Using ssh to access my mac

Can anyone tell me how safe it is to enable remote login to use an ssh to access my mac from outside computers? I am taking programming classes and use my mac mini, macbook pro, and also (very, very rarely) Windows computers on campus. I want to be able to access programs I'm writing from all locations.
Thanks

In order to use SSH from a computer that isn't yours, you would have to enable password authentication and enter the password. That wouldn't be safe at all. The only safe way to use SSH is to restrict it to public-key authentication, which means that you must have a copy of the keypair on the client device.

Similar Messages

How do I go about using my phone to get .Mac mail

My Sprint phone apparently has the ability to access Yahoo and Hotmail email accounts, but I don't know how to use it to access my .Mac account. Does anyone happen to know how to do this? If you do, would you mind detailing those things that I would need to do to get that function up and running?
Thank you!!!!!
J

Not sure. Did you try googling for the info? A search for the term "Mac .Mac Sprint" comes up with tons of hits. If all else fails, contact Sprint to see what they recommend.

Wireless Mac to Mac using SSH

While connecting my iMac and iBook, or iMac and MacBook via a wireless LAN, I have selected Personal File Sharing and Remote Login in System Preferances/Sharing/Services. I can always connect, but not under SSH. I always get a warning, and can connect with less security.
The MacBook reads specifically. "To log in to this computer remotely, type "ssh AJPulley@macbook" at a shell command prompt."
Perhaps, I don't understand what it is, nor what I need to do, or do correctly.
iBook G3 700MHz dual USB 640 MB, G5 iMac 1.8GHz 1.25GB, MacBook 1.83MHz 512MB Mac OS X (10.3.9)

I don't the ins and outs of all of the services that the Mac offers. However, to get a shell command prompt, you need to start the Terminal app (from the Utilities folder). Then, you would enter the command
ssh AJPulley@macbook
in the terminal window and follow with a return.
Here is some info in Mac Help about Personal File Sharing and Remote Login:
Allowing remote terminal access to your computer
If you allow remote login, you can use SSH (Secure Shell) to log in to your computer from another location.
You can't use Telnet to log in to the computer.
Open System Preferences and click Sharing.
Click Services and select the Remote Login checkbox. Selecting Remote Login also also enables the secure FTP (sftp) service.
Now you can use an SSH client to log in from another computer.
For example, if your user name is steve and your computer's IP address is 10.1.2.33, you can open Terminal on another Mac OS X computer and type:
ssh -l steve 10.1.2.33
Type "man ssh" at a Terminal shell prompt for more information.
EMAC G4 1.0 GHz Mac OS X (10.4.6)

Remote access using ssh/vnc

Hi All!
Recently, I have managed to configure my Airport Base station to accept SSH using the port mapping/forwarding feature...
The main goal is to remotely access my mac in the office using SSH and VNC.
I was able to do this however remote Mac is using a high resolution which makes it slow to manage.[really slow].
I am currently using a Windows SSH tool called Putty.. and Real VNC to manage remote mac.
I tried to change the setting of Real VNC to a lower resolution but it would not work..accessing the remote mac will only work if my Windows VNC is set to use the
"Full" colour level.
Is this a windows issue? I haven't tried using a VNC for Mac though..
any other tool that is available out there aside from Apple Remote desktop?
Thanks, All!!!!
DP

so the system server VNC refers to the MAC os x VNC...
No, Vine Server's System Server is Vine Server starting up at boot time and is always running. Vine Server existed before Mac OS X included its own VNC server, so Vine Server's terminology is a bit confusing, but it wasn't when the started using it (it even sounds confusing when I just said it ).
the Vine server itself is the stand alone vnc.
Yes. The Vine Server is a totally separate VNC server implementation. It may be run interactively, or it may be configured to start at system boot time so it is always running (this is the system server mode of Vine Server).
so , OS X's VNC is set to only accept high res..
I do not know if it can ONLY do the resolution of the display, but anytime I've tried to use a VNC client configured for lower resolution, the Mac OS X VNC server has not behaved well. Rather than fight it, I just resort to Vine Server. It has been a rock solid VNC server.
so connecting to the Vine server should be at any port not the 5900as this is the mac os vnc default port.
If you MAKE ABSOLUTELY SURE that the Mac OS X VNC server is NOT running, you can use port 5900 for Vine Server, but I find it is safer to just give the Vine Server its own port, and commonly that is port 5901, but the Vine Server can be configured to use any port you desire.
Since I do not use a VNC client on Windows, I can not recommend any clients. However, I have heard of the following:
RealVNC
TightVNC
UltraVNC
I am sure there are others, but not being plugged into Windows culture, my depth of knowledge is very limited.

