The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
2answers
2k views

How to use git pull without entering the passphrase

I'm trying to pull from a GitHub repository in an unattended way, but everytime I do it I get: Enter passphrase for key '/home/yc2/.ssh/id_rsa': And I have to enter it for it work. I managed to ...
2
votes
2answers
1k views

User created MOTD prevents SCP from functioning

I've created custom MOTDs to be displayed at login via SSH by doing the following: create a text file in /etc/usermotd/<username> with the message inside Edit the user's .bashrc file and put ...
2
votes
4answers
5k views

SSH login without password

I know that you can use ssh-keygen to generate a public/private key pair. Then you can install the public key on a remote server. You can then login without supplying a password. I haven't been ...
5
votes
2answers
3k views

CentOS Create User With No Password, Only Public Key Auth

How can I create a user on CentOS 5.6, which cannot login with a password. I.E. they can only login and SSH using public key authentication. useradd myuser -d /their-home-dir Will that do it, ...
2
votes
1answer
340 views

Crypto key storage and recovery — best practices?

We have a bunch of SSH, GPG, SSL and other private keys that, obviously: must only be available to the smallest number of people possible can't be "lost" if a hard drive dies or the building burns ...
1
vote
2answers
103 views

Get name of public key used to connect

I created a shell script that asks the connected user a question and after that it give him the prompt. The shell posts the question to a database for logging. The problem is that our developers are ...
2
votes
1answer
5k views

How to configure public-key authentication with vsftpd?

The documentation of vsftpd is quite good (https://security.appspot.com/vsftpd/vsftpd_conf.html), however I cannot find some details on how to use public key authentication. I know that I need ...
0
votes
2answers
127 views

Need convincing PGP public key needs to be changed

So the situation is thus. We're working with another company and as part of some file distribution processing we have to encrypt some files before they are sent. The company in question sent us ...
5
votes
3answers
260 views

PGP: on the web, what if everything was tampered?

I am trying to wrap my head around how Public Key Cryptography can really work in a secure manner. From what I can gather, you go to example.com and download their PGP/GPG Public Key and add it to ...
16
votes
4answers
5k views

Is it possible to get OpenSSH to log the public key that was used in authentication?

I have a production system where several different people are allowed to log in to a single account - the account is for the application and not for the person as we don't have personal accounts on ...
0
votes
2answers
604 views

ssh with key login failed from Mac OSX to CentOS 5 remote server

I'm trying to setup passwordless login for from my mac to my remote server running CentOS with public key authentication for "user1". I used $ ssh-keygen -t rsa to setup a public key on my mac and ...
9
votes
2answers
19k views

Disable the public key check for rpm installation

I want to make a DVD with some useful packages (for example php-common). The only problem is that if I try to install on a computer that's not connected to internet, I can't validate the public key. ...
3
votes
2answers
138 views

Setting up authentication on virtual machine

I'm creating a system similar to a cloud computing provider using the libvirt python bindings. I would like to give users the ability to specify a custom virtual machine image, in a similar fashion ...
2
votes
2answers
195 views

openssh: public key failure for one user only

Client: opensuse 10.3, openssh 4.6 host: opensuse 11.3, openssh 5.4 I have a user that has ssh publickey setup to a host, to enable running some scripts through cron. We migrated the host to a new ...
2
votes
2answers
120 views

SSH backup server - connect to multiple passwordless remotes

I'm wondering what are the steps to configure password-less ssh keys so I can connect and pull data from multiple remote servers. Can I just do: Backup Machine: ssh-keygen -t rsa ssh-copy-id -i ...
2
votes
1answer
6k views

How to enable key forwarding with ssh-agent?

I've used the ssh-agent from oh-my-zsh to manage my SSH key. So far, so good, i only have to type the passphrase for my private key once when I start my shell and public key authentication works ...
8
votes
3answers
22k views

How to export my SSH's public key?

