[gentoo-user] Re: can not ssh over vpn

[Ian Zimmerman]

On 2017-02-07 17:30, thelma@×××××××××××.com wrote:

> I've setup openVPN and it is working.  But when I try to login to remote
> PC.
>
> ssh fd@192.168.140.7
> Password:
> Password:
> Password:
> fd@192.168.140.7's password:
> Permission denied, please try again.
> fd@192.168.140.7's password:
> Received disconnect from 192.168.140.7: 2: Too many authentication failures
> Disconnected from 192.168.140.7
>
> I've setup rsa keys and copy my public key to remote PC.  When I connect
> the remote PC on my local network I can ssh to it without any password OK.
> But when I setup the connection over OpenVPN the remote PC is asking for
> password even though the remote PC sshd.conf has:
>
> PasswordAuthentication no
>
> I've tried to look at log on remote PC
> cat /var/log/auth.log |grep -i ssh
>
> but the are no errors.
> It keep saying:
> sshd: Accepted publickey for fd from 10.0.0.100 (this is my box)

Wait, this is odd.  The server is 192.168.140.7 but the connecting
client is 10.0.0.100?  Those are not on the same network.  Do you have
some iptables magic in the middle that translates the addresses?

I do this all the time.  I use the OpenVPN server as the remote IP.
In my case:

IP of the tun0 interface on my PC: 10.8.78.4
IP of the tun0 interface on the server: 10.8.78.1

On my PC I do: ssh 10.8.78.1

Note also that if you want to connect to another OpenVPN peer that is
_not_ the server, you need extra configuration (look for something like
client-to-client in the OpenVPN config).

I would also test the VPN with something simpler than ssh first, like
ping.

-- 
Please *no* private Cc: on mailing lists and newsgroups
Personal signed mail: please _encrypt_ and sign
Don't clear-text sign: http://cr.yp.to/smtp/8bitmime.html