Can't use Find My Friends on iPhone due to Apple ID not being verified. Can't do this as I can't access my .mac email any longer and I can not change the primary e-mail address for my Apple ID!

Can't use Find My Friends on iPhone due to Apple ID not being verified.
Can't do this as I can't access my .mac email any longer and I can not change the primary e-mail address for my Apple ID!
So my options are:
Create a new Apple ID, use that and lose all the apps I've purhcased with it (a fairly substantial amount)
Somehow Migrate these purchases over to a new Apple ID
Apple let me change the primary ID for the account
Anyone else ran into this before?
I've tried accessing the mail through a mail application using the correct server information, and trying both the old 6 character password and the one I had to change it too after they updated the security guidelines - neither work.
Help would be greatly appreciated as I can see more services down the line not working without the address being verified!

To change the iCloud ID you have to go to Settings>iCloud, tap Delete Account, provide the password for the old ID when prompted to turn off Find My iDevice, then sign back in with the ID you wish to use. When you do this you may find that the password for your old ID isn't accepted. If this should happen, and if your old ID is an earlier version of your current ID, you need to temporarily recreate your old ID by going to https://appleid.apple.com, click Manage my Apple ID and sign in with your current iCloud ID. Click edit next to the primary email account, change it back to your old email address and save the change. Then edit the name of the account to change it back to your old email address. You should not need to verify the old email address. You can now use your current password to turn off Find My iDevice on your device, even though it prompts you for the password for your old account ID. Then save any photo stream photos that you wish to keep to your camera roll. When finished go to Settings>iCloud, tap Delete Account and choose Delete from My iDevice when prompted (your iCloud data will still be in iCloud). Next, go back to https://appleid.apple.com and change your primary email address and iCloud ID name back to the way it was. Now you can go to Settings>iCloud and sign in with your current iCloud ID and password.

I have an old apple id that i havent used for years. For some reason i have updates on my mac i cannot do unless i sign onto that old account. It uses an old e mail account i no longer use or have access to. How can i get to do these updates?

I have an old apple id that i havent used for years. For some reason i have updates on my mac i cannot do unless i sign onto that old account. It uses an old e mail account i no longer use or have access to. How can i get to do these updates?

its very specific.
If you are seeing the old Apple ID with regard to this Mac, then it would seem that somehow you have incorporated the ID in the setup of this new Mac.
Iphoto i use never used imovie.
If you began using iPhoto without having Accepted it into your Apple ID, then that would explain why you are unable to update the app. If any of the iLife apps are used without Accepting them into your Apple ID, the ability to accept them will lapse and you will not be able to update them.

Is it possible to use the ipad to access a mac mini running mountain lion and back to my mac?

Is it possible to access a mac running mountain lion using Back to my Mac?

To my knowledge the iPod can only be used as a secondary monitor since you have to boot up the Mac and turn on the secondary display. You would still need a KB and pointing device for the Mac
However, you can log into the Mini from an iOS device like an iPad using app like LogMeIn, GoTo MyPC or TeamViewer on both the Mac and the iPad. You use the touch screen on the iPad for all control of the Mac.
As you said,that would be tedious for a lot of typing but you could use a BT keyboard for the iPad.

My home envirornment is an older Mini Mac running 10.5.8 with a PowerPC G4 processor ( I know, it's old). I also use an iPhone 3S, accessing my mac mail account. Do I have to upgrade my computer to a faster processor to use iCloud?

My home envirornment is an older Mini Mac running 10.5.8 with a PowerPC G4 processor ( I know, it's old). I also use an iPhone 3S, accessing my mac mail account. Do I have to upgrade my computer to a faster processor to use iCloud?

Hello,
You can't upgrade to any faster, & especially not to an Intel CPU needed to run Lion/10.7 for full iCloud usage.
You can have limited use of iCloud the way it is, you can view all of iCloud in a Browser, You can use Find my Phone I hear, & you can use IMAP Mail for syncing, but no other syncing.
iCloud Mail setup...
IMAP (Incoming Mail Server) information:
Server name: imap.mail.me.com
SSL Required: Yes
Port: 993
Username: [email protected] (use your @me.com address from your iCloud account)
Password: Your iCloud password
SMTP (outgoing mail server) information:
Server name: smtp.mail.me.com
SSL Required: Yes
Port: 587
SMTP Authentication Required: Yes
Username: [email protected] (use your @me.com address from your iCloud account)
Password: Your iCloud password

Can't access my mac, forgotten password so I can't use it

Can't access my mac pro because I forgotten it and can't find my disc. Please help

You can visit an Apple Store for assistance

Can I use my Macbook Pro to access my Mac Mini wirelessly?