I need to set up ssh sessions between two servers and do not want to make the script fill in username and password everytime. However I cannot seem to find out where the SSH server is using its ...
1
vote
3answers
848 views

Putty: ssh root login to server disabled, how i can setup passwordless access to root on server?

For added security, we've disabled root login to server via ssh. We have a special ssh account that users need to login as, and then su as root in they require root access. How can we setup ...
0
votes
1answer
116 views

ssh key requires passphrase after viewing it

I'm running a tinycore machine that I store my code on before pushing it to github. This is also the only machine that has port 22 forwarded at home so I have to do the push from this machine due to ...
3
votes
2answers
2k views

ssh still accepts password authentication despite being configured for public-key only authentication (which works!)

I have configured an Ubuntu 10.04LTS desktop install to only allow public key authentication. RESULT: public key authentication works perfectly! QUESTION: The problem is that despite being ...
1
vote
3answers
101 views

restricting access via ssh

We have a data processing workstation that's shared by a number of users. I would like to set up a script on that machine to process my data and then copy it it back to my personal machine afterwards. ...
6
votes
2answers
481 views

How to set up SSH passwordless key authentication for remote access only, allowing local users to use passwords

I am trying to get an SSH server running Ubuntu 10.04 to allow password logons only when coming from the local network. For all other users, especially those logging in from the internet via the ...
0
votes
3answers
1k views

ec2 instance is unable to connect after restart

I created an micro ec2 instance with free tier option. After using it a week, i realized that i need more memory. So, i thought of changing the instance type from micro to small(for which i have to ...
1
vote
1answer
2k views

PostgreSQL SSL root.crt not loading

I am running PostgreSQL 9 on Ubuntu (from their PPA repository). I am using OpenSSL 0.9.8o. I have generated keys and certificates using TinyCA2 for both a pg server and the psql client. I ...
0
votes
2answers
160 views

SSH Private Key Not Working in Some Directories

I have a strange issue where SSH won't properly connect with a private-key if the key file is in certain directories. I've setup the keys on a set of servers and the following command ssh -i ...
3
votes
2answers
3k views

What is a good and safe way of sharing ssh-keypairs?

I have a few key-pairs, that are used as authentication, to ssh into my servers on the Amazon cloud. I rotate those certificates weekly, manually. My question is, I need to share the certificates with ...
4
votes
1answer
2k views

Force SSH public key authentication for specific users

Is it possible to force specific users to login with public key, while allowing other users to login with password? Since public key authentication (with passphrase) is stronger than password-only ...
1
vote
1answer
146 views

Private and public key negotiations over SSL protocol

I understand how public key encryption works and I understand how it works into SSL. Server sends encrypted(public) key so I can send it a message but only it knows the private key to decrypt it. ...
20
votes
2answers
7k views

Public key authentication or similar over HTTP/HTTPS?

Is it possible to configure Apache, or some other web server, to use some kind of public-key authentication? What I would like, ideally, is to be able to give users access to a site without the need ...
1
vote
1answer
167 views

ssh authentication with public-private key pair

I'm wonder if is possible to authenticate the same user with different public-private keys pairs on the same remote host. For all production servers, the public-private key pair has been generated ...
2
votes
2answers
14k views

SSH configuration, publickeys, Permission denied (publickey,password). error

My task: login from Mac OS Snow Leopard client to Ubuntu 10.10 server without password. Commands: client$ mkdir ~/.ssh client$ chmod 700 ~/.ssh client$ ssh-keygen -q -f ~/.ssh/id_rsa -t rsa Enter ...
2
votes
4answers
2k views

ssh without password does not work for some users

I have a new RHEL4 Linux box that I am using to copy data to old Solaris 2.6 and RHEL3 Linux boxes with scp. I have found that with the same setup, it works for some users but not for others. For ...
6
votes
4answers
791 views

SSH public key authentication — always require users to generate their own keypair?

