Ssh-ing to my Mac timesout

Hello there,
I am trying to ssh to my Mac from another machine on the same local network, but it times out.
On my mac, I enabled external login, and allowed only myself to login (but I have tried allowing everyone, and that did not work either).
ssh -vvv [email protected] gives the following:
OpenSSH_4.3p2 Debian-9etch3, OpenSSL 0.9.8c 05 Sep 2006
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to mymac.domain.ch (xxx.xxx.xxx.xxx) port 22.
debug1: connect to address xxx.xxx.xxx.xxx port 22: Connection timed out
ssh: connect to host mymac.domain.ch port 22: Connection timed out
It works when I ssh from the machine itself, though.
Thanks in advance for your help

Turning off the firewall "solves the problem". Here are the debug messages that I am seeing:
OpenSSH_4.3p2 Debian-9etch3, OpenSSL 0.9.8c 05 Sep 2006
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to mymac.domain.ch (xxx.xxx.xxx.xxx) port 22.
debug1: Connection established.
debug1: identity file /users/thomas/.ssh/identity type -1
debug1: identity file /users/thomas/.ssh/id_rsa type -1
debug1: identity file /users/thomas/.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_5.1
debug1: match: OpenSSH_5.1 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.3p2 Debian-9etch3
debug2: fd 3 setting O_NONBLOCK
debug1: Miscellaneous failure
No credentials cache found
debug1: Miscellaneous failure
No credentials cache found
debug1: SSH2MSGKEXINIT sent
debug1: SSH2MSGKEXINIT received
debug2: kexparsekexinit: diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-g roup1-sha1
debug2: kexparsekexinit: ssh-rsa,ssh-dss
debug2: kexparsekexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes1 92-cbc,aes256-cbc,[email protected],aes128-ctr,aes192-ctr,aes256-ctr
debug2: kexparsekexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes1 92-cbc,aes256-cbc,[email protected],aes128-ctr,aes192-ctr,aes256-ctr
debug2: kexparsekexinit: hmac-md5,hmac-sha1,hmac-ripemd160,[email protected],hmac-sha1-96,hmac- md5-96
debug2: kexparsekexinit: hmac-md5,hmac-sha1,hmac-ripemd160,[email protected],hmac-sha1-96,hmac- md5-96
debug2: kexparsekexinit: none,[email protected],zlib
debug2: kexparsekexinit: none,[email protected],zlib
debug2: kexparsekexinit:
debug2: kexparsekexinit:
debug2: kexparsekexinit: firstkexfollows 0
debug2: kexparsekexinit: reserved 0
debug2: kexparsekexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie- hellman-group14-sha1,diffie-hellman-group1-sha1
debug2: kexparsekexinit: ssh-rsa,ssh-dss
debug2: kexparsekexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes1 92-cbc,aes256-cbc,[email protected],aes128-ctr,aes192-ctr,aes256-ctr
debug2: kexparsekexinit: aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour128,arcfour256,arcfour,aes1 92-cbc,aes256-cbc,[email protected],aes128-ctr,aes192-ctr,aes256-ctr
debug2: kexparsekexinit: hmac-md5,hmac-sha1,[email protected],hmac-ripemd160,[email protected] m,hmac-sha1-96,hmac-md5-96
debug2: kexparsekexinit: hmac-md5,hmac-sha1,[email protected],hmac-ripemd160,[email protected] m,hmac-sha1-96,hmac-md5-96
debug2: kexparsekexinit: none,[email protected]
debug2: kexparsekexinit: none,[email protected]
debug2: kexparsekexinit:
debug2: kexparsekexinit:
debug2: kexparsekexinit: firstkexfollows 0
debug2: kexparsekexinit: reserved 0
debug2: mac_init: found hmac-md5
debug1: kex: server->client aes128-cbc hmac-md5 none
debug2: mac_init: found hmac-md5
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2MSG_KEX_DH_GEXREQUEST(1024<1024<8192) sent
debug1: expecting SSH2MSG_KEX_DH_GEXGROUP
debug2: dhgenkey: priv key bits set: 120/256
debug2: bits set: 516/1024
debug1: SSH2MSG_KEX_DH_GEXINIT sent
debug1: expecting SSH2MSG_KEX_DH_GEXREPLY
debug3: checkhost_inhostfile: filename /users/thomas/.ssh/known_hosts
debug3: checkhost_inhostfile: match line 1
debug3: checkhost_inhostfile: filename /users/thomas/.ssh/known_hosts
debug3: checkhost_inhostfile: match line 2
debug1: Host 'mymac.domain.ch' is known and matches the RSA host key.
debug1: Found key in /users/thomas/.ssh/known_hosts:1
debug2: bits set: 525/1024
debug1: sshrsaverify: signature correct
debug2: kexderivekeys
debug2: set_newkeys: mode 1
debug1: SSH2MSGNEWKEYS sent
debug1: expecting SSH2MSGNEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2MSGNEWKEYS received
debug1: SSH2MSG_SERVICEREQUEST sent
debug2: service_accept: ssh-userauth
debug1: SSH2MSG_SERVICEACCEPT received
debug2: key: /users/thomas/.ssh/identity ((nil))
debug2: key: /users/thomas/.ssh/id_rsa ((nil))
debug2: key: /users/thomas/.ssh/id_dsa ((nil))
debug1: Authentications that can continue: publickey,password,keyboard-interactive
debug3: start over, passed a different list publickey,password,keyboard-interactive
debug3: preferred gssapi-keyex,gssapi-with-mic,gssapi,publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethodisenabled publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /users/thomas/.ssh/identity
debug3: no such identity: /users/thomas/.ssh/identity
debug1: Trying private key: /users/thomas/.ssh/id_rsa
debug3: no such identity: /users/thomas/.ssh/id_rsa
debug1: Trying private key: /users/thomas/.ssh/id_dsa
debug3: no such identity: /users/thomas/.ssh/id_dsa
debug2: we did not send a packet, disable method
debug3: authmethod_lookup keyboard-interactive
debug3: remaining preferred: password
debug3: authmethodisenabled keyboard-interactive
debug1: Next authentication method: keyboard-interactive
debug2: userauth_kbdint
debug2: we sent a keyboard-interactive packet, wait for reply
debug2: inputuserauth_inforeq
debug2: inputuserauth_inforeq: num_prompts 1
Password:
Thanks again

