Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.

learn more… | top users | synonyms (2)

9
votes
3answers
462 views

Is sharing a user a bad habit?

I've worked in organizations where instead of creating a new Ubuntu user per person that wants to log into a machine, the sysadmins simply add the ssh key of each user to .ssh/authorized_keys, and ...
2
votes
0answers
14 views

Mac OSX - SSHD partially broken after El Capitan Upgrade

I recently upgraded my firm's Mac Mini device to El Capitan from Yosemite, and encountered several issues during the upgrade. I've gotten most of them resolved but one that's still failing is the SSH ...
0
votes
0answers
4 views

How to programmatically change a password on an IPSwitch server using a Linux client? [migrated]

One of my companies customers runs an IPSwitch sftp server, and they have disallowed public key authentication, and require us to change our password every 90 days. The problem is that, I cannot see ...
0
votes
0answers
8 views

Changing password of a sftp chrootDirectory stops it from logging in

So I have a chrootdir setup in sshd_config to a folder, and the user myuser, it's been working fine for months, then today I wanted to change myuser's password, so I did this with passwd, then ...
0
votes
0answers
18 views

Ansible log in as regular user and become root

using the new "become" syntax, how do you configure your playbook to log in to a host as a regular user, switch to the root user and ask for a password? I tried: --- - hosts: foo gather_facts: no ...
1
vote
0answers
32 views

SSH alternative for a long range/high latency connection [migrated]

I'm about to set-up a raspberrypi in a remote location (300+km to me). It will connect via GSM since there's no landline on 3G/4G. I need a way to "ssh" inside the pi to manage some stuff. Since GSM ...
0
votes
1answer
29 views

Countless (defunct?) SSH processes -how do stop it from happening?

My vServer hoster threatens to cancel our contract if I don't stop creating thousands (9000 to be precise) of SSH processes. I don't know if they made the processes defunct or if they were like this ...
0
votes
1answer
22 views

How to remove injected code between two strings recursively in PHP files using SSH

We have in-house Linux(Ubuntu) development server. Few days ago suspicious code was injected. Just to mention here that we have more than 300 projects. Code is injected in almost every file ...
0
votes
1answer
22 views

passwordless ssh in VM - weird authorized keys file

I am trying to setup passwordless ssh to my localhost (itself). I have host machine PM1 and then I lauch a VM(vm1) using qemu-kvm and logged into VM. Then, I am trying to setup passworless ssh within ...
2
votes
0answers
45 views

Allow ssh when g+w on user's home directory

Is it possible to allow one user to connect via SSH when that user's home directory is g+w? As I understand it, I can allow this if I set StrictModes no in /etc/ssh/sshd_config, but that would mean ...
-3
votes
0answers
25 views

How to write access command with credentials?

We had a third party company setup servers and built services for us years ago. But the relationship is strained now and basically they won't reply any email to us. We could find some legal help but ...
0
votes
0answers
10 views

Dependencies in openssh-server package in LXC container in Ubuntu 14.04 LTS

Hi I've been fiddling with Lxc containers in Linux and find it an invaluable resource for testing and dev purposes. Here's my problem. I have a just-installed container and when I try to install ...
2
votes
1answer
33 views

How to disable sftp access to user with ssh already disabled (user shell = /bin/false, but connection still works with sftp)

In sshd_config, by default, login is allowed for all groups and users. The allow/deny directives are processed in the following order: DenyUsers, AllowUsers, DenyGroups, and finally AllowGroups. ...
-1
votes
0answers
16 views

openssh-server wont install on linux server, any ideas? [duplicate]

So, my server recently got broken into, and to stop any possible sshd backdoors, I attempted to reinstall openssh-server... this broke ssh. I'm still connected, but cannot reconnect from another ...
-2
votes
0answers
23 views

While loop failing without completing the action completely - must be stdin issue

Seeking experts help to fix stdin issue permanently, I was able to query using while loop with manually directing stdin (please see example below). Are there any method to specify in .profile or ...
1
vote
1answer
17 views

Scalable remote access gateway for 20K+ servers

Consider a worldwide distribution of thousands of embedded servers, and clusters of servers behind firewalls that sysadmin wants to access remotely. With a focus on a remote access for login and ...
-2
votes
0answers
32 views

Using Screens with a PHP Script [migrated]

I found an external developer to make me a PHP script to 'snipe' Mineraft usernames. In order for it to operate, I have to start the script from the command line using this: php -f sniper.php > ...
3
votes
2answers
414 views

How to SSH to a remote server using a private key on Linux?