On my Macbook Pro's Finder, I see my Mac Mini listed under Shared. How difficult is it to be able to access the Mac Mini from the Macbook? I would like to be able to save files to the external drive that is attached to the Mac Mini.
Thanks!

Mike Salva1 wrote:
How difficult is it to be able to access the Mac Mini from the Macbook?
Enable file sharing on the Mini, then click on it.

Once and for all: How to set up and use SSH

Yes, I know ssh has been discussed on and off, but never in its entirety; and yes, there are step by step instructions on the www, but at one point or another they skip a crucial instruction that would be necessary for unix-dummies (e.g. how to save and close the nano-editor in Terminal). So, please pardon my question:
There are several points I'd like to ask for ssh-connecting two macs on a local network:
1) In terminal-file-"connect to server" you can ask for an ssh connection to be set up. For this to work, do I need to create private and public keys first? If so, how? Please point me to a reliable and step-by-step instruction site.
There are some free ssh-utilities out there, but their documentation is just not helpful enough for a UNIX-dummy.
2) Apparently I managed to connect via ssh once (from the terminal, see point 1) to a local server (allowing remote connection set to ON at the server). But then, when I connected to that server from the client's finder and tried to get into my user account on that server it told me that no secure connection could be established. What's wrong here? Do I have to continue working from within the terminal to use this connection? That would be difficult for an average MacUser.
3) What is the security advantage of an SSH connection on a local wireless network (Airport Base Station) over WPA2, if at all?
4) And how to set up an ssh-connection over the internet cloud to safely build a remote control/desktop sharing connection, e.g., a friend's Mac when she has a problem?
Thanks for your consideration.

