Questions tagged [ssh]
Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.
8,956
questions
0
votes
1
answer
27
views
Why are remote connections to my ssh tunnel refused but local connections are accepted?
Hello I have set up an ssh tunnel as follows:
/usr/bin/ssh -vvv -o ServerAliveInterval=10 -o ServerAliveCountMax=3 -R 15000:127.0.0.1: 15000 -N mylinode.domain.com
...
debug1: Offering public key: /...
0
votes
1
answer
40
views
How to get the ip address that i have ssh'ed into?
I have ssh'ed into a linux machine terminal with
ssh username@ip
Once I am in, how do I get back the ip?
All these commands like : host name -I, if config, etc are returning address that are different ...
0
votes
1
answer
66
views
Linux server: apt-get update "Could not get lock" error
I have a Google Cloud machine. Every few days, I SSH into the VM and run a handful of commands. Over the past few days, whenever I run sudo apt-get update, I get the following errors:
E: Could not get ...
0
votes
0
answers
44
views
execute ssh with command su and keep log in
I have a server where I have 2 users, one for ssh access and the other one for command execution, I want to create a command that use ssh, the su command and I want to keep the session alive, I try ...
0
votes
0
answers
29
views
Strange issue with firewalld and ssh on Almalinux 9
I have this strange issue with firewalld and ssh on my fresh AlmaLinux 9 installation.
I changed the ssh port to a non-default port(9322), restarted the sshd daemon. Firewalld is running in it's ...
0
votes
1
answer
16
views
Understand SSH AgentForwarding per Host specification
Disclaimer: originally I asked this question on StackOverflow and it was legitimately marked off-topic and think it fits better here. In the meantime I found the problem (see intermediate solution ...
0
votes
1
answer
104
views
SSH through squid proxy running on the same server
I am currently connecting to my server over ssh. I also have a squid proxy running on the same server, and I would like to be able to connect to ssh through the proxy, presumably with ssh taking place ...
0
votes
0
answers
24
views
SSH, remote host identification has change, local home network, not for all clients [closed]
I'm running a server (samba, ssh) on my local home network. Not accessible from the internet.
Today I received the message "Warning: Remote Host identification has changed". I receive it on ...
0
votes
0
answers
8
views
What configuration is blocking local ssh connections to my server? [migrated]
So I recently bought a Raspberry Pi to work on a small passion project with the RetroPie Debian-based image.
I am now at the stage where I want to completely shield the server only allowing specific ...
0
votes
0
answers
27
views
AWS EC2 Ubuntu 22.04 LTS session timeout not working (ClientAliveInterval, ClientAliveCountMax)
I installed an AWS EC2 instance using Ubuntu:
ubuntu@ip-aaa-bbb-ccc-ddd:~$ lsb_release -ds
Ubuntu 22.04.3 LTS
I was using the following simple tutorials to set the ClientAliveInterval and ...
0
votes
0
answers
44
views
Can't run startup script on Debian VM in Google Cloud - SSH and Serial Console Access Issues
I've been struggling for days with a SSH access problem on my Compute Engine VM (Debian GNU/Linux 10), with an error in the sshd_config file leading to the inability to restart the SSH service:
2024-...
0
votes
0
answers
11
views
When using the GCP OS Login TRUE, is it possible to access SSH from outside through Putty or VSCODE? How?
As I understood that, If I enable the GCP OS Login for the project, the normal behavior to SSH using public keys in metadata will cease to work.
I am curious about the SSH connection method using an ...
-1
votes
1
answer
22
views
SAP external command using lftp over sftp
I need to connect to the EDI server and pick up the data via sftp. This is an unusual ftp server. This is a special server that erases files after reading. We dismissed the initial idea of mounting ...
0
votes
0
answers
31
views
Unreasonably slow SSH tunnel - but just in the opposite direction
While setting up rsync to a remote computer, I realized that syncing from my laptop the remote was fast, but the opposite was slow.
After some debugging and iperf3, I figured that this only happens ...
0
votes
1
answer
54
views
Ssh hang after execute some command
I run some command through ssh: ssh root@remote "SOME_COMMAND", but the ssh does not return after command done. It just hang there.
The client side ssh log:
debug3: receive packet: type 98
...
1
vote
1
answer
90
views
OpenSSH server limit local forwarding to only unix sockets
Problem: Limit SSH -L forwarding only to unix sockets
SSH server S is a shared server inside a private network used by several users.
Use-case: for each user I create a local unix socket to use to ...
