RE: Changing home directory using CopSSH (was: Using Key Pairs on OpenSSH on Win2k3)
"Welsh, Armand" <[email protected]> Thu, 29 May 2008 11:12:32 -0700
| Newsgroups | gmane.network.ssh.windows |
|---|---|
| Message-ID | <078F02AD7EC1DF4FA30DC587C548679A01426DF9@INE000PB.IMSWEST.SSCIMS.com> |
This is a multi-part message in MIME format.
------_=_NextPart_001_01C8C1B7.9072E434
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
You can modify that in the Registry. The older SSH version that OpenSSH
for windows uses, leverages the older configuration file from Cygwin to
identify the mount point for /home. In the newer versions of Cygwin
(which copSSH is built upon) these values are retained in the registry
under \HKLM\Cygnus Solutions\Cygwin\mounts v2
=20
The Registry Cygwin Hive looks like this:
=20
Cygwin
+--- mounts v2
| +--- /
| +--- /user/bin
| +--- /user/lib
+---Program Options
=20
=20
To add chang the default /home directory location, just add another
mount point in the registry
1) adding a new registry key, key under "mounts v2" and call it /home
2) inside of /home, add a new REG_DWORD value
a) label the value: flags
b) set the value of flags to: (Hexadecimal) a
3) inside of /home, add a new REG_SZ value
a) label the value: native
b) set the valaue of native to: D:\somedrive/somepath/somedeeperpath
(for the path, use the forward slash for the devider, but the use
backslash immediately after the drive letter)
=20
=20
The new registry hive will looke something like this:
=20
Cygwin
+--- mounts v2
| +--- /
| +--- /user/bin
| +--- /user/lib
| +--- /home
+---Program Options
________________________________
From: [email protected] [mailto:[email protected]] On Behalf Of Travis,
Shane (GE Healthcare)
Sent: Thursday, May 29, 2008 8:32 AM
To: [email protected]
Subject: Changing home directory using CopSSH (was: Using Key Pairs on
OpenSSH on Win2k3)
Fair cop - you're right, and I didn't even see it when I was responding.
I realize/remember now that you are correct.
=20
So, I will separate my request from the original poster's (as I have now
forked into a different topic) and ask my own question.
=20
I *need* to be able to change the home directory for an SSH install, for
reasons internal to our processes. This is why we are still using
OpenSSH for Windows ... because it allows us to do that. When I
investigated CopSSH (about two years ago) it was not possible to do
this. Can anyone on this list tell me if the CopSSH package has been
modified in the interim to make this possible?
=20
(Lest anyone ask why we would need to do this; the SSH tool is used for
one account only, and locked down to that account. We need to be able to
access the code repository over SSH from up to several hundred computers
using SSH, and the repository can be upwards of 5 GB. Most customers do
not have or will not grant this amount of space on their C: drive --
where the $HOME variable usually points, and TBH we don't really want
the code buried in C:\Windows\Documents and
Settings\<username>\foo\bar\baz -- much easier to reference it when it's
on a top-level somewhere without spaces in the path.)
=20
So, restating the question: is it (now) possible to change the HOME
directory of a user in CopSSH? If so, how is it accomplished?
=20
Thanks;
=20
-- Shane
=20
________________________________
From: [email protected] [mailto:[email protected]] On Behalf Of
Welsh, Armand
Sent: Wednesday, May 28, 2008 6:08 PM
To: [email protected]
Subject: RE: Using Key Pairs on OpenSSH on Win2k3
=09
=09
What you are doing here is changing the home directory, not the
path. If you place the home directory into the default PATH then this
sort of works, but but it is not a good idea to point a user's home
directory to someplace other than a home directory, because the home
directory often will contain files that are unique to the user. To
change the path, you should nodify the login shell scripts to set the
PATH. See my other email about how to change the default.
=20
Note: The only real difference between copSSH and openSSH is
that copSSH is the cygwin openSSH without the bloat of unnecessary GNU
tools, and with the convenience of preconfiguring a workable system.
OpenSSH for Windows (not to be confused with Cygwin's version) is out
dated and full of security holes..
