, 09:26:55 AM »
Quote
Any how, if you have enabled SSH access from local network you should be able to login as root, the above contrib makes it possible for users to get access.


That is the problem, I have enabled SSH access from local network and I am not able to log on from one of my workstations... Any ideas?

Offline Denbert

  • *
  • 156
  • +0/-0
    • hegnstoften.net
remote access
« Reply #3 on: May 15, 2005, 09:41:17 AM »
If you are using Putty, then copy and past the output and post it here.
/ Denbert
"Success is not final, failure is not fatal: it is the courage to continue that counts" - Sir Winston Churchill

jriemens

remote access
« Reply #4 on: May 15, 2005, 09:47:56 AM »
The errormessage I get is only:

Network error: connection refused

(putty log file turned on but stays empty)

That's all... I have tried SSH1, SSH2 and telnet, even with another SSH client, the same message appears that the connection is refused...

Offline raem

  • *
  • 3,972
  • +4/-0
Re: remote access
« Reply #5 on: May 15, 2005, 11:04:20 AM »
jriemens

Can you login as user root directly at the server console command prompt ?

What user name are you using when trying to connect from a workstation using putty ?

In Putty you have selected port 22 & ssh ?

From the workstation command prompt can you successfully ping the address you are using in putty eg ping www.myserver.com ?
or ping serverIP ?
...

jriemens

remote access
« Reply #6 on: May 15, 2005, 11:26:56 AM »
Ray, thanks for your help!

1. I can login as user root directly at the server console command prompt, no problem.

2. In Putty I have selected SSH on 22

3. I can ping my server from the workstations, no problem. I can also logon via FTP and printing also works just fine (from windows and Mac workstations)

Hope this helps?

TIA!

Jaap.

Offline raem

  • *
  • 3,972
  • +4/-0
remote access
« Reply #7 on: May 15, 2005, 11:59:56 AM »
jriemens

> At the server site I only see the server console..

Sounds like you have auto logon to the server console menu set during the Configure this server operation, if so the server console menu is displayed (7 menu items). You can change this if you prefer to show the log in prompt at start up, by running the Configure this server option again.
 
At the menu press Alt F2 to bring you to another login screen. (Alt F1 to toggle between the screens)

Login as user = root with the admin/root password.
Type exit to log off.

If you can do this then good, at least it's working at the server.

Can you do this OK as root ?

In server managr Remote access panel you should have the following set:
Allow access from local networks or entire Internet
Allow admin command line access over secure shell = Yes
Allow secure shell access using standard passwords = Yes  


> In Putty I have selected SSH on 22
OK
What Host name or IP are you using ?

> I can ping my server from the workstations, no problem.

OK, what URL or IP did you ping ?
...

Offline raem

  • *
  • 3,972
  • +4/-0
remote access
« Reply #8 on: May 15, 2005, 12:06:34 PM »
Log on directly to the server as root and do:

/etc/init.d/sshd status

I get:

sshd (pid 21272 17507) is running...
...

jriemens

remote access
« Reply #9 on: May 15, 2005, 12:10:41 PM »
Auto logon is off, I can logon at the server site, no problem

Yes, I can logon as root, no problem

I have everything set in server manager remote access:
Allow access from local entire Internet
Allow admin command line access over secure shell = Yes
Allow secure shell access using standard passwords = Yes

In putty I am using my local server ip, i.e. 10.0.0.155

The IP that I ping is also my local server, i.s. 10.0.0.155

jriemens

remote access
« Reply #10 on: May 15, 2005, 12:13:15 PM »
Quote from: "RayMitchell"
Log on directly to the server as root and do:

/etc/init.d/sshd status

I get:

sshd (pid 21272 17507) is running...


I also get

sshd (pid 2389) is running....

Offline raem

  • *
  • 3,972
  • +4/-0
remote access
« Reply #11 on: May 15, 2005, 12:17:51 PM »
jriemens

> sshd (pid 2389) is running....

All sounds OK.
Do you have a firewall on your workstation that may be blocking port 22 ?
...

jriemens

remote access
« Reply #12 on: May 15, 2005, 01:02:12 PM »
>All sounds OK.
>Do you have a firewall on your workstation that may be blocking port 22 ?

Ray,

I feel stupid, I should have known!!!! Sorry about that and thanks for your help!

The XP firewall was blocking port 22. I just moved to Mac's and hardly work on windows machines anymore... but I should have known...

Thanks again! Problem solved!

Jaap.

Offline MSmith

  • *
  • 675
  • +0/-0
remote access
« Reply #13 on: May 16, 2005, 01:35:30 AM »
You might want to disallow SSH access for the "entire Internet".  It's definitely more secure to set it for local network only, then PPtP VPN into the server and access SSH from the LAN IP range.
...

jriemens

remote access
« Reply #14 on: May 16, 2005, 08:12:58 AM »
Quote from: "MSmith"
You might want to disallow SSH access for the "entire Internet".  It's definitely more secure to set it for local network only, then PPtP VPN into the server and access SSH from the LAN IP range.


You're absolutely right and I will do that. But first I need to learn a bit more about SME and linux. I know how to do this in windows but I'm a beginner in linux and SME...