- Blind-sysadmins - lists.hodgsonfamily.org

YAML files for netplan. What's the format?
by Chris Turner 05 Jul '19

05 Jul '19

Hi all. SO just upgraded a couple ubuntu systems to 18.4. Apparently we're now using netplan instead of /etc/network/interfaces. I don't understand the format of the .yaml configuration file that netplan uses though. That is, I don't understand how the indentations work. Anyone using it? Tried with no indentation and it complains about a missing ":" when I seem to have them all. The example seems to be indented but I wasn't sure if this was just for presentation. SO I tried: First line network: At the margin and the subsequent lines spaced in by 2 spaces. It doesn't seem to like this either and I can't get a sense of how the lines are arranged on the ubuntu server user guide. I am using jaws on windows btw. Any tips welcome. One other thing, it seems you can't add post-up run_this_script type lines to the config file either. Which is a pita. I prefer the old way as I had my firewall script run after the interface came up. Cheers. Chris Turner

1 0

Unable to get into a Asus routers web admin - This Connection Is Not Private
by Barry Toner 03 Jul '19

03 Jul '19

Hi all, This is driving me crackers as I’m going round in circles. I have an Asus at home and can no longer access the web admin through any browser, on Windows, Mac, or IOS. FYI I have established this is my Gateway address I’m trying to access. My setup here is a Asus router with it’s SSID’s disabled, and a TP Link Deco plugged into a LAN port, the Deco is set to AP mode as are the other units around the place creating a mesh network. I have connected over the air before, but just for giggles I did plug a Mac directly into the Asus router. I get the connection not trusted page from Safari, which from what I can establish is Safari cautioning about the Certificate being invalid. I click on the prompts in Safari that will let me add the Certificate to the trusted Certificates in my browser. I go round and round giving permission but not getting in. I did get in once on a Windows machine this morning and it took me to what looked like an iCloud page, asking who is coming home with authentication fields. I didn’t enter anything until I did more research. When I try and access the Gateway on IOS I am told that the AI Cloud account is locked. From what I can gather this is something with Asus for sharing but that I haven’t used. To add more mystery…. I have downloaded the Asus Router IOS app to a iPhone that is on the same Network. It sees the router but just says the connection has failed. The internet connection appears to be working well…. Has anyone got suggestions for what I can try next please? The only thing I can think of is hitting the routers reset button… Cheers, Barry.

4 9

roundcube webmail with a screen reader
by David Mehler 23 Jun '19

23 Jun '19

Hello, To users of roundcube webmail who use it with a screen reader, which screen reader do you use and how do you select maybe the term is flag messages, either singly or multiply, then either delete/move/expundge them, or copy them to other folders? Thanks. Dave.

1 0

Issue saving word docs to network drive
by Troy Hergert 06 Jun '19

06 Jun '19

Hi, Has anyone encountered the issue when saving a Word or Excel doc in Office 365 2016 desktop app versions of Word and Excel that you get the error the file cannot be found? This occurs when saving a new doc and attempting to name it for the first time. Strangely it happens with jaws running but not with narrator running. When it fails, it actually creates a doc on the server but it doesn't have the users ownership. It's as though the file was saved without proper permissions. Has anyone seen this? None of my sighted staff experience this, only 3 screen reader users so far. Thanks, Troy ###