________________________________
From: [email protected] [mailto:[email protected]] On Behalf Of
Travis, Shane (GE Healthcare)
Sent: Wednesday, May 28, 2008 4:20 PM
To: [email protected]
Subject: RE: Using Key Pairs on OpenSSH on Win2k3
=09
=09
OpenSSH allows you to change the path for a user. Open the file
<openssh_install_dir>\etc\passwd
and find the entry for the user you are using to log in, and
change the path from=20
=20
/home/<user>
to
/cygdrive/<drive_letter>/<path>
Example: If want to change the path to C:\rx then the home
directory should be set to /cygdrive/c/rx
=20
At one point when I investigated CopSSH, it was not capable of
doing this, which is why our organization is still using OpenSSH. If
users of CopSSH know for a fact that this has changed, and can explain
the mechanism, I for two (OP is 'for one') would love to hear.
=20
--=20
Shane Travis <[email protected]>=20
Lead Service System Designer=20
GE Healthcare IITS - Centricity Pharmacy=20
T: 306 667 7942 F: 306 933 0111=20
________________________________
From: [email protected] [mailto:[email protected]] On
Behalf Of Robert Denton
Sent: Wednesday, May 28, 2008 4:57 PM
To: [email protected]
Subject: RE: Using Key Pairs on OpenSSH on Win2k3
=09
=09
Okay, let me see if I can explain my set up a little
bit. And you might be right about there being no connection between
openssh and the ssl used to connect to the https server, but here goes:
=09
user@svnserver ---(ssh)---> admin@devserver
---(https)---> svnserver
=09
Seems weird to do it that way, but in order to maintain
a mirror of our code on the dev server we need to issue an 'update'
command to the svn client on the dev server where we want the mirror,
and this is triggered by a process on the svn server itself. The first
part seems to be working with one weird exception:
=09
If I log onto the devserver and launch a command prompt,
the command 'svn' is known by virtue of path. Oddly, if I ssh to that
server as the same user, the command 'ssh' is not known. Does Cygwin (or
OpenSSH) maintain it's own path variable? If so, where is it kept?
=09
Robert=20
=09
________________________________
From: Welsh, Armand
[mailto:[email protected]]
To: [email protected]
Sent: Wed, 28 May 2008 14:33:24 -0700
Subject: RE: Using Key Pairs on OpenSSH on
Win2k3
=09
=09
I don't think the copSSH and the https based
activities are related. Regarding the connection to the other server
(via https), how is this connection established? I need more
information to understand the issue. Are you connecting (via ssh) to
the server, and then on the server using wget or other command line util
to get something from a web server? If you are using an SSH tunnel to
connect to the https server using the ssh server as a middle point then
I would need to know what client libraries on your client computer are
used to establish the https session.
=20
Armand
________________________________
From: [email protected]
[mailto:[email protected]] On Behalf Of Robert Denton
Sent: Wednesday, May 28, 2008 12:49 PM
To: [email protected]
Subject: Re: Using Key Pairs on OpenSSH on
Win2k3
=09
=09
So I took your advice and installed CopSSH
instead and it is working as desired, with one minor snag. First, the
application I am using this for is to connect to the copssh server and
run some commands. One of the commands involves connection to a
different server via https. When I do this I get prompted to accept the
certificate. Choosing 'p' for permanent has no effect.
=09
Advice I have gotten from other forums is that I
need to download Comodo's Trusted Root Certificate and append it to the
end of the ca-bundle.crt that is used by OpenSSH. Unfortunately a
search of the system yields no such file. Where does CopSSH place this
file? And do you agree that this is the recommended course of action?
=09
Robert
=09
________________________________
From: Welsh, Armand
[mailto:[email protected]]
To: [email protected]
Sent: Thu, 22 May 2008 09:17:19 -0700
Subject: Re: Using Key Pairs on OpenSSH
on Win2k3
=09
Robert,
=09
Before I look into potential causes, the
first I would like to know is: are you using copSSH, the Cygwin
installation with the openSSH package installed, or the "openSSH for
Windows" project from source forge?