First I'm not sure what your goals are.
1) In terminal-file-"connect to server" you can ask for an ssh connection to be set up. For this to work, do I need to create private and public keys first?
If you have ssh keys, you can do this without passwords. If you have not exchanged keys with the remote system, you will be asked for the password of the user you are attempting to login as.
If so, how? Please point me to a reliable and step-by-step instruction site. There are some free ssh-utilities out there, but their documentation is just not helpful enough for a UNIX-dummy.
Log into the remote system. This could be via ssh.
On the remote system, run the following command to generate an ssh key for that remote system:
ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/Users/username/.ssh/id_rsa): <<take default>>
Created directory '/Users/username/.ssh'.
Enter passphrase (empty for no passphrase): <<enter nothing>>
Enter same passphrase again: <<enter nothing again>>
Your identification has been saved in /Users/username/.ssh/id_rsa.
Your public key has been saved in /Users/username/.ssh/id_rsa.pub.
The key fingerprint is:
aa:bb:cc:dd:ee:ff:gg:hh:ii:jj:kk:ll:mm:nn:oo:pp [email protected]
This will generate an ssh key for the remote system. This could be any system that support ssh, such as a Unix system, or another Mac.
Copy the id_rsa.pub file from the remote system to your Mac. When I say "your Mac" I mean the one that you want to make the ssh connection from. The id_rsa.pub is found in the remote system's ~username/.ssh/ directory.
Append the copied id_rsa.pub to your Mac's ~himbear/.ssh/authorized_keys2 file
cat id_rsa.pub >>~himbear/.ssh/authorized_keys2
Now when you ssh to that specific remote system, it will NOT ask for a password. The first time you ssh to any system, ssh will ask if the system is really the system you thing it is. But once you say "yes", it will not ask that question again.
Repeat for every remote system you wish to log into using an ssh key.
2) Apparently I managed to connect via ssh once (from the terminal, see point 1) to a local server (allowing remote connection set to ON at the server). But then, when I connected to that server from the client's finder and tried to get into my user account on that server it told me that no secure connection could be established. What's wrong here? Do I have to continue working from within the terminal to use this connection? That would be difficult for an average MacUser.
MacUser. A flash from the past, as in the MacUser magazine.
ssh is not used by default when you make connections. If you want an ssh connection, you have to establish it intentionally.
ssh can be used to pre-establish a tunnel (or tunnels) that other services can use. Once an ssh tunnel is establish, connections to local host's tunnel port will be connected to the specified remote port. For example:
ssh -L 5901:localhost:5900 [email protected]
will establish a tunnel that VNC can use. The VNC client would connect to localhost display 1 or port 5901.
ssh allows multiple -L tunnels to be specified on the ssh command line.
3) What is the security advantage of an SSH connection on a local wireless network (Airport Base Station) over WPA2, if at all?
Inside you home. Not much. Unless of course you do not trust the other members of your family. That is to say, others having your WPA2 password, and are thus on the inside, and can sniff you packets.
4) And how to set up an ssh-connection over the internet cloud to safely build a remote control/desktop sharing connection, e.g., a friend's Mac when she has a problem?
If you are using the Mac OS X Leopard built-in *Screen Sharing* and you are connecting to another Mac's built-in Leopard System Preferences -> Sharing -> Remote Management (Tiger's Apple Remote Desktop), then in the *Screen Sharing* preferences, is an "Encrypt all network data" option.
If you wish to set this option in advance, you can launch *Screen Sharing* by double clicking on System -> Library -> CoreServices -> Screen Sharing.app
You can *Screen Sharing* connections over the net using iChat. This is one of the easiest ways to take control of their system. Of course they need to cooperate. I use a Free AOL Instant Messager (AIM) account for my iChat connections. And as a side benefit you can text, audio chat and/or video chat with the person at the other end.
If you are NOT using the build-in Mac OS X *Screen Sharing* and/or you are NOT using the build-in remote Mac OS X remote management server, then this is a situation where an ssh tunnel would be a very good idea.
However, setting up an ssh tunnel between 2 systems across the internet gets complex.
In this case you might want to consider using something like LogMeIn.com which will deal with all those nasty home routers without needing to to do nasty router configurations, and it will be a secure connection. LogMeIn.com will not be as fast as a *Screen Sharing* connection or a VNC connection, but it will be secure and easy to establish. Again, this is only if you can not to Mac to Mac *Screen Sharing* using built-in Mac OS X remote desktop.
Now if you want to roll your own ssh tunnels for VNC, then I'm just going to outline the things you need to do.
If the remote system is behind a home router, you need to configure that remote home router to "Port Forward" port 22 on the Internet side to port 22 on the target Mac. Bonus points if the internet side using a high number port to discourge net bots from knocking on your door. Use the ssh -p 12345 option to connect to the high numbered port that is forwarded to port 22 of the destination Mac.
On the remote Mac you need to run a VNC server. If this is a Mac, then Leopard System Preferences -> Sharing -> Remote Management (Tiger's Apple Remote Desktop). If it is not a Mac, then for Windows, TightVNC, UltraVNC, RealVNC are possible options. Linux has a built-in vncserver, or you can install x11vnc which has the advantage of displaying the desktop screen.
Once you can access the remote system, you use an ssh command like the following:
ssh -p 12345 -L 5901:localhost:5900 remote.system.address
You can get the remote system's address by having the remote system surf over to http://whatismyip.com. Then they can tell you the IP address.
If you are going to be doing this a lot, you can get a free no-ip.com or dyndns.org dynamic DNS name for the remote system, and the remote system can run a dynamic DNS client (available from no-ip.com or dyndns.org) which will keep the dynamic DNS name updated as the remote person's ISP change's their IP address.
Finally, now that you have an ssh tunnel for VNC traffic, you have your VNC client connect to
Address: localhost
Port: 5901
Depending on your VNC client you may need to specify Display 1 instead of Port 5901. Or if you do not get a Display or Port option you specify localhost:5901

Set up Remote Access for Mac Mini

I recently bought a Mac Mini and set it up at home. It is running on Mac OS X 10.8.3, and runs on Server 2.2.1 and Airport Utilities 6.2. I would like to be able to access the Mac Mini server from outside my home. Does anyone know the procedure of setting up remote access (through SSH or VPN) without creating an internet domain name? Thanks!
I'm quite new to many of the Apple products, so it would be good if the answers are clearer and more detailed. Thanks!

As Barney-15E says, Back-to-My-Mac is the best option.
After that, try TeamViewer.com
ssh can be done, but there are setup details with respect to your home router to allow port 22 from the Internet side to your Mac mini <http://portforward.com>. And then you will need a dynamic DNS name from someone like No-IP.com or DynDNS.org so you can find your home router. Once you have that setup, you should make sure you use a good strong password, as you have now exposed a known port to the internet <http://xkcd.com/936/> and <https://www.grc.com/haystack.htm>. Don't forget to enable System Preferences -> Sharing -> Remote Login. So now you can ssh, but what do you want to do with that? You can create ssh tunnels for VNC screen sharing and AFP file sharing.
ssh -L 22590:localhost:5900 -L 22548:localhost:548 [email protected]
Now you have logged in and you have 2 tunnels. How to use them.
Finder -> Go -> Connect to server -> vnc://localhost:22590
Finder -> Go -> Connect to server -> afp://localhost:22548
Back-to-My-Mac and/or TeamViewer.com are easier

Install Arch on five clients using ssh?