Similar Messages

Using ssh to access my mac

Can anyone tell me how safe it is to enable remote login to use an ssh to access my mac from outside computers? I am taking programming classes and use my mac mini, macbook pro, and also (very, very rarely) Windows computers on campus. I want to be able to access programs I'm writing from all locations.
Thanks

In order to use SSH from a computer that isn't yours, you would have to enable password authentication and enter the password. That wouldn't be safe at all. The only safe way to use SSH is to restrict it to public-key authentication, which means that you must have a copy of the keypair on the client device.

Problems SSH'ing into Mac via PuTTY

Trying SSH into OS X.4 Mac via PuTTY from Windows XP Laptop on local network. I've got Linksys WRT54G. I think I configured the Mac properly, i.e. selected "Remote Login" in Sharing. I think I've got PuTTY configured properly, i.e. 192.168.1.102 and port 22. Then when I select "Open" in PuTTY it receive the following message "Network Error: Connection Refused."
Is there something special I need to do in the Linksys Route or further configurations on the Mac I need to make?
Thanks for any details you can provide.

Post here
http://discussions.apple.com/forum.jspa?forumID=748
this forum is for Mail and Address Book

Cannot ssh from solaris to mac (mountain lion)

Everything is built in my Solaris machine, but I get this when I try to slogin to my "mini":
$ slogin mini.local
could not open any host key
ssh_msg_send: write
ssh_keysign: couldn't send request
Coming from the mini I can slogin with no problem to my Solaris ("blade").
Even the versions are very close.
ssh -V
OpenSSH_5.9p1, OpenSSL 0.9.8y 5 Feb 2013
ssh -V
OpenSSH_5.5p1, OpenSSL 1.0.0k 5 Feb 2013
I need help with understanding where the mac mini keeps its host keys (I think).