=09
Why do I ask? Al three are openSSH from
the cygwin project the following conditions:
Cygwin is the thick install proding the
option to turn you windows box into a GNU Linux like operating system
(via the bash or other shell and some special mappers built into
cygwin). The cygwin project installs a basic configuration of openSSH
which works well on older windows systems, but requires specific things
be done to get the SSH server to work 100% on windows 2003 and Vista.
=09
CopSSH is a pre-packaged minimal
installation of Cygwin with a couple minor enhancement patches that
installs Cygwin, openSSH, configures you computer (even vista and
win2k3) so that openSSH works without any tweaking at all.
=09
"OpenSSH for Windows" is a dead
sourceforge project that is almost identical to copSSH, except that
development on the project has stopped a long time ago, and this package
requires more tweaking of the ssh settings and the server that the other
options, and is running very old ssh code that should not be used
anymore in my opinion.
=09
If you want the easy solution, install
copSSH and everything will work. If you want to get what you have
working and you did not install copSSH then we can offer assistance with
making all the appropriate changes, but it will take more time to get
SSH services up and running with public keys, but you will have the
option of using any piece of the cygwin project easily.
=09
Armand
=09
=09
------_=_NextPart_001_01C8C1B7.9072E434
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns:o =3D "urn:schemas-microsoft-com:office:office"><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<STYLE>BODY {
FONT: 10pt Tahoma, Verdana, sans-serif
}
</STYLE>
<META content=3D"MSHTML 6.00.6000.16640" name=3DGENERATOR></HEAD>
<BODY dir=3Dltr>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D814495715-29052008>You can =
modify that in=20
the Registry. The older SSH version that OpenSSH for windows uses, =
leverages the older configuration file from Cygwin to identify the mount =
point=20
for /home. In the newer versions of Cygwin (which copSSH is =
built=20
upon) these values are retained in the registry under \HKLM\Cygnus=20
Solutions\Cygwin\mounts v2</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D814495715-29052008></SPAN> </DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D814495715-29052008>The =
Registry Cygwin Hive=20
looks like this:</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D814495715-29052008></SPAN> </DIV>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D814495715-29052008>Cygwin</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D814495715-29052008>+--- mounts =
v2</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN=20
class=3D814495715-29052008>| +--- =
/</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D814495715-29052008>| =20
+--- /user/bin</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D814495715-29052008>| =20
+--- /user/lib</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D814495715-29052008>+---Program =
Options</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D814495715-29052008></SPAN> </DIV>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D814495715-29052008></SPAN> </DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D814495715-29052008>To add =
chang the default=20
/home directory location, just add another mount point in the=20
registry</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D814495715-29052008>1) adding a =
new registry=20
key, key under "mounts v2" and call it /home</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D814495715-29052008>2) inside =
of /home, add a=20
new REG_DWORD value</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D814495715-29052008> a)=20
label the value: flags</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D814495715-29052008> b) set=20
