Windows SSH Server

285 views
Skip to first unread message

Dick Thiot

unread,
Nov 26, 2012, 11:54:46 AM11/26/12
to jb...@googlegroups.com
We currently have a need to implement an SSH server for Windows for a jBASE server.  Can others on the list let us know how you have approached SSH servers on Windows for jBASE?

Thanks,
Dick

Bob Rasmussen

unread,
Nov 26, 2012, 3:01:44 PM11/26/12
to jb...@googlegroups.com
I would be interested in this subject as well. Please respond on-list.

Dick, what factors are driving the push to SSH?
> --
> --
> IMPORTANT: T24/Globus posts are no longer accepted on this forum.
>
> To post, send email to jB...@googlegroups.com
> To unsubscribe, send email to jBASE-un...@googlegroups.com
> For more options, visit this group at http://groups.google.com/group/jBASE?hl=en
>
>
>
>

Regards,
....Bob Rasmussen, President, Rasmussen Software, Inc.

personal e-mail: r...@anzio.com
company e-mail: r...@anzio.com
voice: (US) 503-624-0360 (9:00-6:00 Pacific Time)
fax: (US) 503-624-0760
web: http://www.anzio.com
street address: Rasmussen Software, Inc.
10240 SW Nimbus, Suite L9
Portland, OR 97223 USA

Alexander Demin

unread,
Nov 26, 2012, 7:19:08 PM11/26/12
to jb...@googlegroups.com

Tony Gravagno

unread,
Nov 26, 2012, 7:12:36 PM11/26/12
to jB...@googlegroups.com

Dick, I installed Cygwin on the target system and added a SSHD server. So the client does an SSH to this server, which then does port forwarding (tunneling) to the jBASE telnet server. This might seem like cumbersome solution, having a Linux implementation sitting on top of Windows just for one service. But it's actually very easy to install (to my surprise and relief), the overhead is minimal, and over time you may find having Linux functionality in Windows to be quite refreshing - sort of like having Pick commands from the Windows command like with jBase compared to other Pick platforms. (Sorry Jim)

 

Install Cygwin with OpenSSH, OpenSSL, and inetutils.

 

Google for these phrases to get info:

ssh port forwarding cygwin

ssh port forwarding linux

ssh tunnel

install cygwin

mobaxterm  << this is a pre-packaged "distro" with Cygwin and SSH, look for others

 

The above method does not require anything special on the client other than switching from telnet to SSH of course. If you're using a telnet client and don't want to change to SSH for some reason, Google:

windows ssh tunnel client

 

You can install software in Windows which accepts connections on port X and sends them to another server on port Y - with or without encryption. I used this to accept a localhost telnet connection on port 23 from the client, pass the request over SSH to a remote server, and then as above re-route to a telnet server. The result is securing the internet connection while still doing a local insecure telnet.

 

Frankly it's been a long time since I did this and I'm embarrassed to say I don't have detailed notes on specific software or settings - but over time new software and docs turn up on the web, so you probably wouldn't want my old notes anyway.

 

HTH

T

 

Tony Gravagno

Nebula Research and Development

TG@ remove.pleaseNebula-RnD.com

Nebula R&D sells mv.NET and other Pick/MultiValue products

worldwide, and provides related development services

http://Nebula-RnD.com/blog

Visit http://PickWiki.com! Contribute!

http://Twitter.com/TonyGravagno

http://groups.google.com/group/mvdbms/about

Kevin Powick

unread,
Nov 28, 2012, 12:24:31 PM11/28/12
to jb...@googlegroups.com

On Monday, 26 November 2012 11:54:47 UTC-5, Dick Thiot wrote:
We currently have a need to implement an SSH server for Windows for a jBASE server.  Can others on the list let us know how you have approached SSH servers on Windows for jBASE?


I can highly recommend SSH Server from Bitvise ($99.95).  Solid and feature packed.  Easy to administer.  Great SSH client available too.


--
Kevin Powick 

Bob Rasmussen

unread,
Nov 28, 2012, 12:38:19 PM11/28/12
to jb...@googlegroups.com
An add-on question: Once you settle on a Windows SSH server, what is
necessary to connect a client to jBase? Do you have to run an SSH client,
enable port forwarding, and then run a telnet client over that tunnel?

Dan Ell

unread,
Nov 28, 2012, 1:18:22 PM11/28/12
to jb...@googlegroups.com
Bob,

jBASE is simply a windows program. The SSH server has to run a script that would set the environment variables, but there is nothing else needed.

