Webbased SSH

B

bluenix

Verified User
Joined
Mar 22, 2006
Messages
23
Does anybody know about a good, secure webbased SSH client script? That would make some things a lot easier while not working on your own computers.
 
You'd be surprised what you can find when you google web-based ssh program.

Jeff
 
jlasman said:
You'd be surprised what you can find when you google web-based ssh program.

Jeff
Click to expand...

Of course that's true, you'll find a lot of webbased ssh-scripts. That's exactly the reason I'm asking you guys if you have a good experience with one of them.

Wouldn't it be an idea to include a webbased ssh client into the admin interface of DA?
 
My guess is that most of us don't allow our users to have ssh access, and therefore would prefer to not have the client.

Your mileage may certainly vary.

Jeff
 
I understand. Personally, I am one of the people that do NOT want to give users access to the shell.
What I'm trying to say, is that it maybe could be implemented in the Admin Backend. Just for administration purposes.
 
It sounds nice, however, most of the time a webbased ssh client is just a Java applet with the capability to create an SSH connection.

What I would love to see is a way to send direct comands (without ssh), to the server. So if SSH fails and can't be restarted, there still is some (hard) way to get a console and fix the problem.

But this isn't really realistic, I guess. DA doesn't have the capability to get root privileges...

So I guess, that creating some plugin that displays a java applet on admin level would be more realistic.
 
Icheb said:
What I would love to see is a way to send direct comands (without ssh), to the server. So if SSH fails and can't be restarted, there still is some (hard) way to get a console and fix the problem.
Click to expand...

Again, webmin is your friend - in addition to the java-based ssh client, there is the remote command module, that gives you the ability to run commands one at a time.

These kind of things are best suited to webmin and not DA, as they are ultimately system-administration facilities, whereas DA is a hosting control panel.
 
yes. just be careful not to edit the server's config files using it, and expect DA to recognise that you've edited them.

(same warning applies to SSH and vi too though)
 
Icheb said:
But this isn't really realistic, I guess. DA doesn't have the capability to get root privileges...
Click to expand...
Sure it does; it does lots of things it couldn't do if it didn't.

However this doesn't mean it's safe to give anyone with a DA admin login the rights to do anything that root can do.

As do others, I recommend Webmin as an option for those who need root command access if/when ssh fails.

You can also create your own backdoor... for example you can set your server so a certain email, sent to a certain address (or even two such emails sent within a certain time frame, and possibly even from specific IP#s) would start a fresh copy of ssh, on a different port.

Good admins can come up with lots of ideas :) .

Jeff
 
jlasman said:
Sure it does; it does lots of things it couldn't do if it didn't.
Click to expand...
The directadmin process, here, doesn't run under root ;).
It's the dataskq process that has root 'powers', however that only runs once per minute, so abusing that to get a shell is kinda out of the question.

...snip...

As do others, I recommend Webmin as an option for those who need root command access if/when ssh fails.
Click to expand...
Webmin... It does work, however I don't like the memory and proc abuse it does. Perhaps it's possible to create something from the webmin module without having to use webmin ;).

You can also create your own backdoor... for example you can set your server so a certain email, sent to a certain address (or even two such emails sent within a certain time frame, and possibly even from specific IP#s) would start a fresh copy of ssh, on a different port.
Click to expand...
Hmm, how about knockd ?
If I remember correctly you can't only open ports, but also execute custom commands. Think that's a bit less work, however sending a mail to start a shell is also a nice idea ;).

Good admins can come up with lots of ideas :) .

Jeff
Click to expand...

True :)
 
Icheb said:
The directadmin process, here, doesn't run under root ;).
It's the dataskq process that has root 'powers', however that only runs once per minute, so abusing that to get a shell is kinda out of the question.
Click to expand...
You're right, if a bit pedantic; DA is not only it's main process :) .

My problem is that when I'm busy I don't go back to read the entire thread, but merely answer the immediate question asked. That's not always helpful :( .

Jeff
 
You must log in or register to reply here.
Back
Top