Re: executing commands from telnet from D3



"Would the ssh command on the remote linux box allow me to get to the
D3
telnet server defined on a particular range of ports on the aix box? Or
am I missing your point?"
The short answer is yes.

In order to do this, your user on the linux box would have to first log
in with ssh before issuing the kconsole command line. For example,
lets assume you've set up a nailed telent on you AIX box so it listens
to port 4444/tcp. The ssh command line run by the user on the remote
linux box would look something like this:
ssh -L 2000:127.0.0.1:4444 srvuser@xxxxxxxxxxxxxxx

Once the user connects to the AIX box using this kind of ssh login
trick, they can then telnet through the loopback interface on port
2000. In other words, telnet localhost 2000, executed on the remote
linux box's command line will connect them with the nailed telnet port
on the AIX box that is set up on port 4444.

On that same command line, you could also have the '-R
15001:127.0.0.1:22' arguments to set up the tunnel that will be needed
to copy back to the remote linux client. So you'd end up with
something like:

ssh -L 2000:127.0.0.1:4444 -R 15001:127.0.0.1:22
srvuser@xxxxxxxxxxxxxxx

Going down this road requires the user make 2 connections. One for the
tunneling, and one for the actual terminal session. As ugly as that
seems, it can be automated to the point where the user wont even notice
with pub/priv key authentication. The ugly command lines can be tossed
into a shell script of some sort that will make it easier on the end
user. But setting up the keys is on you and is a little tricky at
first until you get used to it. After that its pretty much busy work.

.



Relevant Pages

  • Re: using a remote IMAP server and smarthost
    ... I have set up the alias for ssh, and created a key for authentication. ... You can forward a local port via ssh like this: ... This command establishes an ssh connection to myvm. ...
    (Debian-User)
  • Re: root trying to ssh but being denied
    ... > users to ssh to this machine. ... they were both from machines running Linux: ... PORT STATE SERVICE ... TCP Sequence Prediction: Class=random positive increments ...
    (comp.os.linux.security)
  • Re: [SLE] Remote desktop?!?
    ... You'll have a command line for the other machine in front of you. ... display will be tunnelled via the SSH connection to the client. ... This is, of course, the geek solution to remote execution of programs (It's ... a Linux list, you gotta expect that...). ...
    (SuSE)
  • Re: OT: Hard disk mirror with Paragon on USB stick?
    ... at least two pages of intricate command line stuff. ... The password is only used when you want to backup to a remote machine ... via the network, using the ssh protocol. ... (e.g. with linux, ...
    (sci.electronics.design)
  • Re: SSH options re: NAT
    ... No, SSH is two-fold, a call to it on the client side results in a call ... port, meaning that any connections that come into that port are answered ... programming practice for daemons) Once the connection is established, ... don't want to execute a command on the remote side and you use -N. ...
    (comp.security.ssh)