Red Branch | For Future Reference …
We were configuring OpenStack on a private 192.168 network and needed to use a web browser to browse to the OpenStack dashboard. The quickest easiest way to do that is by:
|
1 |
ssh -D 8888 jonny@sshgateway |
From the ssh manpage: -D Specifies a local “dynamic” application-level port forwarding. This works by allocating a socket to listen to port on… Read more »
I regularly need to connect to SSH hosts behind a firewall via a single SSH host with SSH access enabled. Since I am connecting to many hosts through this proxy SSH host I can make my life a little easier by adding some entries to my ~/.ssh/config file: If I add the following:
|
1 2 |
Host internalhost ProxyCommand ssh -q sshgateway.domainname.com nc internalhost 22 |
I… Read more »
I needed to copy some data from a virtual machine onto a USB Disk that was plugged into the ESXi machine hosting the virtual machine. Step 1 – Plug the USB Disk into the ESXi host Step 2 – Add a USB Controller to the VM Step 3 – Add a USB Device to… Read more »
I needed to create a new MySQL user that would be able to create new users itself and grant permissions to the accounts that it creates. To do so I used the following:
|
1 |
GRANT ALL PRIVILEGES ON *.* TO 'subadmin'@'%' WITH GRANT OPTION; |
Today I was sent a PDF file leaflet with info to add to McIvor Farrell Belfast Solicitors website and I wanted to know the fonts used by the graphic designer. I first tried Online Font Converter and that did tell me one of the fonts used. Online Font Converter required me uploading the PDF file… Read more »
I had the following error message on Linux Mint when trying to play a new game:
|
1 |
This application requires either the GL_EXT_texture_compression_s3tc, or the GL_EXT_texture_compression_dxt1 + GL_ANGLE_texture_compression_dxt3 + GL_ANGLE_texture_compression_dxt5 OpenGL extensions. Please install S3TC texture support. |
Solved by installing the 32-bit libtxc as follows:
|
1 |
sudo apt-get install libtxc-dxtn-s2tc0:i386 |
I took part in a swim this weekend – The Battle of Carlingford Lough. My friend Cormac gave his Panasonic Lumix camera to Mary in the kayak and set the camera to log GPS data. He sent me the GPS log file and I opened the log file with BT747 – a Java application that… Read more »
So back in November 2013 1and 1 contacted me to tell me they would be physically moving my server from one data centre to another: In the email on the 3rd November they advised signing up for 1and1 Professional Backup. They advised that the backup service would be free for two months and would automatically… Read more »
After installing GitLab Omnibus edition I wanted to take a look at the database tables. To do so I installed phpPgAdmin (available in the EPEL repo):
|
1 |
yum install phpPgAdmin |
I created a user in Postgres for use with phpPgAdmin:
|
1 2 3 4 5 6 7 8 9 10 11 12 |
su - gitlab-psql /opt/gitlab/embedded/bin/psql gitlabhq_production gitlabhq_production=# CREATE USER jonny_test WITH PASSWORD 'opensesame'; CREATE ROLE gitlabhq_production=# GRANT ALL PRIVILEGES ON DATABASE gitlabhq_production to jonny_test; GRANT gitlabhq_production=# GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO jonny_test; GRANT gitlabhq_production=# \q |
If you have problems running the psql command you may want to specify the the unix socket… Read more »
The are multiple methods of doing this including using pam but I settled for the following: In the /etc/ssh/sshd_config file I currently have:
|
1 2 |
AuthorizedKeysCommand /usr/libexec/openssh/ssh-ldap-wrapper AuthorizedKeysCommandRunAs nobody |
to check for ssh keys for the user logging in and I also have password authentication disallowed. The content of the file /usr/libexec/openssh/ssh-ldap-wrapper was simply:
|
1 |
exec /usr/libexec/openssh/ssh-ldap-helper -s "$1" |
I amended it to:
|
1 2 3 4 5 6 7 8 9 10 11 |
#!/bin/sh USER_IN_ALLOWED_GROUP=`ldapsearch -x -b 'ou=Groups,dc=domain,dc=whatever,dc=co,dc=uk' '(cn=ssh-access)' | egrep "^memberUid" | awk '{print $2}' | grep $1 | wc -l` if [ $USER_IN_ALLOWED_GROUP -gt 0 ];then logger -t sshd -p info "User $1 is a member of the ssh-access group" exec /usr/libexec/openssh/ssh-ldap-helper -s "$1" else logger -t sshd -p warn "User $1 is not a member of the ssh-access group and not allowed to log in, access denied" echo exit 0 fi |