the value of flags to: (Hexadecimal) a</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D814495715-29052008>3) inside =
of /home, add a=20
new REG_SZ value</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D814495715-29052008> a)=20
label the value: native</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D814495715-29052008> b) set=20
the valaue of native to: =
D:\somedrive/somepath/somedeeperpath</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D814495715-29052008>(for the =
path, use the=20
forward slash for the devider, but the use backslash immediately after =
the drive=20
letter)</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D814495715-29052008></SPAN> </DIV>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D814495715-29052008></SPAN> </DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D814495715-29052008>The new =
registry hive=20
will looke something like this:</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D814495715-29052008></SPAN> </DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D814495715-29052008>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D814495715-29052008>Cygwin</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D814495715-29052008>+--- mounts =
v2</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN=20
class=3D814495715-29052008>| +--- =
/</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D814495715-29052008>| =20
+--- /user/bin</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D814495715-29052008>| =20
+--- /user/lib</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D814495715-29052008>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D814495715-29052008>| =20
+--- /home</SPAN></DIV>+---Program Options</SPAN></DIV></SPAN></DIV><BR>
<DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr align=3Dleft>
<HR tabIndex=3D-1>
<B>From:</B> [email protected] [mailto:[email protected]] <B>On Behalf =
Of=20
</B>Travis, Shane (GE Healthcare)<BR><B>Sent:</B> Thursday, May 29, 2008 =
8:32=20
AM<BR><B>To:</B> [email protected]<BR><B>Subject:</B> Changing home =
directory=20
using CopSSH (was: Using Key Pairs on OpenSSH on Win2k3)<BR><BR></DIV>
<DIV></DIV>
<DIV><FONT face=3DArial color=3D#0000ff><SPAN =
class=3D663122015-29052008>Fair cop -=20
you're right, and I didn't even see it when I was responding. I =
realize/remember=20
now that you are correct.</SPAN></FONT></DIV>
<DIV><FONT face=3DArial color=3D#0000ff><SPAN=20
class=3D663122015-29052008></SPAN></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#0000ff><SPAN =
class=3D663122015-29052008>So, I will=20
separate my request from the original poster's (as I have now forked =
into a=20
different topic) and ask my own question.</SPAN></FONT></DIV>
<DIV><FONT face=3DArial color=3D#0000ff><SPAN=20
class=3D663122015-29052008></SPAN></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#0000ff><SPAN =
class=3D663122015-29052008>I *need* to=20
be able to change the home directory for an SSH install, for reasons =
internal to=20
our processes. This is why we are still using OpenSSH for Windows ... =
because it=20
allows us to do that. When I investigated CopSSH (about two years ago) =
it was=20
not possible to do this. Can anyone on this list tell me if the CopSSH =
package=20
has been modified in the interim to make this =
possible?</SPAN></FONT></DIV>
<DIV><FONT face=3DArial color=3D#0000ff><SPAN=20
class=3D663122015-29052008></SPAN></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#0000ff><SPAN =
class=3D663122015-29052008>(Lest anyone=20
ask why we would need to do this; the SSH tool is used for one account =
only, and=20
locked down to that account. We need to be able to access the code =
repository=20
over SSH from up to several hundred computers using SSH, and the =