On your Solaris machine, try ssh -v mini.local.
Also, from MAC OS X Terminal on the Mac mini locally try ssh -v localhost.
Check System Preferences -> Sharing -> Remote Login.

Using one public ip for ssh`ing to different internal servers using port-redirections

Hi, we are having a requirement to use the same public IP to ssh into different internal servers using port re-direction. So lets say from outside, if a user does ssh @ root 4.4.4.4 2222, it should go to a sshsrv1 and then ssh @ root 4.4.4.4 2223 to sshsrv2
My config is like this:-
object network sshsrv1
host 10.110.100.10
nat (inside,Outside) static 4.4.4.4 service tcp 22 2222
And then i allowed the object "sshsrv1" in my inbound acl from outside.
It dosen`t seem to work. Is this doeable?
Any suggestions??

Hi,
Would need to see your NAT configurations.
There is a possibility that you have a NAT configuration that might be preventing this from working. Then again you are using an extra public IP address for this so it seems strange.
Could you try the "packet-tracer" command
packet-tracer input outside tcp 12345 2222
This should tell us if there is some problem in the ASA configurations.
- Jouni

HT1202 Hi my i pod classic has stopped sync-ing from the mac book.. I have tried two different leads from hr usb port to the i pod but it won't sync.. any thoughts ??

Hi..
My I pod Classic wont sync with my mac book pro.. It was fine till about a fortnight ago .. I have tried two different leads in both USB ports.. and when I press the Sync control it wont sync.. AnyThoughts?? I think I disconnected without ejecting at one point .. I don't know if this was a problem.
Thanks,
Dave

Does the iPod appear in iTunes when you have it connected via a USB port?
If so, have you done all the troubleshooting here?
iPod not recognized in iTunes and Mac desktop
B-rock

Can not connect to a remote SSH server with my mac

Ok have tried 4 different applications, fetch , captain ftp, terminal, etc.
I am trying and connect to a friends ssh server to upload some file logs. I have the correct login/password, have tried both protocol 1 and 2. Port 22 is correct. I keep getting the error message
User logging error - captain ftp
SFTP connection to ..... could not be opened becasue the connection to the SFTP server could not be established or was lost - Fetch
sshexchangeidentification: Connection closed by remote host - Ternminal
We have tested it using Telnet and other programs on a PC and all is well.
When i try and connect he receives the message
Refused connect from cpe-"ip address"(ip address)
policy: HostKey/etc/ssh/sshhost_rsakey
Do i have a setting somewhere i am missing.

1st, is the server behind a home router? Has port 22 been "Port Forwarded" from the internet side to the server's side of the router?
2nd, from a Terminal session use the command:
ssh -v -v -v [email protected]
The -v -v -v triplets will give you a wealth of ssh connection information. If you read through this carefully you may find the root cause of your problems (assuming the 1st step above doesn't yield results).
Another thing to consider, is that ssh will not make a connection to an account that it does not consider to be reasonably secure. This means that the home directory of the account and specific key subdirectories must have proper ownership and permissions, or ssh will not connect. The specific ownership and permissions needed and the files and directories checked are spelled out in the ssh man page
man ssh

Sync -ing my I Mac with my portable

I just purchased a new portable and installed an air port - got that working now I want to sync both machines with my I mac being the " boss" I do have a .mac account now called moble me. Any help would be great

I'm afraid you're asking in the wrong place. iSync is for syncing a Mac with a mobile phone or PDA - it does not sync Macs to each other.
The MobileMe forums are here:
http://discussions.apple.com/category.jspa?categoryID=116