I was working with a partner today that I needed to upload files to my server using scp. I have passwords turned off in the server's SSH configuration, so I wanted them to use public key ...
16
votes
2answers
11k views

Multiple public keys for one user

This question is similar to SSH public key authentication - can one public key be used for multiple users? but it's the other way around. I'm experimenting on using ssh so any ssh server would work ...
1
vote
2answers
1k views

Passwordless entry via public key authentication to a HP 2626 switch

I am trying to get the output of some 'show' commands in linux and print them in a file It's a HP 2626 switch 1. How can i setup Passwordless entry via public key authentication to the switch 2. How ...
1
vote
1answer
199 views

RSA fingerprint [closed]

what is the benefits of SSH RSA Fingerprint? and how does it different from PGP ? also how can i use it? are there any tool to do this? regards
4
votes
1answer
613 views

Get SSH fingerprint from remote server securely?

I had thought about this and my host provides out of band support, so I could simply create the key fingerprint out of band and compare it when connecting to that server from home. Is there any other ...
1
vote
3answers
265 views

Simple SSH public/private key question

I am trying to learn this instead of just following guides so I can recommend proper actions when people do ask (and they do). Here is what I got down. First, generate both key with command such as ...
2
votes
3answers
1k views

ssh asks for password despite ssh-copy-id

I've been using public key authentication on a remote server for some time now for remote shell use as well as for sshfs mounts. After forcing a umount of my sshfs directory, I noticed that ssh began ...
2
votes
1answer
350 views

How can I make gitosis distinguish between two users with the same username

I have a gitosis system that seems to be working correctly except for a common problem we run into where I can't distingush permissions between two users who have the same username, but different ...
1
vote
2answers
322 views

This morning when sshing in, server asks for password (has never happened. normally use identity file)

I always log in to my server(Amazon EC2) by: ssh -i blahblah.pem root@server.com This morning the server asked for a password which I never set. I thought this could mean either my key(pem file) is ...
1
vote
2answers
257 views

SSH key does not work from a remote shell

I've come across an interesting problem and I literally don't know where to start looking to resolve it! The VCS machine in our office is running gitweb and my public key is on this machine fine. I ...
0
votes
1answer
534 views

Pubkey authentication with SSH server running on Cygwin - session closes immediately

I am connecting from Linux via SSH to a Windows machine running SSH in Cygwin. I authenticate with a certificate. The session opens but closes immediately thereafter. With password authentication it ...
3
votes
4answers
1k views

How can I enable both password and public key authentication with OpenSSH

I would like for sshd to verify the users' public key and then prompt for their password, rather than just one or the other. Is this possible?
0
votes
1answer
525 views

On Windows, how do I set up sshd such that I can ssh in via key-based authentication from another windows box?

I am working to set up some deployment automation, and one of the things I'm trying is to use Ruby's Capistrano to remotely execute commands over ssh. I have used cygwin's openssh to run sshd on the ...
1
vote
2answers
449 views

RPM issues after signing JDK 1.6 64-bit

I'm trying to sign the Java JDK 1.6u21 64-bit RPM on CentOS 5.5 for use with Spacewalk and I'm running into problems. It seems to sign okay, but then when I check the signature it seems to be missing ...
1
vote
1answer
483 views

SSH connection slow from one machine but not another

I have a remote server I need to administer over a VPN to another data centre. The server I used to conenct to it from (server A) is being decommissioned, so I'm using another on the same VLAN ...
0
votes
2answers
900 views

ssh via public key authentication for users administered with NIS

I'm experimenting with using NIS for centralizing the user management for a network of approx 20 servers. I've got an NIS client and server working, and can ssh to the client machine and successfully ...
2
votes
4answers
1k views

Why does my ssh publickey authentication only work with concurrent password authenticated connection

I just setup a vanilla ubuntu lucid (10.04) system with openssh-server. I'm trying to setup publickey authentication, and it only works if I first connect using password authentication and leave that ...
2
votes
4answers
3k views

Looking for a one step solution to appending my SSH public key to a server's authorized_keys?

To get my public key onto a server I normal copy the contents of my public key, then SSH into the server, then I run vi .ssh/authorized_keys, then paste my key into the file and save. There has got ...