Personal computing discussed

Moderators: renee, SecretSquirrel, notfred

 
jith912
Gerbil In Training
Topic Author
Posts: 1
Joined: Sat May 05, 2012 4:33 am

how to make the openssh processes viewable on windows?

Sat May 05, 2012 4:39 am

Hi ,

I have installed openSSH server on a win 32 bit server machine.

I am starting a firefox process on the server machine remotely from my PC.The firefox has started.

When I login to the server machine remotely ,I see the firefox process running on the task manager.However I donot see the firefox window.

I want the firefox window started using openssh to be visible on windows.

How can I do it? Pls help
 
The Wanderer
Gerbil
Posts: 92
Joined: Tue Apr 22, 2003 12:20 pm
Location: Southern Maryland
Contact:

Re: how to make the openssh processes viewable on windows?

Sat May 05, 2012 10:20 am

A bit of Googling indicates that you may be able to launch the remote process in the appropriate desktop session (rather than in its own, non-visible session) by the use of psexec on the remote machine:

https://www.itefix.no/i2/node/10513

The discussion is somewhat out of order, but the suggestion does look viable. I think you may have to do the remote-desktop login before launching the process, though.

This does look to be an unusually difficult thing to do; I'm not sure Windows is really designed to allow it. (It may be designed to specifically make it difficult, to avoid letting one logged-in user interfere with another.)
Core i7 990X 3.47GHz | 24GB RAM | 512GB SSD (256GB RAID-1) + 8TB (6TB RAID-5) | Radeon HD 6870 | Dell 3008WFP | Obsidian 800D
 
Flatland_Spider
Graphmaster Gerbil
Posts: 1324
Joined: Mon Sep 13, 2004 8:33 pm

Re: how to make the openssh processes viewable on windows?

Sat May 05, 2012 5:13 pm

Remote Desktop is the better tool to use in this case.

Why do you want to access the Windows server via ssh anyway?

@The Wanderer
Windows was never designed to allow this. This works in *ix environments because X Windows was designed to be accessed over a network by a terminal. Remote access in Windows is why RDP exists.
 
just brew it!
Administrator
Posts: 54500
Joined: Tue Aug 20, 2002 10:51 pm
Location: Somewhere, having a beer

Re: how to make the openssh processes viewable on windows?

Sun May 06, 2012 12:50 am

Yup, doing what you're trying to do has been made difficult on purpose. The currently logged in session effectively "owns" the desktop; allowing background processes from other users to arbitrarily open up new windows would be a rather large security hole!
Nostalgia isn't what it used to be.
 
Flatland_Spider
Graphmaster Gerbil
Posts: 1324
Joined: Mon Sep 13, 2004 8:33 pm

Re: how to make the openssh processes viewable on windows?

Sun May 06, 2012 2:02 pm

I may have totally misread that. I was thinking he was trying to run GUI processes on the remote server and have the GUI displayed on the local machine via X forwarding in OpenSSH.

There is a command built in to Windows that used to be able to launch GUI applications which would show up on the desktop of the currently logged in user in Win2000/XP days. I'm not sure if that still works for current Windows systems.

If the OP returns and posts a better explanation of the problem, I might share.

[Edited for clarity]
 
notfred
Maximum Gerbil
Posts: 4610
Joined: Tue Aug 10, 2004 10:10 am
Location: Ottawa, Canada

Re: how to make the openssh processes viewable on windows?

Sun May 06, 2012 3:37 pm

Yup, RDP or VNC and you can potentially throw the VNC through an SSH forwarded port to get it through firewalls and add security.
 
just brew it!
Administrator
Posts: 54500
Joined: Tue Aug 20, 2002 10:51 pm
Location: Somewhere, having a beer

Re: how to make the openssh processes viewable on windows?

Sun May 06, 2012 3:50 pm

notfred wrote:
Yup, RDP or VNC and you can potentially throw the VNC through an SSH forwarded port to get it through firewalls and add security.

