Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Secure-Shell
[Top] [All Lists]

RE: Multihomed Configuration

Subject: RE: Multihomed Configuration
Date: Fri, 8 Jun 2007 17:03:38 +0530

Thanks a lot for your support...I got many responses for this
query...but still the issue persists.
I am explaining the problem with more clarity below....

So far, we have been using "wu-ftp" FTP server for ftp operations.
From now on, we are planning to support SFTP operations using
openSSH-4.6p1 in solaris.

Problem :
--------------
In wu-ftp, we observed the following configuration factilities
available. Similarly we are looking these kind of configuration facility
from openSSH SFTP also.

How Wu-FTP worked for us previously :
-------------------------------------------------------
Wu-ftp provides option to configure the default directory,
authentication password and user credentials in /etc/ftpaccess file.
The lines in the etc/ftpaccess file are :

1) virtual 192.168.65.1 root
/usr/users/mp2se/AlarmTrap/map1/ftp/192.168.65.1
        defines a default directory, if login is successful.
2) virtual 192.168.65.1 passwd
/usr/users/mp2se/AlarmTrap/map1/ftp/192.168.65.1/etc/passwd
        authenticates username & password.
3) virtual 192.168.65.1 allow cisco superuser
        Allows the cisco/superuser to ftp/login to 192.168.65.1.

What we are looking :
-------------------------------
In wu-ftp , we are specifying the default directory for logins. This is
evident from the above first entry.(virtual 192.168.65.1 root
/usr/users/mp2se/AlarmTrap/map1/ftp/192.168.65.1). Similarly, I need to
specify default root directory for SFTP in sshd_config file. But I do
not see any option to specify the default directory in the config file.
(sshd_config file).

Further, I have to assign the default directory, for many virtual ip
addresses. Can you please clarify me, how I can proceed to tackle this
issue.

Without this configuration, I am not able to heading my works.

Thanks in advance.
Nirmal

-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com]
On Behalf Of Nirmal Babu Puliyadi Suriya Kumar -X (npuliyad - HCL at
Cisco)
Sent: Wednesday, June 06, 2007 10:33 PM
To: secureshell@securityfocus.com
Subject: Multihomed Configuration


Hi Folks,

I am using version openssh-4.6p1 in solaris server.

Consider my solaris PC is configured as multihomed with two NIC.

e69001% ifconfig -a
ce0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
        inet 172.23.87.109 netmask ffffff00 broadcast 172.23.87.255
ce1: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 3
        inet 192.168.2.133 netmask ffffff00 broadcast 192.168.2.255

I mean my PC has two IP address. By making use of ListenAddress in
sshd_config file, i can able to listen ssh/ sftp request from both IP
addresses.

e69001# grep "ListenAddress" sshd_config
#ListenAddress 0.0.0.0
#ListenAddress ::
ListenAddress 172.23.87.109
ListenAddress 192.168.2.133

If we do sftp to both the IP address from different machine, it will
pointout the same default root directory.

From machine1:

tballraker7# ./sftp svplus@192.168.2.133
Connecting to 192.168.2.133...
svplus@192.168.2.133's password:
sftp> pwd
Remote working directory: /usr/users/svplus
sftp > quit

From machine2:

cwmsent51# ./sftp svplus@172.23.87.109
Connecting to 172.23.87.109...
svplus@172.23.87.109's password:
sftp> pwd
Remote working directory: /usr/users/svplus
sftp > quit


Here, the default directory will be defined based on the login username.


But, Is it possible to assign/ configure different default directory for
each IP address with same login username?

Rgds
Nirmal


<Prev in Thread] Current Thread [Next in Thread>