Problem connect with 2.1.0.63 using a SSH Tunnel from a MAC

When I hit the Test button on the properties it says "Successful" When I try and connect I get this error:
java.lang.NullPointerException
     at java.util.TimeZone.parseCustomTimeZone(TimeZone.java:767)
     at java.util.TimeZone.getTimeZone(TimeZone.java:471)
     at java.util.TimeZone.getTimeZone(TimeZone.java:465)
     at oracle.jdbc.driver.PhysicalConnection.setDbTzCalendar(PhysicalConnection.java:7339)
     at oracle.jdbc.driver.PhysicalConnection.setSessionTimeZone(PhysicalConnection.java:7275)
     at oracle.javatools.db.ora.Oracle8i.initOC(Oracle8i.java:245)
     at oracle.javatools.db.ora.Oracle8i.<init>(Oracle8i.java:49)
     at oracle.javatools.db.ora.Oracle9i.<init>(Oracle9i.java:154)
     at oracle.javatools.db.ora.Oracle9iR2.<init>(Oracle9iR2.java:43)
     at oracle.javatools.db.ora.Oracle10g.<init>(Oracle10g.java:29)
     at oracle.javatools.db.ora.Oracle10gR2.<init>(Oracle10gR2.java:21)
     at oracle.javatools.db.ora.Oracle11g.<init>(Oracle11g.java:23)
     at oracle.javatools.db.ora.OracleDatabaseFactory.createDatabaseImpl(OracleDatabaseFactory.java:133)
     at oracle.javatools.db.DatabaseFactory.createDatabaseImpl(DatabaseFactory.java:231)
     at oracle.javatools.db.DatabaseFactory.createDatabase(DatabaseFactory.java:212)
     at oracle.jdeveloper.db.DatabaseConnections.getDatabase(DatabaseConnections.java:607)
     at oracle.jdeveloper.db.DatabaseConnections.getDatabase(DatabaseConnections.java:562)
     at oracle.dbtools.raptor.utils.Connections$ConnectionInfo.getDatabase(Connections.java:145)
     at oracle.dbtools.raptor.utils.Connections.getConnection(Connections.java:874)
     at oracle.dbtools.raptor.utils.Connections.getConnection(Connections.java:855)
     at oracle.dbtools.raptor.navigator.DatabaseConnection.openConnectionImpl(DatabaseConnection.java:117)
     at oracle.dbtools.raptor.navigator.AbstractConnectionNode.getConnection(AbstractConnectionNode.java:30)
     at oracle.dbtools.raptor.navigator.DatabaseNavigatorController.connect(DatabaseNavigatorController.java:667)
     at oracle.dbtools.raptor.navigator.DatabaseNavigatorController.handleEvent(DatabaseNavigatorController.java:279)
     at oracle.ide.controller.IdeAction.performAction(IdeAction.java:531)
     at oracle.ide.controller.IdeAction.actionPerformedImpl(IdeAction.java:886)
     at oracle.ide.controller.IdeAction.actionPerformed(IdeAction.java:503)
     at javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:2028)
     at javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2351)
     at javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:387)
     at javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:242)
     at javax.swing.AbstractButton.doClick(AbstractButton.java:389)
     at javax.swing.plaf.basic.BasicMenuItemUI.doClick(BasicMenuItemUI.java:1223)
     at com.apple.laf.AquaMenuItemUI.doClick(AquaMenuItemUI.java:137)
     at javax.swing.plaf.basic.BasicMenuItemUI$Handler.mouseReleased(BasicMenuItemUI.java:1264)
     at java.awt.Component.processMouseEvent(Component.java:6348)
     at javax.swing.JComponent.processMouseEvent(JComponent.java:3267)
     at java.awt.Component.processEvent(Component.java:6113)
     at java.awt.Container.processEvent(Container.java:2085)
     at java.awt.Component.dispatchEventImpl(Component.java:4714)
     at java.awt.Container.dispatchEventImpl(Container.java:2143)
     at java.awt.Component.dispatchEvent(Component.java:4544)
     at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4618)
     at java.awt.LightweightDispatcher.processMouseEvent(Container.java:4282)
     at java.awt.LightweightDispatcher.dispatchEvent(Container.java:4212)
     at java.awt.Container.dispatchEventImpl(Container.java:2129)
     at java.awt.Window.dispatchEventImpl(Window.java:2478)
     at java.awt.Component.dispatchEvent(Component.java:4544)
     at java.awt.EventQueue.dispatchEvent(EventQueue.java:635)
     at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:296)
     at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:211)
     at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:201)
     at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:196)
     at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:188)
     at java.awt.EventDispatchThread.run(EventDispatchThread.java:122)

