Re: ssh via inetd the Debian way

2006-04-26 Thread Monique Y. Mudama
On 2006-04-26, Steve Lamb penned: > > Yeah, knew that but was doing 3 things at once. Lemme just say > never play MMORPG and admin at the same time. :D For several years, that would have effectively prevented me from admin'ing =P (But I'm feeling much better now ...) -- monique Help

Re: ssh via inetd the Debian way

2006-04-26 Thread Steve Lamb
Greg Folkert wrote: > update-rc.d -f ssh remove Not true, that's the first thing I tried and none of the links were removed. :/ Oh, wait, maybe the -f makes a world of difference. *blush* > Never logout of said machine completely until you can login back in Yeah, knew that

Re: ssh via inetd the Debian way

2006-04-26 Thread Greg Folkert
On Wed, 2006-04-26 at 14:58 -0700, Steve Lamb wrote: > Steve Lamb wrote: > > Joey Hess wrote: > >> Many embedded systems don't have swap. ssh in inetd worked ok last time > >> I used it as long as speed was not important. > > > Thanks, Joey, I'll give it a whirl later on and let everyone know.

Re: ssh via inetd the Debian way

2006-04-26 Thread Steve Lamb
Steve Lamb wrote: > Joey Hess wrote: >> Many embedded systems don't have swap. ssh in inetd worked ok last time >> I used it as long as speed was not important. > Thanks, Joey, I'll give it a whirl later on and let everyone know. Was > just hoping that it was a question on dpkg-reconfigure th

Re: ssh via inetd the Debian way

2006-04-26 Thread Steve Lamb
Greg Folkert wrote: > On Tue, 2006-04-25 at 13:59 -0700, Steve Lamb wrote: >>> ssh stream tcp nowait root /usr/sbin/tcpd /usr/sbin/sshd >> For the record, -i at the end. > Sort of why I put the comment: > Now, since I have not tested this at all... it should really >

Re: ssh via inetd the Debian way

2006-04-26 Thread Greg Folkert
On Tue, 2006-04-25 at 13:59 -0700, Steve Lamb wrote: > Greg Folkert wrote: > > Why would one want sshd to run from inetd? > > Machine with low RAM that I rarely access via ssh. I do need access from > time to time via ssh however. 500k of a resident ssh is 500k I could free up > by moving i

Re: ssh via inetd the Debian way

2006-04-26 Thread Greg Folkert
On Tue, 2006-04-25 at 13:59 -0700, Steve Lamb wrote: > Greg Folkert wrote: > > Why would one want sshd to run from inetd? > > Machine with low RAM that I rarely access via ssh. I do need access from > time to time via ssh however. 500k of a resident ssh is 500k I could free up > by moving it

Re: ssh via inetd the Debian way

2006-04-26 Thread Jon Dowland
At 1146000792 past the epoch, Steve Lamb wrote: > Ah, thanks. It's a 96 from unixshell.com. Trying to fit exim, > apache(-ssl), SA, clamav all in 96Mb is rough. :( I have 80MB RAM and I've given up running spamassassin. I quite comfortably run exim4, crm114, apache, ssh, bind, a popd, an im

Re: ssh via inetd the Debian way

2006-04-25 Thread Steve Lamb
Joey Hess wrote: > Many embedded systems don't have swap. ssh in inetd worked ok last time > I used it as long as speed was not important. Thanks, Joey, I'll give it a whirl later on and let everyone know. Was just hoping that it was a question on dpkg-reconfigure that I was missing. --

Re: ssh via inetd the Debian way

2006-04-25 Thread Steve Lamb
Martin A. Brooks wrote: > If a process is unused for any length the time it will get swapped out > and will use very little, if any, real memory until it's woken up. Limited swap as well. I just rather it be well and gone and only loaded when required. -- Steve C. Lamb | B

Re: ssh via inetd the Debian way

2006-04-25 Thread Steve Lamb
Matthew R. Dempsky wrote: > It generates the host-specific keys at install time, but the v1 ssh > protocol requires a second smaller RSA key generated that's not used for > more than an hour, whereas the v2 protocol uses Diffie-Hellman. Ah, thanks for the explination! -- Steve C.

