|
|
Remote login from Finder
Do you really need all the Terminal command line stuff to do this securely? If I'm working at home and want to connect to my work machine, I just choose Connect to Server in the Finder's Go menu. When I get the dialog, I enter my work machine name (or IP address), username, password, and select the volume that I want to access. That volume then mounts on my desktop at home, and I can simply drag-and-drop files either way. Obviously, the machine at work is on (although no user is logged in), and Remote Login is checked in the Sharing preferences. Both machines are running 10.2, and I have a cable modem at home. The only reason I could see for doing this from the command line would be if using the Finder does not create an ssh connection? Anybody know?
Remote login from Finder
And then again, who cares if the Finder connection is secure for an PowerPoint file? There are good times to be paranoid, and times where it's just silly.
Remote login from Finder
Well, i certainly care if i send my ip address, username and password in the clear on an open network. who could ask for a better invitation to screw with you? seriously, it's not about what you're using it for, but how you use it. i suppose if there's nothing on your machine that you care about, fine, but the "nobody's interested in my data" argument will get you every time. as a personal example, i connected a linux server appliance to the world, with nothing on it save the os at that point, and it was broken into the next day.
Remote login from Finder
as a personal example, i connected a linux server appliance to the world, with nothing on it save the os at that point, and it was broken into the next day.
Out of curiosity, how were you able to tell that this had happened?
Remote login from Finder
The concern isn't the files getting stolen, its the username and password. If I send my password and username around in clear text, someone needs only to sniff those packets, and break into the machine. They don't care about the file I transferred, they care about the password. Once they have a login name and password, they can do quite a bit of nasty stuff. And don't think that just because no one knows your IP address that you are safe, port scanners sit around scanning entire subnets, just hunting for computers to potentially exploit.
Remote login from Finder
interesting. i'd check with the sysadmin at work and see what they're using to let you do AFP (appleshare) over an open connection (the Internet). perhaps you've connected to work with a vpn or some such? or some other interesting scheme is already in place that's transparent to you. otherwise, i assume what you're doing is totally insecure, and your password is sent in the clear (again, ask the sysadmin and chide them if this is the case!). i use Vapor a GUI to create SSH tunnels for AFP. the idea is to wrap AFP in SSH, so while everything looks like you're mounting the disk like always, the traffic is getting encryped. works great and no command-line futzing (though often scp is much much faster...) hope this helps...
Remote login from Finder
AFP over SSH is now included in Jaguar. It is available from the "Options " box when logging in. Vapor was created to address the need in 10.1.x; with 10.2, Vapor is (mostly?) superfluous and development has (mostly) stopped. Mactroll has open sourced the code to Vapor, in fact. Look for other exciting projects from www.afp548.com!
Remote login from Finder
But how do we know the connection is made using ssh. When I do a netstat, all I get is
[slarty:~] me% netstat Active Internet connections Proto Recv-Q Send-Q Local Address Foreign Address (state) tcp4 0 0 slarty.49493 sharonda.afpovertcp ESTABLISHED tcp4 0 0 localhost.49488 localhost.ipp CLOSE_WAITNo mention of ssh. any ideas?
Remote login from Finder
Hmm. Strangely enough, I believe there are two problems:
Remote SSH filesharing from Finder is EASY
Yes, it is quite easy to use SSH-encrypted sharing. Once you've set up your SSH permissions, you merely need to connect to the server, at the password window just hit the Options button, and select the option to allow SSH encrypted connections. You will then connect to your remote disk volume just like any other file share, except it's encrypted. Note that the dialog box will show a URI like
Remote SSH filesharing from Finder is EASY
assuming the remote machine is running os x server, right? it seems a default config option on server, but not the client version of os x, where you have to do the tunnelling thing somewhat manually.
Remote SSH filesharing from Finder is EASY
No, MacOS X Server is not required. I can connect via Finder SSH filesharing easily between two plain MacOS X 10.2 machines. Try it!
Remote SSH filesharing from Finder is EASY
But All this requires extra ports to be open on the firewall!..
Remote SSH filesharing from Finder is EASY
Yeah, that's sort of my thought. I really like that the only open port is 22. Thanks for the correction that it's supported though!
ssh from remote computer
i am trying to use SSH to login to my work comp - when i try any of the computers within my lab- ssh works- however, if i go to another building- or go home and try ssh, it can never login. after i type in the ssh command the terminal window just stays as it is and ends with "No Route to Host" |
SearchFrom our Sponsor...Latest Mountain Lion HintsWhat's New:HintsNo new hintsComments last 2 daysNo new commentsLinks last 2 weeksNo recent new linksWhat's New in the Forums?
Hints by TopicNews from Macworld
From Our Sponsors |
|
Copyright © 2014 IDG Consumer & SMB (Privacy Policy) Contact Us All trademarks and copyrights on this page are owned by their respective owners. |
Visit other IDG sites: |
|
|
|
Created this page in 0.05 seconds |
|