ssh to webmin?

qwertyjjj · 09-30-2011, 01:55 PM

I am trying to setup an ssh connection to webmin but am not getting any success.
I am using this command:
ssh -L 8080:localhost:10000 myloginname@88.xxx.xxx.xxx

I then open up FF on ubuntu and type http://localhost:8080 but it is blank.
When I go to 88.xxx.xxx.xxx:10000 it brings up the webpage so I know the webserver and site is working.

camorri · 09-30-2011, 04:19 PM

You can enable ssl Encryption on webmin, that encrypts the user/password and the entire session.

You can also restrict the IP addresses the target will listen to.

Is there some reason you need to do this through ssh?

teddymills1 · 09-30-2011, 05:57 PM

What is wrong with using HTTPS and port 10000?

If you want SSH, what about fogetting about webmin and use shellinabox?
http://code.google.com/p/shellinabox/

Quote:

Originally Posted by qwertyjjj

I am trying to setup an ssh connection to webmin but am not getting any success.
I am using this command:
ssh -L 8080:localhost:10000 myloginname@88.xxx.xxx.xxx

I then open up FF on ubuntu and type http://localhost:8080 but it is blank.
When I go to 88.xxx.xxx.xxx:10000 it brings up the webpage so I know the webserver and site is working.

qwertyjjj · 10-01-2011, 03:42 AM

I don't think I have https on my webserver.
Plus isn;t it generally a bad idea to have webmin publicly accessible?

Secure Connection Failed

* The page you are trying to view can not be shown because the authenticity of the received data could not be verified.

* Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.

unSpawn · 10-01-2011, 05:56 AM

Quote:

Originally Posted by qwertyjjj

I don't think I have https on my webserver.

Can you check for it? If you can't make it work can you install software like say Stunnel to provide SSL?

Quote:

Originally Posted by qwertyjjj

Plus isn;t it generally a bad idea to have webmin publicly accessible?

Yes, web-based management tools should have restricted access. As you tested 88.xxx.xxx.xxx:10000 brings up its web page best limit access in your web servers configuration file or use a .htaccess before exploring how to get SSL working.

qwertyjjj · 10-01-2011, 06:23 AM

Is there anyway to get free certificates and install those or do I need one signed for my actual server?
I'm trying to keep this free as it's only for webmin.

I followed this but I get errors: http://www.debian-administration.org/articles/349

[root ]# apache2-ssl-certificate
-bash: apache2-ssl-certificate: command not found
[root ]# a2enmod ssl
-bash: a2enmod: command not found
[root ]#

unSpawn · 10-01-2011, 06:48 AM

I'd say install what you don't have.

qwertyjjj · 10-01-2011, 07:19 AM

Quote:

Originally Posted by unSpawn

I'd say install what you don't have.

apache2?
Does that mean I only have apache1?

unSpawn · 10-01-2011, 08:39 AM

No, if you don't have apache2-ssl-certificate (and if no package provides it, that's what I meant) see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=398520, post #25 and #30.