Re: ssh via inetd the Debian way

2006-04-25 Thread Steve Lamb
Matthew R. Dempsky wrote: > Depending on how RAM limited the system is, you might also take a look > at dropbear; it's a lightweight ssh server available in Debian. Ah, thanks. It's a 96 from unixshell.com. Trying to fit exim, apache(-ssl), SA, clamav all in 96Mb is rough. :( --

Re: ssh via inetd the Debian way

2006-04-25 Thread Matthew R. Dempsky
On Tue, Apr 25, 2006 at 01:59:10PM -0700, Steve Lamb wrote: > Machine with low RAM that I rarely access via ssh. I do need access from > time to time via ssh however. Depending on how RAM limited the system is, you might also take a look at dropbear; it's a lightweight ssh server available i

Re: ssh via inetd the Debian way

2006-04-25 Thread Joey Hess
Martin A. Brooks wrote: > If a process is unused for any length the time it will get swapped out > and will use very little, if any, real memory until it's woken up. Many embedded systems don't have swap. ssh in inetd worked ok last time I used it as long as speed was not important. -- see shy

Re: ssh via inetd the Debian way

2006-04-25 Thread Matthew R. Dempsky
On Tue, Apr 25, 2006 at 02:02:03PM -0700, Steve Lamb wrote: > Uh, does this seem right? I recall sshd generating the key when it is > first installed and don't recall the key changing every reboot which is when > sshd would shutdown/startup like it would from inetd. :/ It generates the host-

Re: ssh via inetd the Debian way

2006-04-25 Thread Monique Y. Mudama
On 2006-04-25, Steve Lamb penned: > > Uh, does this seem right? I recall sshd generating the key when > it is first installed and don't recall the key changing every > reboot which is when sshd would shutdown/startup like it would > from inetd. :/ It seems like at some point in m

Re: ssh via inetd the Debian way

2006-04-25 Thread Martin A. Brooks
Steve Lamb wrote: Machine with low RAM that I rarely access via ssh. I do need access from time to time via ssh however. 500k of a resident ssh is 500k I could free up by moving it to inetd. If a process is unused for any length the time it will get swapped out and will use very little,

Re: ssh via inetd the Debian way

2006-04-25 Thread Steve Lamb
Monique Y. Mudama wrote: > -i Specifies that sshd is being run from inetd(8). sshd is normally > not run from inetd because it needs to generate the server key > before it can respond to the client, and this may take tens of > seconds. Uh, does

Re: ssh via inetd the Debian way

2006-04-25 Thread Steve Lamb
Greg Folkert wrote: > Why would one want sshd to run from inetd? Machine with low RAM that I rarely access via ssh. I do need access from time to time via ssh however. 500k of a resident ssh is 500k I could free up by moving it to inetd. > ssh stream tcp nowait root /usr/sbin/tcpd

Re: ssh via inetd the Debian way

2006-04-25 Thread Greg Folkert
On Tue, 2006-04-25 at 12:45 -0700, Steve Lamb wrote: > Is there some automated method of placing sshd into inetd? I've attempted > to dpkg-reconfigure openssh-server to no avail. Why would one want sshd to run from inetd? sshd should typically be run as a daemon. As far as I know, there isn

Re: ssh via inetd the Debian way

2006-04-25 Thread Monique Y. Mudama
On 2006-04-25, Steve Lamb penned: > > Is there some automated method of placing sshd into inetd? I've atte= > mpted > to dpkg-reconfigure openssh-server to no avail. I don't know about automated, but I found this warning in `man sshd`: -i Specifies that sshd is being run from inetd

Re: ssh via inetd the Debian way

2006-04-25 Thread Martin A. Brooks
Steve Lamb wrote: Is there some automated method of placing sshd into inetd? I've attempted to dpkg-reconfigure openssh-server to no avail. You almost certainly don't want to run sshd from inetd. Bad idea. -- Martin A. Brooks | http://www.antibodymx.net/ | Anti-spam & anti-virus Cons