16 May
2025
16 May
'25
8:15 p.m.
I just spent about 4 hours setting up a pubkey ssh authentication. The problem was that
my sshd was no longer accepting pubkeys generated on my remote system using rsa or dsa. I
finally tried an ecdsa and everything worked.
Running ssh -v, -vv, and -vvv didn't really help because it just fails silently. You
have to figure out what a message offering the private key as the public key is important
and then make a guess that something bad happened there because the authentication process
continues. There are other messages earlier in the chain that make is seem like it
can't find files.
I spent a lot of time confirming file permissions. My books didn't agree with a lot
of what I found on line. Which is right? A lot of thrashing around there.
Granted, I'm retired and doing all this for fun. Well sort of. I do like to use a
lot of this stuff and I find it helpful. But when something I, "know how to do"
and is suppose to make my life easier and simpler, takes a lot of time, I need to
reevaluate my approach.
Your average person just buys a 3rd party tunneling/VPN service and goes from there.
Which is great if you are running Windows.
I think it is time for me to consider my approach and how I am spending my time and money.
This just isn't sustainable.
I'm not saying things were better "back in the day." There was definitely a
time when it was hard to do a lot of things. We had "install fest" for example.
Documentation was nonexistant. Then, it seemed like for awhile, things were pretty good.
Things just worked and there was documentation and you could get information.
I think there was a definite peak in usability. Or is it just me?
Maybe I'll start by figuring out a minimum set of functionality that I need and take a
fresh approach from there.
--
-Gary
It is a simple thing to make things complex,
a complex thing to make things simple.
16 May
16 May
9:19 p.m.
A great third party tunneling / VPN that seems to work well for me on
Ubuntu is SurfShark. I buy one license and it works on all my devices, like
my Android, my laptop running Ubuntu and my wife's iPhone. Great for if you
are on vacation and you want to be protected while using public Wi-Fi. And
you don't feel like burning up all your minutes from your mobile carrier.
There are some other interesting advantages as well like if you need to
convince a service that you are in some completely different zip code then
where you really are..
On May 16, 2025 1:16:59 PM Gary <saclug(a)garymcglinn.com> wrote:
I just spent about 4 hours setting up a pubkey ssh
authentication. The
problem was that my sshd was no longer accepting pubkeys generated on my
remote system using rsa or dsa. I finally tried an ecdsa and everything
worked.
Running ssh -v, -vv, and -vvv didn't really help because it just fails
silently. You have to figure out what a message offering the private key
as the public key is important and then make a guess that something bad
happened there because the authentication process continues. There are
other messages earlier in the chain that make is seem like it can't find files.
I spent a lot of time confirming file permissions. My books didn't agree
with a lot of what I found on line. Which is right? A lot of thrashing
around there.
Granted, I'm retired and doing all this for fun. Well sort of. I do like
to use a lot of this stuff and I find it helpful. But when something I,
"know how to do" and is suppose to make my life easier and simpler, takes a
lot of time, I need to reevaluate my approach.
Your average person just buys a 3rd party tunneling/VPN service and goes
from there. Which is great if you are running Windows.
I think it is time for me to consider my approach and how I am spending my
time and money. This just isn't sustainable.
I'm not saying things were better "back in the day." There was definitely
a time when it was hard to do a lot of things. We had "install fest" for
example. Documentation was nonexistant. Then, it seemed like for awhile,
things were pretty good. Things just worked and there was documentation
and you could get information.
I think there was a definite peak in usability. Or is it just me?
Maybe I'll start by figuring out a minimum set of functionality that I need
and take a fresh approach from there.
--
-Gary
It is a simple thing to make things complex,
a complex thing to make things simple.
_______________________________________________
Lug-nuts mailing list -- lug-nuts(a)bigbrie.com
To unsubscribe send an email to lug-nuts-leave(a)bigbrie.com
17 May
17 May
1:49 a.m.
TNX.
I ran into the zip code thing with PBS. I've always had iffy over-the-air reception.
Well, it mostly went away. So, I tried to use the PBS site and it won't let me watch
local content because I'm in the wrong zip code (maybe this explains the iffy
reception ¯\_(ツ)_/¯ ). It's not clear to me how it "knows" my zip code. I
do live IN the city of Sacramento.
Regardless, I found out that the episodes of, for example, America's Heartland that
KVIE sends over the air are around 2 years old. And they repeat a lot. I can watch the
new stuff for free at the America's Heartland site. With all the changes going on,
its hard to say how long that will last.
Basically, I found out that I don't need KVIE. I can do better on my own.
It's beyond me why they would want to restrict online viewing in this way anyhow.
--
-Gary
It is a simple thing to make things complex,
a complex thing to make things simple.
On Fri, May 16, 2025 at 02:19:30PM -0700, bob r wrote:
A great third party tunneling / VPN that seems to work
well for me on Ubuntu
is SurfShark. I buy one license and it works on all my devices, like my
Android, my laptop running Ubuntu and my wife's iPhone. Great for if you are
on vacation and you want to be protected while using public Wi-Fi. And you
don't feel like burning up all your minutes from your mobile carrier.
There are some other interesting advantages as well like if you need to
convince a service that you are in some completely different zip code then
where you really are..
On May 16, 2025 1:16:59 PM Gary <saclug(a)garymcglinn.com> wrote:
I just spent about 4 hours setting up a pubkey
ssh authentication. The
problem was that my sshd was no longer accepting pubkeys generated on my
remote system using rsa or dsa. I finally tried an ecdsa and everything
worked.
Running ssh -v, -vv, and -vvv didn't really help because it just fails
silently. You have to figure out what a message offering the private
key as the public key is important and then make a guess that something
bad happened there because the authentication process continues. There
are other messages earlier in the chain that make is seem like it can't
find files.
I spent a lot of time confirming file permissions. My books didn't
agree with a lot of what I found on line. Which is right? A lot of
thrashing around there.
Granted, I'm retired and doing all this for fun. Well sort of. I do
like to use a lot of this stuff and I find it helpful. But when
something I, "know how to do" and is suppose to make my life easier and
simpler, takes a lot of time, I need to reevaluate my approach.
Your average person just buys a 3rd party tunneling/VPN service and goes
from there. Which is great if you are running Windows.
I think it is time for me to consider my approach and how I am spending
my time and money. This just isn't sustainable.
I'm not saying things were better "back in the day." There was
definitely a time when it was hard to do a lot of things. We had
"install fest" for example. Documentation was nonexistant. Then, it
seemed like for awhile, things were pretty good. Things just worked and
there was documentation and you could get information.
I think there was a definite peak in usability. Or is it just me?
Maybe I'll start by figuring out a minimum set of functionality that I
need and take a fresh approach from there.
--
-Gary
It is a simple thing to make things complex,
a complex thing to make things simple.
_______________________________________________
Lug-nuts mailing list -- lug-nuts(a)bigbrie.com
To unsubscribe send an email to lug-nuts-leave(a)bigbrie.com
_______________________________________________
Lug-nuts mailing list -- lug-nuts(a)bigbrie.com
To unsubscribe send an email to lug-nuts-leave(a)bigbrie.com
41
days inactive
42
days old
2 comments
2 participants
participants (2)
-
bob r -
Gary