I have been trying to connect to a remote server using my private key file from the terminal, but it doesn't seem to work. I don't understand why. Here is how I do it: $ ssh -i private.ppk ...
0
votes
0answers
18 views

One SSH client can only connect through port 22, not other ports, on any remote server

I have a client server under Debian Wheezy. It can not connect to a server that has a special opened port for ssh (let us say 2222). All other clients I use (from other sites) can connect to my ...
0
votes
1answer
11 views

apt-get maddeningly doesn't work with tsocks proxy set up with ssh

I have a machine that cannot access the internet, yet can connect to a machine that does. I don't want to use a proxy server, I've been told that I can just use ssh. So I've proceeded simply by ssh ...
-1
votes
0answers
16 views

need to assign mysql root user to database with full permission [closed]

I have a Centos 6 box with MySQL 5.6 There's a database control panel script I bought that requires full root access to MySQL. I can't figure out via CLI how to greant the mysql root user the full ...
0
votes
0answers
20 views

Host verification with cross-realm kerberos auth and ssh

I have configured kerberos to cross-realm trust(MIT+AD) and here is what happens: When I do: kinit foo@MIT-REALM.COM ssh foo@krbservice Everything works fine. When I do: kinit bar@AD-REALM.COM ...
-1
votes
0answers
6 views

Passwordless login for AFS

Is there a way to have passwordless login for a system running AFS? I tried a ssh key pair, and although I logged in with no issue, I did not get an AFS token. Every 24 hours, I need a new AFS token, ...
-2
votes
0answers
13 views

dadcomputer.home appears as dadcomputer.lan when logging in to another computer [closed]

I changed ADSL router recently (from BT home hub 4 to technicolour tg582n) and now dadcomputer.home (ubuntu) appears as dadcomputer.lan when logging into my freeciv server, or SSHing into another ...
1
vote
1answer
21 views

Authenticate Users based on AD group membership. Ubuntu 14.04 , Cant find help anywhere

Been Googling for two days now. I am not new to Linux, but am new to AD and using it in Linux. So. I have an AD system ( not run be me ) and its joined happily. I followed this procedure: ...
-1
votes
1answer
22 views

Can scp maintain original file structure on remote server?

Supposing we have the following files to copy to a remote server: /dir/test.php /dir/inc/inc.php I now want to copy both files to the remote server as follows: cd /dir/ scp test.php inc/inc.php ...
1
vote
1answer
37 views

OpenSSH use (public key or password) + google authenticator

I want to allow these two authentication types: public key + google authenticator OR password + google authenticator. I have the following in my sshd_config: AuthenticationMethods ...
1
vote
1answer
25 views
+50

Galera Rsync SST Secured via SSL/SSH

Is it possible to secure Galera Cluster SST via rsync with SSL/SSH? This page suggests it is not, specifically the following quote: Unlike rsync, xtrabackup includes support for SSL encryption ...
1
vote
1answer
29 views

Connection to postgresql hangs over SSH tunnel on OSX

Trying to connect to a remote PG server on OSX but it keeps timing out. First, I set up the tunnel: ssh -L 5433:serverip:5432 user@serverip Then in a separate terminal I attempt to connect to PG: ...
1
vote
2answers
43 views

Central control for SSH access to AWS instances

What are some approaches or best practices for managing SSH access by many devops to many AWS instances? I'd like to have the ability to e.g. add or remove access for a user to multiple instances ...
0
votes
0answers
34 views

Can't SSH to remote fedora server after reboot [closed]

I have a dedicated server on Fedora 23 I rebooted 3 weeks ago and since that time, I can't login, I'm refused on the server. I can have a rescue mode and then I try to "chroot" drives I mounted. I ...
0
votes
1answer
49 views

Dumping command output from SSH session to procurve

I am trying to get information from the command "show mac-address" out of a collection of 12 procurve switches in 2 different locations all connected via fiber PTP. I want to import this into SQL for ...
1
vote
0answers
15 views

Clean install of Debian 8.3 missing PermitRootLogin in ssh_config (can't ssh root login) [migrated]

I just installed a new vm of Debian from a netinst ISO, everything went fine. But when I went into /etc/ssh/ssh_config to change the PermitRootLogin setting to yes, it wasn't there, so I added it, ...
0
votes
0answers
44 views

