Re: Re[2]: [cobalt-users] [OT, slightly] SSH between servers

["Brian Curtis" <admin@xxxxxxxxxxx>]

> BC> $ ssh -l <username> -c 3des -L 2121:<server2>:21 <server1>
>
> Yes, that's exactly what I was looking for :-) ...
> Question (because I'm not sure where I should issue the above
> command): As you said I am going client => server1 <=> server2
> I telnet from <client-windows> into <server1-Qube2> using a ssh2 client
> (Koala from www.midasoft.com). Then from <server1> I issue the above
> to <server2 production> ?

The above command should be issued from <server1>, and only sets up your
port forwarding.  It doesn't atcually make a connection to <server2> until
you connect to the forwarded port on <server1>

> I guess that I then get an authentication dialog from <server2>...

Actually, no.  You'd get an authentication dialog from <server1>.  Only when
you connect to the forwarded port via the ftp command below will you need to
authenticate with <server2>.  This is how the connection would look for you:

<workstation> => ssh to <server1>
<server1>     => open new ssh session w/ localhost w/ port forwarding
<server1>     => ftp to forwarding port (2121), land on <server2:21>
<server2:21>  => ftp back and forth between <server1> and <server2>

> BC> $ ftp localhost 2121
>
> BC> will securely tunnel through to <server2>:21.
>
> Another question: I don't seem to be able to find the ssh client on my
> Qube ! I did a "locate ssh" and found a lot of stuff, but nothing that
> looks like a client to me. Would you mind telling me where it should
> be ?
> (the pkg I installed was "OpenSSH Server Release 2.1.1p2" and I see
> this un-installer (looks like it's only the server I installed):
> "/var/lib/cobalt/uninstallers/openssh-server-2.1.1p2.uninst"
> Also, I do have the man for sshd, but nothing for ssh.

All the SSH packages I have ever seen always put the ssh client in the same
dir as the ssh server, so that's where I'd look first.  If you're doing a
pre-packaged install (RPM), there's usually more than one item to install
for two-way ssh functionality and scp:

openssh (provides scp)
openssh-server (provides sshd)
openssh-clients (provides ssh)

If you wish to gather information on the latest release of the OpenSSH suite
of tools, check out the http://www.openssh.com site.

I did some searching and found an SFTP package that seems to work quite
well.  It requires that you have it installed on both servers you wish to
SFTP between and x86 RPMs are available.  http://www.xbill.org/sftp (SFTP
home page)

Also, read the response by Jeff Bilicki.  He mentions scp (Secure CoPy)
which is a good alternative, depending on the task at hand.

--
Brian Curtis