Dan Ell

Tony Gravagno

unread,
Nov 28, 2012, 3:16:43 PM11/28/12
to jB...@googlegroups.com
Dan, I'd think that the SSHD does a telnet into jBase, and on login
the environment vars are set there. How would environment vars set by
the SSHD relate to individual sessions? Especially (note from below)
if the SSHD isn't even on the same system as jBase.

To answer Bob's question, yes, the SSHD accepts a connection on port X
and then transfers that to port Y, but that's not so much "port
forwarding" or tunneling, that's what an SSHD does. Point here is that
no other software required.

Regarding Bitvise - yeah it's great but the Cygwin solution is too,
and it's free, and has more feature, and takes the same amount of time
to setup. When someone thinks Cygwin, they might think "OS emulation"
or "complex" or something similar. Actually I found it dirt-simple to
install and there's even a MSI installer which does all of the initial
setup in the same number of clicks as Bitvise. After that the
configuration is of course different, but no more or less complex than
any commercial offering.

In my testing, I setup a virtual machine with Windows installed as the
guest and with disk updates turned off. This allowed me to try and
repeat the process as many times as necessary to understand it without
doing anything permanent. I then did the Cygwin MSI and setup with
OpenSSH. Then I did a SSH into that virtual which routed the telnet to
another virtual which was actually running jBase. Once I confirmed
everything was working I just repeated the process in the live box.
From there I could SSH or telnet to the live box at any time. Cygwin
starts with windows as does its SSHD service so once it's running it's
completely transparent.

T

Manoj K

unread,
Nov 28, 2012, 3:39:44 PM11/28/12
to jb...@googlegroups.com

Hi,

The best is to install cygwin on both the systems. Cygwin can use as SSH server and client.

Manoj

Kevin Powick

unread,
Nov 28, 2012, 6:13:19 PM11/28/12
to jb...@googlegroups.com, jB...@googlegroups.com

On Wednesday, 28 November 2012 15:16:43 UTC-5, NebulaTonyG wrote:
 

...the SSHD accepts a connection on port X
and then transfers that to port Y, but that's not so much "port
forwarding" or tunneling, that's what an SSHD does.

LOL.  What does that even mean?

 
Regarding Bitvise  - yeah it's great but the Cygwin solution is too,
and it's free

A favorite saying comes to mind, "*nix is only free if your time is worthless."

and has more feature

Such as?

and takes the same amount of time to setup.

Maybe for someone that's used both before and understands tunnelling and port forwarding.

I found it dirt-simple to 
install and there's even a MSI installer which does all of the initial
setup in the same number of clicks as Bitvise.

You've counted the clicks?  And once installed, are you saying that you're good to go with a fully configured SSH solution?  What a load of misleading advertising.

For laughs, I downloaded the latest version of Cygwin, ran the installer and immediately found myself asking, "now what", as I had to make decisions on choosing which packages to download.  So, I play it safe and go for the default install (from Internet).  After adding over 100MB of files to my disk, of which about 25MB can be deleted from original package downloads folder, I have an icon on the desktop for Cygwin.

Click on that magic Cygwin icon and I get.. Wait for it.  A command prompt.  Yeah, I'm almost there with a SSH server set-up.
 
I won't attempt to dispute that the Cygwin solution can work, eventually, but to say it's even remotely similar and easy to set-up as a dedicated SSH product like Bitvise is outlandish.

Time is money my friend.  Less than $100 for Bitvise is a good investment, IMO.

--
Kevin Powick


Daniel Klein

unread,
Nov 28, 2012, 6:23:38 PM11/28/12
to jb...@googlegroups.com
One of my favorite sayings: "Anything free is worth what you pay for it."



--
Kevin Powick


Tony Gravagno

unread,
Nov 28, 2012, 8:01:04 PM11/28/12
to jB...@googlegroups.com

I'll preface this by saying anything I know about this comes from discussions I had with Kevin in CDP just over a year ago. Based on those discussions and very little pain from experimentation, I was able to get this stuff to work, and for free. That's the whole take-home here. I'm just conveying what I learned back then.