1 0

Re: Windows ssh Client
by David Mehler 05 Jun '19

05 Jun '19

Hello, It's been a long day, so apologies if this message has already been sent, or I might have just thought about doing so. To any users of SecureCRT 8.x.x 8.5.4 would be best, but i'll take anyone running any 8.x version, and who is connecting to a Linux/Unix Openssh 7.6 to 7.8 server, again 7.8 prefered, I've got a security question for you. What does your configuration on SecureCRT look like and the server configuration your connecting to? I'm trying to get the below working with SecureCRT. This is a snipet of my sshd configuration: # Modern configuration HostKey /etc/ssh/ssh_host_ed25519_key HostKeyAlgorithms ssh-ed25519 KexAlgorithms curve25519-sha256(a)libssh.org,diffie-hellman-group-exchange-sha256 # also added curve25519-sha256 didn't solve the issue MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com # Ciphers and keying Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr Whenever I have this configuration enabled and atempt to connect with SecureCRT 8.5.4, I get a message that a key exchange algorithm could not be established and it shows the algorithms the server supports, the entries in the KexAlgorithm line above. Now googling led me to this faq which tells me that the above key exchange algorithms should most definitely be working: https://forums.vandyke.com/showthread.php?t=13272 On the Securecrt side: under edit default session, ssh2, key exchange list box unmodified under edit default session, ssh2, advanced, cipher listbox, mac listbox, both unmodified I am perplexed. I'm trying to tighten down my sshd configuration make it use more modern Ciphers, Protocols, Macs, and key exchanges. I'm using this as a guide only: https://stribika.github.io/2015/01/04/secure-secure-shell.html if anyone has this specific configuration going, or has suggestions on securing/hardening/tightening please let me know. Thanks. Dave. On 6/3/19, Andrew Hodgson <andrew(a)hodgson.io> wrote: > Hi, > > They've also included Curl! > > Andrew. > > -----Original Message----- > From: Billy Irwin <billy.irwin(a)outlook.com> > Sent: 03 June 2019 20:42 > To: Blind sysadmins list <blind-sysadmins(a)lists.hodgsonfamily.org> > Subject: [Blind-sysadmins] Re: Windows ssh Client > > Guys, > > I thought I would also share that scp is in the command prompt as well. It > is nice that this is included now. I still like WinSCP too though. > > Best, > > billy > > -----Original Message----- > From: Simon Eigeldinger <simon.eigeldinger(a)vol.at> > Sent: Sunday, June 2, 2019 12:28 PM > To: blind-sysadmins(a)lists.hodgsonfamily.org > Subject: [Blind-sysadmins] Re: Windows ssh Client > > Hi Dave, > > They basically compiled OpenSSH to windows. > In the old days i did that myself. > though they seem to use an older version of LibreSSL. > > Greetings, > Simon > > > Am 02.06.2019 um 16:41 schrieb David Mehler: >> Hello Everyone, >> >> Thanks for your replies. Honestly I've never had a lot of success >> using Putty, getting it to focus or track what i'm doing especially in >> a file I'm trying to edit, this is a welcome change. >> >> Is this client Microsoft's own implementation or did they bundle >> Openssh with windows? And can it handle multiple authentication types, >> public key, password etc >> >> Thanks. >> Dave. >> >> >> On 6/2/19, Andrew Hodgson <andrew(a)hodgson.io> wrote: >>> Hi, >>> >>> I didn't know about this either, but it comes with Windows now either >>> with version 1809 or 1903. Won't be using Putty from now on. >>> >>> Andrew. >>> >>> -----Original Message----- >>> From: David Mehler <dave.mehler(a)gmail.com> >>> Sent: 01 June 2019 15:16 >>> To: Blind sysadmins list <blind-sysadmins(a)lists.hodgsonfamily.org> >>> Subject: [Blind-sysadmins] Re: Windows ssh Client >>> >>> Hi, >>> >>> What built in ssh client? >>> >>> Thanks. >>> Dave. >>> >>> >>> On 6/1/19, Bill Dengler <codeofdusk(a)gmail.com> wrote: >>>> What about the built-in ssh client? >>>> >>>> Bill >>>> >>>> Sent from my iPhone >>>> >>>>> On Jun 1, 2019, at 09:04, David Mehler <dave.mehler(a)gmail.com> wrote: >>>>> >>>>> Hello, >>>>> >>>>> I'm using SecureCRT Version 6.2.3, I know that's quite old, but >>>>> until I went and atempted to harden my vps server's Openssh 7.8 >>>>> setup it worked fine. This version does not support the more >>>>> modern/advanced cryptographic hashes, macs, and kex algorithms. This I >>>>> need to change. >>>>> >>>>> I've tried SecureCRT 8.x but I've found it not accessible and also >>>>> does not support the secure setup I'm wanting. >>>>> >>>>> Is Tteraterm accessible/does it support secure ciphers? >>>>> >>>>> Thanks. >>>>> Dave. >>>>> _______________________________________________ >>>>> Blind-sysadmins mailing list -- >>>>> blind-sysadmins(a)lists.hodgsonfamily.org >>>>> To unsubscribe send an email to >>>>> blind-sysadmins-leave(a)lists.hodgsonfamily.org >>>> _______________________________________________ >>>> Blind-sysadmins mailing list -- >>>> blind-sysadmins(a)lists.hodgsonfamily.org >>>> To unsubscribe send an email to >>>> blind-sysadmins-leave(a)lists.hodgsonfamily.org >>>> >>> _______________________________________________ >>> Blind-sysadmins mailing list -- >>> blind-sysadmins(a)lists.hodgsonfamily.org >>> To unsubscribe send an email to >>> blind-sysadmins-leave(a)lists.hodgsonfamily.org >>> _______________________________________________ >>> Blind-sysadmins mailing list -- >>> blind-sysadmins(a)lists.hodgsonfamily.org >>> To unsubscribe send an email to >>> blind-sysadmins-leave(a)lists.hodgsonfamily.org >>> >> _______________________________________________ >> Blind-sysadmins mailing list -- >> blind-sysadmins(a)lists.hodgsonfamily.org >> To unsubscribe send an email to >> blind-sysadmins-leave(a)lists.hodgsonfamily.org >> > > --- > Diese E-Mail wurde von Avast Antivirus-Software auf Viren geprüft. > https://www.avast.com/antivirus > _______________________________________________ > Blind-sysadmins mailing list -- blind-sysadmins(a)lists.hodgsonfamily.org > To unsubscribe send an email to > blind-sysadmins-leave(a)lists.hodgsonfamily.org > _______________________________________________ > Blind-sysadmins mailing list -- blind-sysadmins(a)lists.hodgsonfamily.org > To unsubscribe send an email to > blind-sysadmins-leave(a)lists.hodgsonfamily.org > _______________________________________________ > Blind-sysadmins mailing list -- blind-sysadmins(a)lists.hodgsonfamily.org > To unsubscribe send an email to > blind-sysadmins-leave(a)lists.hodgsonfamily.org >