0
votes
1
answer
124
views
Cannot ssh into my vps ipv6 ip : Network is unreachable
The dashboard of my hosting company regxa provides me with a root password and ipv6 address to my CentOS server, no ipv4
I have tried using both putty and ssh cmd in my linux machine to connect to the ...
0
votes
0
answers
32
views
git-lfs is giving me a "locking API" error when I try to push to the server
I am trying to enable git lfs on my server but it's not working.
The server is already hosting git repositories which is working fine.
The server is runnign Debian bookworm.
What I did on the server:
$...
0
votes
1
answer
30
views
No SSH access to EC2 instance launched by ASG, while I can access an otherwise identical instance
I'm trying to SSH to an EC2 instance that's part of an ASG associated with an ECS service. To help narrow down the problem, I created new instance from the same launch template. I've carefully ...
0
votes
0
answers
62
views
Running ssh-add in bash with both the key and passphrase as arguments
I am trying to run ssh-add by bash script on Alma9 server with restrictions.
The RSA key 4096 is on an SMB share so the file has broken permissions and the key is protected by a passphrase.
As the ...
0
votes
0
answers
148
views
Host Key Exhange failing on AWS Transfer Family SFTP
I have a customer who is unable to connect to an SFTP Server (AWS Transfer Family SFTP).
The error I am getting in my logs is:
ERRORS KEX_FAILURE Message="no matching host key type found" ...
-1
votes
0
answers
42
views
Unable to access proftpd server via sftp: port 22
I need help please.
Thank you.
I'm trying to replace a proftp server because the old one was encrypted during installation and the passkey is lost.
Old server works fine on ftp:21 and sftp:22/322
old ...
1
vote
0
answers
57
views
Host Keys updated unexpectedly
This morning autossh failed to connect to a server. I looked at the logs and saw that seemingly the server's fingerprint has changed and thus, the connection could not be established.
I then logged in ...
-1
votes
0
answers
28
views
Routing all traffic via VPN except SSH tunnel
I have the following idea.
I route all my Windows PC traffic via SSH Tunnel (Dynamic) to my Server.
Then I set up a VPN connection to a remote VPN server.
What I want to achieve is to route all trafic ...
0
votes
0
answers
89
views
Disabling Password Login for Root User via PAM on Ubuntu Server
I have a Ubuntu Server (Ubuntu 22.04.3 LTS (GNU/Linux 5.15.0-1049-oracle aarch64) specfically), Where I am hosting a few projects, I am somewhat novice in the sysadmin space, but know some basics for ...
1
vote
0
answers
22
views
Dynamically Update Ips of AWS Autoscaling instances in Jenkins SSH Global configuration
We have few autoscaling groups in AWS and new instances are created frequently. We are using a declarative Jenkins pipeline to publish the build artifacts to those server using publish over ssh plugin ...
0
votes
0
answers
52
views
SSH sessions using keys extremely slow
From some days I'm having trouble accessing an instance with ssh key.
This server is an Ubuntu instance where it is installed gitlab and only access via ssh key is enabled.
Checking sshd logs I see:
...
0
votes
3
answers
119
views
Terminal emulator - make remote ssh sessions persistent
The classic story goes:
I have a terminal emulator with multiple tabs/screens.
In each tab, I start an SSH session to a remote server. I start possibly long-running interactive jobs in those sessions. ...
0
votes
1
answer
35
views
How to Reset Unifi APs over SSH?
I want to Reset APs or switches over the Build-in SSH. I do no find a working anser since this is just turning the APs of.
0
votes
1
answer
40
views
SSH executes `Match exec` lines from conditionally excluded includes
I stumbled across this behavior and was wondering if it is intended and/or documented, because I could not find anything.
The manpage of my version of ssh states for ssh_config / Include:
Include ...
0
votes
2
answers
82
views
Unable to ssh using ed22519, although both client and server support it
client & server OS/Version: Ubuntu 22.04.1
Logged in to the box via password, added my id_ed25519.pub to the user's authorized_keys. however it seems the server is refusing to accept the key.
...
1
vote
0
answers
66
views
Can no longer SSH to my AWS EC2 instance - Operation timed out error
I am using the following command to SSH into my AWS EC2 server and this has been working fine for some time, however recently it hangs and then times out.
ssh -i "ec2-pro-clubs-server.pem" ...
1
vote
1
answer
32
views
How to manage several "localhost" entries in ssh/config that only differ by port
So, I am operating in an environment where ssh is extremely limited. My simplest way to do anything is to actually channel ssh through a tunnel over aws session manager.
So, here is a sample ...
1
vote
4
answers
161
views
OpenSSH Requires Password AND Public Key!