Hi all,
We are trying to install arch on five machines using ssh for our clusters lessons, using VirtualBox. We have arch installed on a machine called "Master" and from this we are using PXE server to load Arch (core) iso on the clients. PXE runs fine but for our purpose we have some troubles.
First of all, we need to boot arch directly, without "Options screen" (screen where you can choose between Load arch, load another OS, reboot, etc...), we NEED to boot arch without user intervention. Then, we need to run up ssh server automatically (maybe parsing any option on PXE config file). And the last issue is to login on client machine as root.
If we run sshd and allow to connect giving permissions on /etc/hosts.allow file and then try to login on client from Master as root, we can't do this because root has no password but ssh requieres it, this is a problem.
In short, we need at least to solve this problems:
* Load arch image directly, skipping load screen.
* Run sshd on startup and allow access
* Be able to login as root from our "Master" machine
Any idea of that? We are thinking about to make an image of our Master machine and use it to offer with PXE, but I think this is a bad idea because client machines has not partitions and our fstab file will try to mount filesystems and this is a problem.
Thanks for your help, god will be grateful for it and kill no more kittys and sorry for the brick!
Last edited by Sepho (2010-12-02 20:56:27)

OK after my 4th attempt, i got it
My initial situation
fdsik -l (GPT table format)
Gerät boot. Anfang Ende Blöcke Id System
/dev/sda1 1 26 204819+ ee GPT
/dev/sda2 26 36747 294963432 af HFS / HFS+
/dev/sda3 * 61682 77826 129678336 7 HPFS/NTFS
/dev/sda4 36747 61438 198331055 83 Linux
So, I had Ubuntu running on sda4 (ext4).
What I did
1. Installed rEFIT on Mac OS X, and after two reboots it showed up.
2. In the rEFIT menu, Synchronized with the Partition tool my MBR and GPT table.
3. Opened Gparted on an ubuntu live cd, in order to format my ext4 partition
4. Installed Arch using the normal installation procedure, but I skipped the partitioning section, I did only the file system mountpoints step, selecting my sda4 partition.
5. Installed grub (not grub2) on /dev/sda, the mbr (not /dev/sda4), and activated the windows section in menu.lst
6. After reboot, I selected from rEFIT the Windows logo (linux logo doesn't work), through the windows logo i get in the standard grub menu, where I can select Windows or Arch!
Now I'll remove rEFIT and boot trough normal mac os x's bootcamp tool. (if you select windows you get in the grub menu)
Hope this helps someone!

Remote access a mac in differnt locations

Hi all,
I'm wondering if anyone can help me. I need to remote access my wifes ibook when she travels round the world from my powerbook and access my parient pc from their home because thay are technophobes. What do I need to do? If you can help then great.
I hope to hear your replies soon.
BB
PowerBook G4 1.67GHz Mac OS X (10.4.6) PowerBook G4

Define 'access' please.
At its simplest level you can turn on Remote Login in System Preferences -> Sharing and then use ssh to connect to the machine from a remote location. This will require a command-line interface, though - which is fine if you're able to do what you want from a command line, but not if you want a GUI. In that case you can use any of the screen-sharing applications such as Timbuktu, Symantec's PCAnywhere, or Apple's Remote Desktop
All of these programs will show a remote system's screen in a window on your machine. Keyboard presses and mouse clicks are transmitted to the remote machine for full GUI control. There is, of course, a lag due to the network latency involved so you'll want a high-speed connection on each end, but they are viable remote control/management solutions in many cases.

Using ssh tunneling to admin OS X server on a far-away LAN

My Mac OS X Server 10.4 box is behind a gateway (dns, dhcp, nat, ipfw) box on a LAN. My workstation (the one I will be administering from) is on a different LAN. I don't want to open holes in my firewall, but I have an account on the firewall (I am the admin). I want to use ssh tunneling to administer the server. I have successfully done this with my old webstar box (which the OSX Server is replacing).
Is it as simple as adding a port designation when I "Add Server" to the Server Admin and Workgroup Server? example:
localhost:8331 or localhost:8625
(8331 is the local end of the tunnel which ends up as 331 to the OSX server, and same for 8625) The OSX server doesn't care because it see the connections from the ports that it expects. I'm just wondering about configuring the admin apps which are on a different LAN.

How do I bring up the file shares in a GUI
You don't. Not with Putty or an SSH connection. Just share a folder from the PC and access it via SMB from the Mac to access it.
http://support.apple.com/kb/HT1568

Using ssh to access my mac

Similar Messages

Maybe you are looking for