 

Yeah, awkward phrasing about "what an SSD does". My point was that you don't need SSHD and port-forwarding and tunneling because SSH already does that. Consider this client-side command:

 

ssh -L <local-port-to-listen>:<remote-host>:<remote-port>

 

Tunneling is sometimes defined the same as port forwarding but they're not exactly the same. The above command describes the tunneling of a connection from client to server, and subsequently the  SSHD does port forwarding to the ultimate destination (the jBase telnetd). So if you're using SSH you don't need separate tunneling or port forwarding software, which seemed to be implied by prior notes. That was my point.

 

As to many more features and the "such as" - that would be all features available in Cygwin, Linux software running under Windows, XTerm, and any number of command-line utilities like grep, awk, and sed. You don't get any of that with a product dedicated to being nothing more than a SSHD.

 

As to installing Cygwin, you conveniently left out the sentence following the one you quoted where I said "After that the configuration is of course different, but no more or less complex than any commercial offering.". What I was talking about was the few number of clicks required to click setup, confirm a target directory, maybe confirm a EULA, and then click Finish.

 

As to: "For laughs, I downloaded the latest version of Cygwin, ran the installer and immediately found myself asking, "now what", as I had to make decisions on choosing which packages to download. " …. " Click on that magic Cygwin icon and I get.. Wait for it.  A command prompt."

Speaking of laughs, that sounds just like the jBase installation. DOH!

 

Look, I'm not going to play this game of fine-tuning words and splitting hairs on the nuances of specific implementations. People have enough information now to get more info. It's time to stop tossing fish and for people to use the fishing poles they have.

 

Have a nice day.

T

Kevin Powick

unread,
Nov 28, 2012, 11:59:32 PM11/28/12
to jb...@googlegroups.com, jB...@googlegroups.com

On Wednesday, 28 November 2012 20:01:04 UTC-5, NebulaTonyG wrote:
 
[snipped a bunch of my counterpoints because likely unproductive]
 

Look, I'm not going to play this game of fine-tuning words and splitting hairs on the nuances of specific implementations.

It's hardly splitting hairs.  Your original reply left me with the impression that Cygwin had somehow changed a heck of a lot since the last time I had it installed on a box -- That it had become some wizard-driven solution that would give one a SSH solution with only a few simple clicks.  It's not that at all.  It's a set of libraries/utilities/applications that bring some popular Linux functionality to the Windows user, of which one of those features is SSH.

Maybe Cygwin is perfect for what some people want and they'll appreciate that you pointed it out.  My point was never to question its capability to provide SSH on Windows.  I only scoffed at the impression you made that it was pretty much the same as using Bitvise.

There's also much irony with regard to free vs. paid solutions and your never hidden feelings about the DIY mentality of the MV crowd.

Good evening,
 
--
Kevin Powick

Simon

unread,
Nov 29, 2012, 3:37:17 AM11/29/12
to jb...@googlegroups.com
Hi

Coming a little late into the discussion.

I agree that CygWin is a little OTT and not straightforward for the job described.

A free solution, which is straightforward to install and works with a nice easy to use gui interface is freesshd - www.freesshd.com.   I use it on Windows 2003 / jbase 3.4 but it's a generic solution - you create a user name/password combination and point it at your remote.cmd file.  It then pretty much works like the jBASE telnet server...

Hope this helps
Simon

George R Smith

unread,
Nov 29, 2012, 8:54:40 AM11/29/12
to jb...@googlegroups.com
and that is why we had to pay for the soap Smile
Stay well
George
 
Sent: Wednesday, November 28, 2012 5:23 PM
Subject: Re: Windows SSH Server
 
wlEmoticon-smile[1].png

Dick Thiot

unread,
Nov 29, 2012, 12:22:00 PM11/29/12
to jb...@googlegroups.com
I guess I should update the group.  Thanks for all of the input.  We had two requirements for SSH that were driven by security requirements that we must comply with.  Telnet is considered an insecure protocol even on internal networks and it not allowed by most current security policies.  We have desktop users and one gateway server application.  Our desktop terminal emulator, Accuterm, natively supports SSH.  However, our gateway middleware that we use to handle requests from Windows and Web applications to jBASE does not support SSH.

We are currently evaluating the Bitvise product.  The installation was straight forward and we have been tweaking settings to serve our needs.  As for the gateway, we have created a tunnel from the gateway system to the jBASE system.  At this point we are happy with Bitvise and find that the $99 license fee is insignificant relative to our business requirements.

Dick
wlEmoticon-smile[1].png
Reply all
Reply to author
Forward
0 new messages