I've seen this on systems with an unsupported OS locale. Can you change your settings to America and try again?
K.

SSH Tunnel to other SSH servers?

I'm not sure how this can be done, with or even without an SSH tunnel.
Here's my scenario:
PowerBook@Work --> Firewall --> INTERNET --> Linksys Router/Firewall with port forwarding to Mac mini home server --> Mac mini --> Other Mac clients
Obviously I can SSH into my Mac mini server from my PowerBook at work:
ssh [email protected]
However, what I want to do is, to ssh to the Other Mac client on my home LAN from my Work LAN. So far I accomplish this by SSH'ing into my Mac mini server and then SSH'ing from there to my other Mac clients (which all have static 192.168.X.X addresses).
I have tried the following and it's doesn't seem to work:
ssh -N -p 22 [email protected] -R 2110/example.com/22
With port 2110 forwarded from my Linksys to my Other Mac client. Doesn't work.
I know this is one of those scenarios where I "can't see the forest through the trees". Meaning, there must be an easier way? Any help?

Paul,
sorry for my mistake. I forgot the "yes" in the commandline.
I wouldn't put all the different ssh connections into aliases of my .bashrc. SSH offers the use of a config file. Put everything there. It's easier to maintain and the recommended way for ssh.
Create a plain text file in ~/.ssh/config (for example with vi). And put the following stuff in there.
Host nicknameforyourhost
Hostname hostname.example.com
User yourusername
In Addition you might want to add one of these:
Port 22
Protocol 2
Compression yes
ForwardX11 yes
You can even put portforwardings, reflections etc. in there.
LocalForward 10548 127.0.0.1:548 To tunnel AFP on the server.
LocalForward 10080 127.0.0.1:80 To tunnel to an webserver running on the host that is blocked by the firewall.
To tunnel ServerAdmin, Workgroup Manager and Server Monitor Connections to the host (if it's running Mac OS X Server)
LocaLForward 311 127.0.0.1:311
LocalForward 625 127.0.0.1:625
LocalForward 687 127.0.0.1:687
You then connect your admin apps to localhost. This one has to be done as root, as you're forwarding privileged ports.
To forward an http connection to the webinterface of your router through the tunnel. Provided your LAN Range is 192.168.1.0 and your router is located at 192.168.1.1.
LocalForward 10080 192.168.1.1:80
You then connect your browser to http://localhost:10080/ and it will go through the tunnel, and be reflected from the host you connected to via SSH directly to the router. That way you could access your routers config pages without activating remote administration which is of course a lot more secure.
For your particular problem:
Create one Host entry with the actual machine that you connect to.
Host myserver
Hostname myserver.example.com
User yourusername
Protocol 2
Port 22
Compression yes
LocalForward 10080 192.168.1.1:80 see example with router above
LocalForward 10022 192.168.1.100:22 to create a ssh portreflector for host 192.168.1.100
This config will allow you to connect to your server and access your router like I described above and also create a tunnel for another ssh connection to 192.168.1.100. To access that machine, create a second config in that file just a few lines below.
Host myothermac
Hostname localhost
User yourusername
Protocol 2
Port 10022
To use all that you enter into your terminal:
$ ssh myserver
Password:
and from a second terminal:
$ ssh myothermac
Password:
You're directly taken to the othermac. You can put as many options in ther as you like. See the man page for SSH what else you can put into a config file. I hope by now is clear why not to use aliases in your .bashrc. Do some experimenting, you cannot hurt anything.
You could also do that from a screen session or just background the first SSH session from the terminal but that would make things unnecessarily more complex for the examples given.
Hope that helped.
Regards MacLemon