2 2

Spectrum Wave2 router and Sip?
by David Mehler 04 Jun '19

04 Jun '19

Hello, I apologize for the multiple posting, but I'm hoping someone out there can help me. Does anyone have Spectrum as their internet provider? If so, do you have their newest Wave2 router? It's the RAC2V1A Arris (TR4400-AC). If all this is yes or you can help me anyway, I am trying to get out to my server and use asterisk. My internet server is cloud based and has a public IP address. My IP here is also public and maybe static I don't know it hasn't changed in a while, but the router see above gives out 192.x.x.x addresses as it should. Here's the question, the point to all this, I am trying to get sip going so I can do more than connect and disconnect and can actually here some audio. There's some passthrough options under advanced, > wan, > nat passthrough, I've got the relevant ones on they were on by default I dchanged them to off didn't make a difference so I returned them to the default values. My current theory and I'm not sure why this is needed with the passthrough is I have to forward a port range from the router to my phone, which has a dhcp-statically assigned ip address. How do you navigate that form? It is a nightmare and I don't know the values to put in it. Any help appreciated, if you think necessary please email privately. Thanks. Dave.

2 2

Re: Windows ssh Client
by Andrew Hodgson 03 Jun '19

03 Jun '19

Hi, They've also included Curl! Andrew. -----Original Message----- From: Billy Irwin <billy.irwin(a)outlook.com> Sent: 03 June 2019 20:42 To: Blind sysadmins list <blind-sysadmins(a)lists.hodgsonfamily.org> Subject: [Blind-sysadmins] Re: Windows ssh Client Guys, I thought I would also share that scp is in the command prompt as well. It is nice that this is included now. I still like WinSCP too though. Best, billy -----Original Message----- From: Simon Eigeldinger <simon.eigeldinger(a)vol.at> Sent: Sunday, June 2, 2019 12:28 PM To: blind-sysadmins(a)lists.hodgsonfamily.org Subject: [Blind-sysadmins] Re: Windows ssh Client Hi Dave, They basically compiled OpenSSH to windows. In the old days i did that myself. though they seem to use an older version of LibreSSL. Greetings, Simon Am 02.06.2019 um 16:41 schrieb David Mehler: > Hello Everyone, > > Thanks for your replies. Honestly I've never had a lot of success > using Putty, getting it to focus or track what i'm doing especially in > a file I'm trying to edit, this is a welcome change. > > Is this client Microsoft's own implementation or did they bundle > Openssh with windows? And can it handle multiple authentication types, > public key, password etc > > Thanks. > Dave. > > > On 6/2/19, Andrew Hodgson <andrew(a)hodgson.io> wrote: >> Hi, >> >> I didn't know about this either, but it comes with Windows now either >> with version 1809 or 1903. Won't be using Putty from now on. >> >> Andrew. >> >> -----Original Message----- >> From: David Mehler <dave.mehler(a)gmail.com> >> Sent: 01 June 2019 15:16 >> To: Blind sysadmins list <blind-sysadmins(a)lists.hodgsonfamily.org> >> Subject: [Blind-sysadmins] Re: Windows ssh Client >> >> Hi, >> >> What built in ssh client? >> >> Thanks. >> Dave. >> >> >> On 6/1/19, Bill Dengler <codeofdusk(a)gmail.com> wrote: >>> What about the built-in ssh client? >>> >>> Bill >>> >>> Sent from my iPhone >>> >>>> On Jun 1, 2019, at 09:04, David Mehler <dave.mehler(a)gmail.com> wrote: >>>> >>>> Hello, >>>> >>>> I'm using SecureCRT Version 6.2.3, I know that's quite old, but >>>> until I went and atempted to harden my vps server's Openssh 7.8 >>>> setup it worked fine. This version does not support the more >>>> modern/advanced cryptographic hashes, macs, and kex algorithms. This I need to change. >>>> >>>> I've tried SecureCRT 8.x but I've found it not accessible and also >>>> does not support the secure setup I'm wanting. >>>> >>>> Is Tteraterm accessible/does it support secure ciphers? >>>> >>>> Thanks. >>>> Dave. >>>> _______________________________________________ >>>> Blind-sysadmins mailing list -- >>>> blind-sysadmins(a)lists.hodgsonfamily.org >>>> To unsubscribe send an email to >>>> blind-sysadmins-leave(a)lists.hodgsonfamily.org >>> _______________________________________________ >>> Blind-sysadmins mailing list -- >>> blind-sysadmins(a)lists.hodgsonfamily.org >>> To unsubscribe send an email to >>> blind-sysadmins-leave(a)lists.hodgsonfamily.org >>> >> _______________________________________________ >> Blind-sysadmins mailing list -- >> blind-sysadmins(a)lists.hodgsonfamily.org >> To unsubscribe send an email to >> blind-sysadmins-leave(a)lists.hodgsonfamily.org >> _______________________________________________ >> Blind-sysadmins mailing list -- >> blind-sysadmins(a)lists.hodgsonfamily.org >> To unsubscribe send an email to >> blind-sysadmins-leave(a)lists.hodgsonfamily.org >> > _______________________________________________ > Blind-sysadmins mailing list -- > blind-sysadmins(a)lists.hodgsonfamily.org > To unsubscribe send an email to > blind-sysadmins-leave(a)lists.hodgsonfamily.org > --- Diese E-Mail wurde von Avast Antivirus-Software auf Viren geprüft. https://www.avast.com/antivirus _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins(a)lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave(a)lists.hodgsonfamily.org _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins(a)lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave(a)lists.hodgsonfamily.org

1 0

Re: Windows ssh Client
by David Mehler 03 Jun '19

03 Jun '19

Hello Everyone, Thanks for your replies. Honestly I've never had a lot of success using Putty, getting it to focus or track what i'm doing especially in a file I'm trying to edit, this is a welcome change. Is this client Microsoft's own implementation or did they bundle Openssh with windows? And can it handle multiple authentication types, public key, password etc Thanks. Dave. On 6/2/19, Andrew Hodgson <andrew(a)hodgson.io> wrote: > Hi, > > I didn't know about this either, but it comes with Windows now either with > version 1809 or 1903. Won't be using Putty from now on. > > Andrew. > > -----Original Message----- > From: David Mehler <dave.mehler(a)gmail.com> > Sent: 01 June 2019 15:16 > To: Blind sysadmins list <blind-sysadmins(a)lists.hodgsonfamily.org> > Subject: [Blind-sysadmins] Re: Windows ssh Client > > Hi, > > What built in ssh client? > > Thanks. > Dave. > > > On 6/1/19, Bill Dengler <codeofdusk(a)gmail.com> wrote: >> What about the built-in ssh client? >> >> Bill >> >> Sent from my iPhone >> >>> On Jun 1, 2019, at 09:04, David Mehler <dave.mehler(a)gmail.com> wrote: >>> >>> Hello, >>> >>> I'm using SecureCRT Version 6.2.3, I know that's quite old, but until >>> I went and atempted to harden my vps server's Openssh 7.8 setup it >>> worked fine. This version does not support the more modern/advanced >>> cryptographic hashes, macs, and kex algorithms. This I need to change. >>> >>> I've tried SecureCRT 8.x but I've found it not accessible and also >>> does not support the secure setup I'm wanting. >>> >>> Is Tteraterm accessible/does it support secure ciphers? >>> >>> Thanks. >>> Dave. >>> _______________________________________________ >>> Blind-sysadmins mailing list -- >>> blind-sysadmins(a)lists.hodgsonfamily.org >>> To unsubscribe send an email to >>> blind-sysadmins-leave(a)lists.hodgsonfamily.org >> _______________________________________________ >> Blind-sysadmins mailing list -- >> blind-sysadmins(a)lists.hodgsonfamily.org >> To unsubscribe send an email to >> blind-sysadmins-leave(a)lists.hodgsonfamily.org >> > _______________________________________________ > Blind-sysadmins mailing list -- blind-sysadmins(a)lists.hodgsonfamily.org > To unsubscribe send an email to > blind-sysadmins-leave(a)lists.hodgsonfamily.org > _______________________________________________ > Blind-sysadmins mailing list -- blind-sysadmins(a)lists.hodgsonfamily.org > To unsubscribe send an email to > blind-sysadmins-leave(a)lists.hodgsonfamily.org >