Cannot telnet to port from Azure VM

I have an Azure VM setup and I have a program that SSH's out from that VM to port 7022 on my supplier's server. Sometimes I am unable to connect to this port and this can last for up to 30 minutes or ...
0
votes
1answer
22 views

SSH remote execute command with special chars

Im trying to run this from my shell: I have a bunch of machines, so i have this in my .bash_profile function sssh() { ssh -i ~/.ssh/supersecret.pem $@ } This is the command: export ...
0
votes
0answers
16 views

Fabric failing to connect on EC2 Instance using public key

I'm deploying an app using fabric, everything goes fine with to others servers but when the EC2 instance turn come i got this logs, I also configure the same public key for the same user on both ...
-1
votes
0answers
5 views

Getting utf-8 support in screen via ssh [migrated]

If I ssh from iTerm2 on my macbook to my vps and then run the command screen -r irc, which is running weechat, utf-8 works properly. :) However, I’ve set up an alias for this on my mac: $ alias | ...
0
votes
2answers
28 views

Unable to login with SCP using ppk file

I need it to connect to a linux server form a windows using a .ppk file to connect. The steps are: Generate a id_rsa key in server linux using ssh-keygen. Copy the id_rsa file to a windows machine ...
0
votes
2answers
38 views

Does ssh autoload everything in `.ssh`?

According to the following post, it seems when you ssh into a box, by default it will load all keys (public and private) in ~/.ssh for authenticating on the server I am connecting to. Is this true? ...
1
vote
1answer
13 views

Can't get SSH ProxyCommand to work (ssh_exchange_identification: Connection closed by remote host)

I'm unsuccessfully trying to use SSH ProxyCommand to connect to a server via a jump box. My config is below, I'm running this command: ssh 10.0.2.54 -F ssh.config Host x.x.x.x User ...
0
votes
0answers
35 views

SSH ProxyCommand not working with ansible_ssh_common_args

I'm using a jump box (server A) to access server B. As per the ansible docs here, I have the following: ansible_ssh_common_args: '-o ProxyCommand="ssh -W %h:%p -q ec2-user@A.A.A.A"' Server B is, ...
0
votes
0answers
18 views

sshd locks up when multiple jobs are sent to it from many servers.

I have configured an AWS backup server where 20 servers send data and sync folders every hour (at a few minutes intervals) I have a script that does rsync for this purpose and then sends a few ssh ...
2
votes
1answer
31 views

Security implications when only allowing logins via key and UsePAM setting is 'yes'?

When setting up a new server, I generally want to allow logins only via key authentification and not from the root user. Therefore, I edit the sshd_config like this: I change 'PermitRootLogin' to ...
2
votes
1answer
35 views

SSH X11 forwarding is extremely slow over VPN

I'm using an VPN (with OpenVPN) to keep access between my home and work computers, and today I tried to ssh-forward an app which is GUI-only, and I found this to be terribly slow. I've used SSH X11 ...
-3
votes
1answer
25 views

Run Windows Explorer on remote system from its cygwin shell through SSH [closed]

Please consider my problem :) 1) I Have a Windows 7 - x64 system with cygwin installed and SSHD running. 2) From another Windows machine , from futty, SSH to the above machine. 3) Command "TaskKill ...
0
votes
1answer
19 views

Cannot ssh to EC2 instance copied across availability zones

I originally created an EC2 instance in US-East and wanted to move it to US-West. I stopped the instance, created an image of the AMI, and then copied it to the US-West availability zone. After ...
-2
votes
1answer
31 views

SSH — allow login with public key only / disable login with password [duplicate]

I am quite new to server administration and I am not doing it very often. Today I wanted to secure my server, especially the ssh server. Is it possible to configure ssh so that only users can login if ...
-1
votes
0answers
3 views

CentOS 7 Minimal Installation on Hyper-V: X11 forwarding using Xming and PuTTy error, xhost: unable to open display “:0.0” [migrated]

Before telling me that there are a lot of post relates to X11 forwarding error, let me put you in context of the things that I have done: I have installed the following packages: yum install -y ...
0
votes
1answer
53 views

I can't block port 22 to a specific IP (windows server 2008R2)

I'm using Bitvise SSH server and recently get a connection attempt every minute from one IP number. Bitvise terminates the connection immediately, but it's been going on every minute for days and I ...
-1
votes
0answers
19 views

Connection refused when connecting through domain

When I connect through domain, I get Connection refused when connecting through SSH. When I connect through the IP, it works fine.