repository can=20
be upwards of 5 GB. Most customers do not have or will not grant this =
amount of=20
space on their C: drive -- where the $HOME variable usually points, and =
TBH we=20
don't really want the code buried in C:\Windows\Documents and=20
Settings\<username>\foo\bar\baz -- much easier to reference it =
when it's=20
on a top-level somewhere without spaces in the =
path.)</SPAN></FONT></DIV>
<DIV><FONT face=3DArial color=3D#0000ff><SPAN=20
class=3D663122015-29052008></SPAN></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#0000ff><SPAN =
class=3D663122015-29052008>So, restating=20
the question: is it (now) possible to change the HOME directory of a =
user in=20
CopSSH? If so, how is it accomplished?</SPAN></FONT></DIV>
<DIV><FONT face=3DArial color=3D#0000ff><SPAN=20
class=3D663122015-29052008></SPAN></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#0000ff><SPAN=20
class=3D663122015-29052008>Thanks;</SPAN></FONT></DIV>
<DIV><FONT face=3DArial color=3D#0000ff><SPAN=20
class=3D663122015-29052008></SPAN></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#0000ff><SPAN =
class=3D663122015-29052008>--=20
Shane</SPAN></FONT></DIV>
<DIV><FONT face=3DArial color=3D#0000ff></FONT> </DIV><BR>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px =
solid; MARGIN-RIGHT: 0px">
<DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr align=3Dleft>
<HR tabIndex=3D-1>
<FONT face=3DTahoma><B>From:</B> [email protected] =
[mailto:[email protected]]=20
<B>On Behalf Of </B>Welsh, Armand<BR><B>Sent:</B> Wednesday, May 28, =
2008 6:08=20
PM<BR><B>To:</B> [email protected]<BR><B>Subject:</B> RE: Using Key =
Pairs on=20
OpenSSH on Win2k3<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D648130300-29052008>What you =
are doing here=20
is changing the home directory, not the path. If you place =
the=20
home directory into the default PATH then this sort of works, but but =
it is=20
not a good idea to point a user's home directory to someplace other =
than a=20
home directory, because the home directory often will contain files =
that are=20
unique to the user. To change the path, you should nodify the =
login=20
shell scripts to set the PATH. See my other email about how to =
change=20
the default.</SPAN></DIV>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D648130300-29052008></SPAN> </DIV>
<DIV dir=3Dltr align=3Dleft><SPAN =
class=3D648130300-29052008>Note: The only=20
real difference between copSSH and openSSH is that copSSH is the =
cygwin=20
openSSH without the bloat of unnecessary GNU tools, and with the =
convenience=20
of preconfiguring a workable system. OpenSSH for =
Windows=20
(not to be confused with Cygwin's version) is out dated and full of =
security=20
holes..</SPAN></DIV><BR>
<DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr align=3Dleft>
<HR tabIndex=3D-1>
<B>From:</B> [email protected] [mailto:[email protected]] <B>On Behalf =
Of=20
</B>Travis, Shane (GE Healthcare)<BR><B>Sent:</B> Wednesday, May 28, =
2008 4:20=20
PM<BR><B>To:</B> [email protected]<BR><B>Subject:</B> RE: Using Key =
Pairs on=20
OpenSSH on Win2k3<BR><BR></DIV>
<DIV></DIV>
<DIV><FONT face=3DArial color=3D#0000ff><SPAN =
class=3D290561423-28052008>OpenSSH=20
allows you to change the path for a user. Open the=20
file</SPAN></FONT></DIV>
<DIV><FONT face=3DArial color=3D#0000ff><SPAN =
class=3D290561423-28052008><FONT=20
color=3D#000000><SPAN lang=3DEN-CA=20
style=3D"FONT-SIZE: 11pt; FONT-FAMILY: 'Courier New'; =
mso-fareast-font-family: 'Times New Roman'; mso-ansi-language: EN-CA; =
mso-fareast-language: EN-US; mso-bidi-language: =
AR-SA"><EM><openssh_install_dir></EM></SPAN><SPAN=20
lang=3DEN-CA=20
style=3D"FONT-SIZE: 11pt; FONT-FAMILY: 'Courier New'; =
mso-fareast-font-family: 'Times New Roman'; mso-ansi-language: EN-CA; =