3 2

Re: Windows ssh Client
by Simon Eigeldinger 02 Jun '19

02 Jun '19

Hi, They are using OpenSSH since i guess 1803 or so. $ ssh -V OpenSSH_for_Windows_7.7p1, LibreSSL 2.6.5 Greetings, Simon Am 02.06.2019 um 15:10 schrieb Andrew Hodgson: > Hi, > > I didn't know about this either, but it comes with Windows now either with version 1809 or 1903. Won't be using Putty from now on. > > Andrew. > > -----Original Message----- > From: David Mehler <dave.mehler(a)gmail.com> > Sent: 01 June 2019 15:16 > To: Blind sysadmins list <blind-sysadmins(a)lists.hodgsonfamily.org> > Subject: [Blind-sysadmins] Re: Windows ssh Client > > Hi, > > What built in ssh client? > > Thanks. > Dave. > > > On 6/1/19, Bill Dengler <codeofdusk(a)gmail.com> wrote: >> What about the built-in ssh client? >> >> Bill >> >> Sent from my iPhone >> >>> On Jun 1, 2019, at 09:04, David Mehler <dave.mehler(a)gmail.com> wrote: >>> >>> Hello, >>> >>> I'm using SecureCRT Version 6.2.3, I know that's quite old, but until >>> I went and atempted to harden my vps server's Openssh 7.8 setup it >>> worked fine. This version does not support the more modern/advanced >>> cryptographic hashes, macs, and kex algorithms. This I need to change. >>> >>> I've tried SecureCRT 8.x but I've found it not accessible and also >>> does not support the secure setup I'm wanting. >>> >>> Is Tteraterm accessible/does it support secure ciphers? >>> >>> Thanks. >>> Dave. >>> _______________________________________________ >>> Blind-sysadmins mailing list -- >>> blind-sysadmins(a)lists.hodgsonfamily.org >>> To unsubscribe send an email to >>> blind-sysadmins-leave(a)lists.hodgsonfamily.org >> _______________________________________________ >> Blind-sysadmins mailing list -- >> blind-sysadmins(a)lists.hodgsonfamily.org >> To unsubscribe send an email to >> blind-sysadmins-leave(a)lists.hodgsonfamily.org >> > _______________________________________________ > Blind-sysadmins mailing list -- blind-sysadmins(a)lists.hodgsonfamily.org > To unsubscribe send an email to blind-sysadmins-leave(a)lists.hodgsonfamily.org > _______________________________________________ > Blind-sysadmins mailing list -- blind-sysadmins(a)lists.hodgsonfamily.org > To unsubscribe send an email to blind-sysadmins-leave(a)lists.hodgsonfamily.org > --- Diese E-Mail wurde von Avast Antivirus-Software auf Viren geprüft. https://www.avast.com/antivirus

1 0

Windows ssh Client
by David Mehler 02 Jun '19

02 Jun '19

Hello, I'm using SecureCRT Version 6.2.3, I know that's quite old, but until I went and atempted to harden my vps server's Openssh 7.8 setup it worked fine. This version does not support the more modern/advanced cryptographic hashes, macs, and kex algorithms. This I need to change. I've tried SecureCRT 8.x but I've found it not accessible and also does not support the secure setup I'm wanting. Is Tteraterm accessible/does it support secure ciphers? Thanks. Dave.

5 6