Long standing bug in ARD

There is a LONG STANDING bug in ARD dating back to at least v2.0, maybe earlier.
While controlling a remote Mac, for seemingly no reason, the display stops refreshing. The connection has not been lost just refresh is stopped. A single refresh workaround is to click the color adjustment bar, no need to move it, just click it and you get one refresh. This happens to me way too frequently! It occurs on PPC as well as Intel Macs, on local LANs and over the Internet through VPNs.
Sometimes you can break out of this by closing the connection and connecting again but it usually requires the remote machine to restart the ARD service. Doing this with ARD itself usually leaves the remote machine unreachable (ARD service stopped.) I have taken to using a near by Windows machine then ssh'ing into the Mac to manually restart the service. This works but the refresh problem re-occurs after an undetermined amount of time.
There seems to be no clues as to why this happens. There is never any particular task I am performing, no specific app I am always running, etc, etc.
Excuse me if this has already been brought up and if someone knows a fix or can point me to a KB article I would be most appreciative!
Thanks,
Josh
G3, G4, G5, Intel iMac, you name... Mac OS X (10.4.6) Mac OS X (10.4.6)

I, too have experienced this problem. However, much more so since I upgraded to ARD 3. This can happen, as you say, on a wide variety of clients: eMacs, G5 Dual, iMac G5, Powerbooks. Most annoying. I have found that if I use TB2 to control the client, I will find, in some cases, the SystemUIServer process is hung. By Force Quitting this process and Re-Starting the client, I am able to get ARD to run again.
This seems a little more severe than your problem, but I have had the same experience as you describe as well--the SystemUIServer is not hung in these cases. I can generally find nothing wrong on the client to account for the behavior.
Nor have I found a satisfactory answer to the problem on this forum. Would love it someone could offer a clue!
PowerBook G4 Aluminum 15 Mac OS X (10.4.6)

After Leopard install, why can't I ssh to Macs (from in or out of LAN)?

Since I upgraded to Leopard (using "Archive and Install"), I can't ssh to either of my two Intel Macs, either from inside OR outside the LAN. I can't even ssh from one Mac to the other Mac within the LAN (a Linksys router). I always get the message "port 22: Connection refused". This all worked before. In the "Firewall" page of the "Security" settings, both systems are set to "Allow all connections". I tried both hardwiring static IP addresses and using DHCP from the router. I even tried (temporarily) de-installing Norton AV. Nothing seems to make any difference. Ideas?

Can you ssh to any Tiger or PPC machines? I just tested it and I'm fine with ssh'ing into a Tiger Server G4 system from a Leopard Quad G5.

Are "Back to My Mac" FTP and SSH services visible to "everyone"?

With the MobileMe "Back to my Mac" service, I can establish SSH terminal and SFTP connections from my Mac Mini at home to my Mac Pro at my work. The SSH (Remote Login) and SFTP (File Sharing) services are enabled under System Preferences --> Sharing.
Does this make the SFTP and SSH services on my Mac visible/accessible to anyone else? I like using "Back to my Mac" because it is simple and it uses key exchange for authentication when connecting. However, I'm concerned that by enabling the SFTP and SSH services under Sharing, I'm also opening these services up to anyone who can see them. Is this true, and if so, how can I maintain the security of my computers?
Thanks in advance,
jjw