mso-fareast-language: EN-US; mso-bidi-language: =
AR-SA">\etc\passwd</SPAN></FONT></SPAN></FONT></DIV>
<DIV><FONT face=3DArial color=3D#0000ff><SPAN =
class=3D290561423-28052008>and find=20
the entry for the user you are using to log in, and change the path =
from=20
</SPAN></FONT></DIV>
<DIV><FONT face=3DArial color=3D#0000ff><SPAN=20
class=3D290561423-28052008></SPAN></FONT> </DIV>
<DIV><FONT face=3DArial color=3D#0000ff>
<P class=3DMsoNormal=20
style=3D"MARGIN: 6pt 0in 6pt 1.25in; TEXT-INDENT: -1.25in; tab-stops: =
list 1.25in; mso-text-indent-alt: -9.0pt; mso-list: l7 level3 =
lfo50"><SPAN=20
lang=3DEN-CA=20
style=3D"FONT-SIZE: 11pt; FONT-FAMILY: 'Courier New'; =
mso-ansi-language: EN-CA"><FONT=20
color=3D#000000>/home/<I><<SPAN=20
class=3D290561423-28052008>user</SPAN>></I></FONT></SPAN></P>
<P class=3DMsoNormal=20
style=3D"MARGIN: 6pt 0in 6pt 1.25in; TEXT-INDENT: -1.25in; tab-stops: =
list 1.25in; mso-text-indent-alt: -9.0pt; mso-list: l7 level3 =
lfo50"><FONT=20
color=3D#000000><SPAN lang=3DEN-CA=20
style=3D"FONT-SIZE: 11pt; FONT-FAMILY: 'Courier New'; =
mso-ansi-language: EN-CA"></SPAN></FONT><SPAN=20
lang=3DEN-CA=20
style=3D"FONT-FAMILY: 'GE Inspira'; mso-ansi-language: EN-CA; =
mso-bidi-font-size: 11.0pt"><SPAN=20
class=3D290561423-28052008><FONT =
face=3DArial>to</FONT></SPAN></SPAN></P>
<P class=3DMsoNormal=20
style=3D"MARGIN: 6pt 0in 6pt 1.25in; TEXT-INDENT: -1.25in; tab-stops: =
list 1.25in; mso-text-indent-alt: -9.0pt; mso-list: l7 level3 =
lfo50"><SPAN=20
lang=3DEN-CA=20
style=3D"FONT-FAMILY: 'GE Inspira'; mso-ansi-language: EN-CA; =
mso-bidi-font-size: 11.0pt"><SPAN=20
class=3D290561423-28052008></SPAN></SPAN><SPAN lang=3DEN-CA=20
style=3D"FONT-SIZE: 11pt; FONT-FAMILY: 'Courier New'; =
mso-ansi-language: EN-CA"><FONT=20
=
color=3D#000000>/cygdrive/<drive_letter>/<path></FONT></SPAN>=
<SPAN=20
lang=3DEN-CA=20
style=3D"FONT-FAMILY: 'GE Inspira'; mso-ansi-language: EN-CA; =
mso-bidi-font-size: 11.0pt"><o:p></o:p></SPAN></P></FONT></DIV>
<DIV><FONT face=3DArial><EM><SPAN lang=3DEN-CA=20
style=3D"FONT-SIZE: 12pt; FONT-FAMILY: 'GE Inspira'; =
mso-fareast-font-family: 'Times New Roman'; mso-ansi-language: EN-CA; =
mso-fareast-language: EN-US; mso-bidi-language: AR-SA; =
mso-bidi-font-size: 11.0pt; mso-bidi-font-family: 'Times New =
Roman'">Example:=20
If <SPAN class=3D290561423-28052008>want to change the path =
to<FONT=20
face=3D"Courier New"> </FONT></SPAN></SPAN><SPAN lang=3DEN-CA=20
style=3D"FONT-SIZE: 11pt; FONT-FAMILY: 'Courier New'; =
mso-fareast-font-family: 'Times New Roman'; mso-ansi-language: EN-CA; =
mso-fareast-language: EN-US; mso-bidi-language: AR-SA">C:\rx=20
</SPAN><SPAN lang=3DEN-CA=20
style=3D"FONT-SIZE: 12pt; FONT-FAMILY: 'GE Inspira'; =
mso-fareast-font-family: 'Times New Roman'; mso-ansi-language: EN-CA; =
mso-fareast-language: EN-US; mso-bidi-language: AR-SA; =
mso-bidi-font-size: 11.0pt; mso-bidi-font-family: 'Times New =
Roman'">then=20
the home directory should be set to</SPAN><SPAN lang=3DEN-CA=20
style=3D"FONT-SIZE: 11pt; FONT-FAMILY: 'Courier New'; =
mso-fareast-font-family: 'Times New Roman'; mso-ansi-language: EN-CA; =
mso-fareast-language: EN-US; mso-bidi-language: AR-SA">=20
/cygdrive/c/rx</SPAN></EM></FONT></DIV>
<DIV><FONT face=3DArial color=3D#0000ff></FONT> </DIV>
<DIV><SPAN class=3D290561423-28052008><FONT color=3D#000000><SPAN =
lang=3DEN-CA=20
style=3D"FONT-SIZE: 11pt; FONT-FAMILY: 'Courier New'; =
mso-fareast-font-family: 'Times New Roman'; mso-ansi-language: EN-CA; =
mso-fareast-language: EN-US; mso-bidi-language: =
AR-SA"></SPAN></FONT></SPAN><SPAN=20
class=3D290561423-28052008></SPAN><FONT face=3DArial><FONT =
color=3D#0000ff>A<SPAN=20
class=3D290561423-28052008>t one point when I investigated CopSSH, it =
was not=20
capable of doing this, which is why our organization is still using =
OpenSSH.=20