TBH I would not expose *either* protocol directly to the Internet, given MS's security track record and the inherently rather weak security of the base VNC protocol. I prefer to run both of them through an encrypted tunnel (typically a SSH forwarded port, as you suggest).
Nostalgia isn't what it used to be.
 
bthylafh
Maximum Gerbil
Posts: 4320
Joined: Mon Dec 29, 2003 11:55 pm
Location: Southwest Missouri, USA

Re: how to make the openssh processes viewable on windows?

Sun May 06, 2012 5:13 pm

I put my SSH and RDP daemons on random high TCP ports instead of the default. If nothing else that will stop the bots.

Haven't tried running RDP though an SSH tunnel.
Hakkaa päälle!
i7-8700K|Asus Z-370 Pro|32GB DDR4|Asus Radeon RX-580|Samsung 960 EVO 1TB|1988 Model M||Logitech MX 518 & F310|Samsung C24FG70|Dell 2209WA|ATH-M50x
 
Flying Fox
Gerbil God
Posts: 25690
Joined: Mon May 24, 2004 2:19 am
Contact:

Re: how to make the openssh processes viewable on windows?

Sun May 06, 2012 6:15 pm

just brew it! wrote:
notfred wrote:
Yup, RDP or VNC and you can potentially throw the VNC through an SSH forwarded port to get it through firewalls and add security.

TBH I would not expose *either* protocol directly to the Internet, given MS's security track record and the inherently rather weak security of the base VNC protocol. I prefer to run both of them through an encrypted tunnel (typically a SSH forwarded port, as you suggest).

RDP is pretty decent (they started out with 40-bit encryption right off the bat and upgraded to 128-bit fairly early, around early 2000s once the export control was relaxed), except for the latest security bulletin that they patched. I also redirect the RDP port externally to a non-default one, since I do get a few port scan attempts at 3389.
The Model M is not for the faint of heart. You either like them or hate them.

Gerbils unite! Fold for UnitedGerbilNation, team 2630.
 
just brew it!
Administrator
Posts: 54500
Joined: Tue Aug 20, 2002 10:51 pm
Location: Somewhere, having a beer

Re: how to make the openssh processes viewable on windows?

Sun May 06, 2012 8:11 pm

bthylafh wrote:
I put my SSH and RDP daemons on random high TCP ports instead of the default. If nothing else that will stop the bots.

Haven't tried running RDP though an SSH tunnel.

I've been doing it that way for years. Just forward any local port xxxxx thru the firewall at the other end to hostname:3389, and point the RDP viewer at localhost:xxxxx.

Flying Fox wrote:
RDP is pretty decent (they started out with 40-bit encryption right off the bat and upgraded to 128-bit fairly early, around early 2000s once the export control was relaxed), except for the latest security bulletin that they patched.

That's good to know. I still feel better exposing as few services to the 'net as possible though; port 80 (HTTP), 443 (if you're running HTTPS), and 22 (SSH) should be all most servers ever need on their public-facing IP. In fact, I would argue that your SSH server should be running on a non-standard port as well (as bthylafh suggests).
Nostalgia isn't what it used to be.
 
The Wanderer
Gerbil
Posts: 92
Joined: Tue Apr 22, 2003 12:20 pm
Location: Southern Maryland
Contact:

Re: how to make the openssh processes viewable on windows?

Mon May 07, 2012 4:22 pm

just brew it! wrote:
Yup, doing what you're trying to do has been made difficult on purpose. The currently logged in session effectively "owns" the desktop; allowing background processes from other users to arbitrarily open up new windows would be a rather large security hole!

Not if it was restricted to the administrator, surely? (Assuming proper least-privilege account configuration, which would be a bad assumption on desktop Windows but hopefully not on a Windows server).

For that matter, if the process had to be launched with the credentials of the user whose session was to be used, that seems like it ought be sufficient authentication to make the whole thing reasonably safe.
Core i7 990X 3.47GHz | 24GB RAM | 512GB SSD (256GB RAID-1) + 8TB (6TB RAID-5) | Radeon HD 6870 | Dell 3008WFP | Obsidian 800D

Who is online

Users browsing this forum: No registered users and 1 guest
GZIP: On