OK, besides putting me to sleep, the BTMM description seems to indicate that it is your MobileMe password that is important when making BTMM connections through a home NAT router.
BTMM does open a port through the router, but if I understand correctly, it does not listen for ssh, or vnc, or afp protocols, but rather for the BTMM IPsec secure tunnel to be established, and then all the BTMM supported servers travel over the IPsec secure tunnel. NOTE: the paper was putting me to sleep, so I could have this wrong.
Kerberos is used for authentication of the IPsec tunnel.
What I'm thinking is that if your Mac stays behind a home NAT router, or corporate firewall (that allows BTMM to work), then the important password is your MobileMe password. If the Mac goes out in public, then all your Mac OS X user account (and guest) passwords need to be strong (where longer is better).
A GRC Shields-UP probe will not check all possible ports. If BTMM is running and all the standard ports are marked as stealth, then BTMM is using a non-standard port (as in one GRC does not check by default). That makes it more difficult for someone to find your NAT router and then your Mac. While this is NOT security, it does add some difficulty to the intruder's attempts at finding you.
AGAIN, I did not fully understand the BTMM paper, so "Your Mileage May Vary" with respect to my analysis acccuracy.

Error connecting from Mac to Linux via SSH (Permission denied (publickey...

Hello together,
I have a perfectly working setup with my XP machine, Putty and my Suse Linux server that allow for remote login via SSH. I use Public Key authentication.
However, when I try to login from my Mac, all I get from the Mac side is a
"Permission denied (publickey,keyboard-interactive)."
And I can't establish the connection. On the server in 'messages' I get:
"sshd{6046}: Accepted publickey for {userName} from {myHomeIP} port 38335 ssh2"
What could be wrong here?
I would like to use the same keys on my PC and my Mac so I just copied the key files into the .ssh directory on the Mac, did a chmod 600 on them and then tried to remote log-on with the follwoing from the terminal:
"ssh -l {userName} {host} -i {keyFile}"
My questions are:
1) How am I sure that the Mac uses the right key files? (or uses them at all)
2) How come my server says "accept publickey" and no connection is established?
3) Do you have any other idea on how I might get this to work? What I need is a method to copy files (not via FTP) to my server and let the process run without supervision / user interaction.
Thanks a lot for all your help!
Cheers
Message was edited by: Sebastian_R (some typos)

If you copied your files from Windows, I would check to make sure your lines are <LF> terminated. I have not played with Putty so I do not know the way it line terminates its ssh key files, but Windows has a long tradition of using <CR><LF> to terminate its lines.
cat -v ~/.ssh/id_rsa # or whatever your file names are
If there are <CR> characters in the file, they will show up as ^M
Next get more diagnostic information from ssh using an *ssh -v -v -v*
If you know how to tell Putty to do the same thing, do it from Putty as well.
Now compare the debug output from the working vs the non-working ssh commands. The differences will tell you a lot.
If you look at *man ssh* and search for permissions it will tell you what files need restrictive permissions. You can get a permissions denied error if your home directory allows Group or Other write access. The $HOME/.ssh directory needs to be set so ONLY the Owner is allowed to access it. And some of the files in $HOME/.ssh require specific permissions. The ssh man page details this.

Using Mac Terminal window in combination with X11

I'm trying to log into a remote computer and bring up X11 applications
to display on my laptop, from within the Mac Terminal window. I
was able to get it to work on MacOSX10.3 by typing in
"export DISPLAY=:0.0" on the remote computer after logging in, but
the same trick isn't working on my MacOSX10.4 machine. I'm using
the "-Y" option to ssh on the 10.4 machine, following an earlier query
on that topic. If I do the ssh -Y from an X11 xterm, everything works fine.
Thanks,
Catherine

Set DISPLAY=:0.0 on the local shell (verify that 'xterm' brings up a local-machine window) before ssh'ing to the remote machine. When you use a local xterm, the DISPLAY is already set to the local screen by default (duh...xterm is an x11 thing:), but Terminal is not an x11 thing so you have to set DISPLAY manually. W11-forwarding works by having the remote machine's x11 come back to "wherever the local shell had its x11 directed".

Ssh-ing to my Mac timesout

Similar Messages

Maybe you are looking for