If users of CopSSH know for a fact that this has changed, and can =
explain the=20
mechanism, I for two (OP is 'for one'</SPAN></FONT></FONT><FONT=20
face=3DArial><FONT color=3D#0000ff><SPAN class=3D290561423-28052008>) =
would love to=20
hear.</SPAN></FONT></FONT></DIV>
<DIV><FONT face=3DArial><FONT color=3D#0000ff><SPAN =
class=3D290561423-28052008><SPAN=20
lang=3Den-us><FONT face=3DArial=20
size=3D2></FONT></SPAN></SPAN></FONT></FONT> </DIV>
<DIV><FONT face=3DArial><FONT color=3D#0000ff><SPAN =
class=3D290561423-28052008><SPAN=20
lang=3Den-us><FONT face=3DArial size=3D2>-- </FONT></SPAN><BR><SPAN=20
lang=3Den-us><B><FONT face=3DArial size=3D2>Shane Travis =
<</FONT></B><FONT=20
face=3DArial size=3D2>[email protected]></FONT><B></B></SPAN> =
<BR><SPAN=20
lang=3Den-us><FONT face=3DArial size=3D2>Lead Service System =
Designer</FONT></SPAN>=20
<BR><SPAN lang=3Den-us><FONT face=3DArial size=3D2>GE Healthcare IITS =
- Centricity=20
Pharmacy</FONT></SPAN> <BR><SPAN lang=3Den-us><FONT face=3DArial =
size=3D2>T: 306 667=20
7942 F: 306 933 0111</FONT></SPAN>=20
</DIV></SPAN></FONT></FONT>
<DIV><BR></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px =
solid; MARGIN-RIGHT: 0px">
<DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr =
align=3Dleft>
<HR tabIndex=3D-1>
<FONT face=3DTahoma><B>From:</B> [email protected] =
[mailto:[email protected]]=20
<B>On Behalf Of </B>Robert Denton<BR><B>Sent:</B> Wednesday, May 28, =
2008=20
4:57 PM<BR><B>To:</B> [email protected]<BR><B>Subject:</B> RE: Using =
Key=20
Pairs on OpenSSH on Win2k3<BR></FONT><BR></DIV>
<DIV></DIV>Okay, let me see if I can explain my set up a little =
bit. =20
And you might be right about there being no connection between =
openssh and=20
the ssl used to connect to the https server, but here=20
goes:<BR><BR>user@svnserver ---(ssh)---> admin@devserver=20
---(https)---> svnserver<BR><BR>Seems weird to do it that way, =
but in=20
order to maintain a mirror of our code on the dev server we =
need to=20
issue an 'update' command to the svn client on the dev server where =
we want=20
the mirror, and this is triggered by a process on the svn server=20
itself. The first part seems to be working with one weird=20
exception:<BR><BR>If I log onto the devserver and launch a command =
prompt,=20
the command 'svn' is known by virtue of path. Oddly, if I ssh to =
that server=20
as the same user, the command 'ssh' is not known. Does Cygwin (or =
OpenSSH)=20
maintain it's own path variable? If so, where is it=20
kept?<BR><BR>Robert <BR>
<BLOCKQUOTE=20
style=3D"PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: =
rgb(0,0,255) 2px solid; MARGIN-RIGHT: 0px">
<HR>
<B>From:</B> Welsh, Armand =
[mailto:[email protected]]<BR><B>To:</B>=20
[email protected]<BR><B>Sent:</B> Wed, 28 May 2008 14:33:24=20
-0700<BR><B>Subject:</B> RE: Using Key Pairs on OpenSSH on =
Win2k3<BR><BR>
<DIV align=3Dleft><SPAN class=3D758572821-28052008>I don't think =
the copSSH=20
and the https based activities are related. Regarding the =
connection=20
to the other server (via https), how is this connection =
established? =20
I need more information to understand the issue. Are you =
connecting=20
(via ssh) to the server, and then on the server using wget or =
other=20
command line util to get something from a web server? If you =
are=20
using an SSH tunnel to connect to the https server using the ssh =
server as=20
a middle point then I would need to know what client libraries on =
your=20
client computer are used to establish the https =
session.</SPAN></DIV>
<DIV align=3Dleft><SPAN =
class=3D758572821-28052008></SPAN> </DIV>
<DIV align=3Dleft><SPAN =
class=3D758572821-28052008>Armand</SPAN></DIV><BR>
<DIV class=3DOutlookMessageHeader align=3Dleft>
<HR>
<B>From:</B> <A =
href=3D"mailto:[email protected]">[email protected]</A>=20
[mailto:<A =