I've inherited an old CentOS-6 system with OpenSSH 5.3 installed. And OpenSSH is behaving oddly: Currently the daemon requires the use of a public key and a password in order to login. (It's been this ...
0
votes
0
answers
81
views
Self-hosted website won't go online unless I SSH into the server first
I have a simple HTML page hosted on an old mac desktop (Catalina) on the in-built apache server.
The problem is when I browse to the IP on chrome after a while, the website is down. But as soon as I ...
1
vote
1
answer
84
views
Accessing RDS or EC2 instance without '.pem' key
I am working for a charity who has a few of their services on AWS.
They hired an agency years ago to spin up these intranet and tools platforms. I am trying to get a dump of their db, for backup ...
0
votes
1
answer
229
views
Tyring to access MariaDB running in a docker container on a remote machine
I can't seem to remotely connect to my database, via SSH tunnel. I'm relatively new to all this, so I was hoping someone might be able to give me some pointers.
I've got a cloud server on which I've ...
0
votes
0
answers
61
views
SSH keeps timing out when trying to connect to remote server
I am trying to connect to a remote server via ssh. I have done it previously without any problem. However, recently, most of the time when I ping it, it just says "request timed out" - there ...
0
votes
0
answers
43
views
Establishing mutual authentication over SSH using SPIFFE
For this learning purpose I have created a k8s cluster using 4 azure VMs (VM1, VM2, VM3 & VM4).I have followed the spiffe doc to deploy spire-server and spire-agent on a k8s infra. I have kept all ...
1
vote
1
answer
181
views
How does Java handle multiple client keys in the keystore but 1 in trust store when doing mtls
I have a situation where I am trying to setup mtls where the client has multiple keys. I cant seem to find how the resolution of which alias works so can somewhere here guide me?
How does Java decide ...
0
votes
0
answers
28
views
ssh-certificate LDAP schema existence?
Hello.
I'm looking for an LDAP schema to make it possible to publish my ssh-certificates into user/host LDAP nodes.
Is there any common one?
0
votes
1
answer
359
views
Keycloak Integration with a Linux Server
I've set up a Keycloak server and I'm working on integrating it with a Linux server to allow users from Keycloak to authenticate into the Linux server using their Keycloak credentials.
Ideally, I'd ...
0
votes
1
answer
73
views
How to SSH to different Virtual Machines attached to same Azure Firewall using same port?
We have host-Windows, proxy-Linux(same VNET, different subnets) and sftp-Linux(different VNET and subnet) machines in which SSH is enabled in port 815(SSH is done to domain set to each machines). Now ...
0
votes
0
answers
130
views
First SSH connection reset by peer, subsequent ones work
I am facing a fairly odd issue on a new VPS:
Whenever I initiate an SSH connection to the server for the first time in a while, I get this:
➜ ~ ssh server
kex_exchange_identification: read: ...
0
votes
1
answer
73
views
What do these logs mean? Is someone attempting to hack into my server via ssh?
Today I woke up to a a very large number of logs for ssh, and I can only assume someone is trying to gain access to my linux server.
Here are the logs
-- Logs begin at Wed 2023-08-02 08:59:10 EEST, ...
0
votes
1
answer
110
views
ssh from CL using keyfile from Windows client to Linux server
This sort of thing drives me crazy - hopefully obvious solution(s). Have keys on Win 10 laptop, and on one of my Linux servers. If I use puTTY, where I can explicitly browse to the keyfile on the ...
1
vote
5
answers
175
views
Tips for coping with a surprisingly high rate of "botnet" sshd login failures?
I just set up 2 new Debian 12 VPS's at once.
One of them worked fine; the other, I appeared to have intermittent connectivity to. I even got as far as writing half of a support ticket, thinking it ...
0
votes
1
answer
116
views
fail2ban | difference between [sshd] in jail.local, vs sshd.local in jail.d?
AlmaLinux server -- 1.0.2 fail2ban installed. Seems to be working, but, am hoping someone can clarify something for me:
1\ working with jail.local copy of jail.conf. In said jail.local, there is a ...
1
vote
0
answers
216
views
ssh bad packet length when haproxy offloads ssl
Haproxy has been configured to offload SSL to access SSH , but randomly or when more interaction happen , the SSH session is disconnected
Bad packet length 468396411.
ssh_dispatch_run_fatal: ...
0
votes
0
answers
23
views
SSH_CLIENT variable bringing the server's IP instead of the client's IP when connecting via SSH
I need to monitor the SSH access logs of an Oracle Linux Server 7.9 to determine which machines accessed this server throughout the day. However, the logs display the IP of the server itself instead ...