href=3D"mailto:[email protected]">[email protected]</A>] <B>On=20
Behalf Of </B>Robert Denton<BR><B>Sent:</B> Wednesday, May 28, =
2008 12:49=20
PM<BR><B>To:</B> <A=20
=
href=3D"mailto:[email protected]">[email protected]</A><BR><B>Subject:</B=
>=20
Re: Using Key Pairs on OpenSSH on Win2k3<BR><BR></DIV>
<DIV></DIV>So I took your advice and installed CopSSH instead and =
it is=20
working as desired, with one minor snag. First, the =
application I am=20
using this for is to connect to the copssh server and run some=20
commands. One of the commands involves connection to a =
different=20
server via https. When I do this I get prompted to accept =
the=20
certificate. Choosing 'p' for permanent has no =
effect.<BR><BR>Advice=20
I have gotten from other forums is that I need to download =
Comodo's <SPAN=20
style=3D"MARGIN-TOP: 0px; FONT: 90% monospace; font-size-adjust: =
none; font-stretch: normal">Trusted=20
Root Certificate and append it to the end of the ca-bundle.crt =
that is=20
used by OpenSSH. Unfortunately a search of the system yields =
no such=20
file. Where does CopSSH place this file? And do you =
agree that=20
this is the recommended course of action?</SPAN><BR><BR>Robert<BR>
<BLOCKQUOTE=20
style=3D"PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: =
rgb(0,0,255) 2px solid; MARGIN-RIGHT: 0px">
<HR>
<B>From:</B> Welsh, Armand [mailto:<A=20
=
href=3D"mailto:[email protected]">[email protected]</A>]<BR><=
B>To:</B>=20
<A =
href=3D"mailto:[email protected]">[email protected]</A><BR><B>Sent:</B>=20
Thu, 22 May 2008 09:17:19 -0700<BR><B>Subject:</B> Re: Using Key =
Pairs=20
on OpenSSH on Win2k3<BR><BR>Robert,<BR><BR>Before I look into =
potential=20
causes, the first I would like to know is: are you using copSSH, =
the=20
Cygwin installation with the openSSH package installed, or the =
"openSSH=20
for Windows" project from source forge?<BR><BR>Why do I ask? Al =
three=20
are openSSH from the cygwin project the following =
conditions:<BR>Cygwin=20
is the thick install proding the option to turn you windows box =
into a=20
GNU Linux like operating system (via the bash or other shell and =
some=20
special mappers built into cygwin). The cygwin project installs =
a basic=20
configuration of openSSH which works well on older windows =
systems, but=20
requires specific things be done to get the SSH server to work =
100% on=20
windows 2003 and Vista.<BR><BR>CopSSH is a pre-packaged minimal=20
installation of Cygwin with a couple minor enhancement patches =
that=20
installs Cygwin, openSSH, configures you computer (even vista =
and=20
win2k3) so that openSSH works without any tweaking at=20
all.<BR><BR>"OpenSSH for Windows" is a dead sourceforge project =
that is=20
almost identical to copSSH, except that development on the =
project has=20
stopped a long time ago, and this package requires more tweaking =
of the=20
ssh settings and the server that the other options, and is =
running very=20
old ssh code that should not be used anymore in my =
opinion.<BR><BR>If=20
you want the easy solution, install copSSH and everything will =
work. If=20
you want to get what you have working and you did not install =
copSSH=20
then we can offer assistance with making all the appropriate =
changes,=20
but it will take more time to get SSH services up and running =
with=20
public keys, but you will have the option of using any piece of =
the=20
cygwin project=20
=
easily.<BR><BR>Armand<BR><BR></BLOCKQUOTE></BLOCKQUOTE></BLOCKQUOTE></BLO=
CKQUOTE>
<STYLE>BODY {
FONT: 10pt Tahoma,Verdana,sans-serif
}
</STYLE>
</BODY></HTML>
------_=_NextPart_001_01C8C1B7.9072E434--
--
List Info: http://erdelynet.com/ssh-l/
List Archives: http://erdelynet.com/archive/ssh-l/
To Unsubscribe: Mail mailto:[email protected]
If you are having trouble unsubscribing, visit the List Info page for help.