Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.

learn more… | top users | synonyms (2)

0
votes
2answers
22 views

SSH tunneling between two server

I'm trying to create SSH tunnel between two VPS for Secure MySQL Replication. I follow these steps (read only Step 1: Setup SSH Tunneling): ...
0
votes
1answer
22 views

ssh unable to login as root

I am unable to login as root via ssh. i have also set the password usin sudo passwd and sudo passwd root no luck. Any recomendations on how to solve this issue? # Package generated configuration file ...
0
votes
2answers
33 views

Trying to ChrootDirectory an SFTP user to their home directory

I have followed a few examples of how to do this, all of them end up with modifying sshd_config to Subsystem sftp internal-sftp Match User chubbyninja ChrootDirectory %h AllowTCPForwarding ...
0
votes
1answer
22 views

SSH access on public IP pool

I am creating VPS solution and currently network policy for Virtual Machines provisioning provides each VM with one public IPv4 address from the reserved pool of 255 addresses. I will need to provide ...
0
votes
1answer
19 views

SSH connection lost after random time interval, both sides claim the other closed the connection

I'm connecting to a virtual solaris machine from the windows host system running virtual box. This works for a while but after some time the connection vanishes. The stange thing is that sshd claims ...
0
votes
1answer
24 views

Forgot user password and disabled root ssh signin Ubuntu 14.04 server

First I need to say that I'm not pro Linux admin but web master trying to configure server. Though I am learning. I disabled root ssh login in sake of security and then I forgot to save user account ...
0
votes
0answers
17 views

Google Cloud: Connection Refused upon reset/shutdown

I recently signed up with Google Cloud to host a small VM instance. I created a basic instance with Ubuntu Server 14.04 LTS as its OS, installed apache2, MySQL and Wordpress to it and worked on a ...
1
vote
2answers
48 views

Locally deny login to users authenticated via LDAP

I have a RedHat Linux server that are is use for more than 1000 users Users names are coming to the server via LDAP protocol, so login authentication is from the LDAP My question: is it possible to ...
0
votes
0answers
25 views

Logging into an AWS EC2 instance from another machine in EC2

I have a few AWS EC2 instances that can SSH into each other. They are not in a VPC as this is an older AWS account and was active before VPC. One particular EC2 instance (zeta) is not able to SSH into ...
0
votes
0answers
19 views

Forcing a password change on OpenBSD

On OpenBSD 5.6 I need to provision a number of user accounts with default passwords. I would like users, upon their first SSH login, to be forced to change their passwords from the default. On CentOS ...
1
vote
0answers
18 views

How to know if a bastion or vpn is the right solution? [on hold]

How do you choose between using a bastion or VPN when providing access to a vlan? I have seen many different setups, but don't have a good idea on how to make a less subjective selection. Is there a ...
0
votes
0answers
15 views

force ssh and web server though certain interface [on hold]

I'm running Ubuntu Server, I currently have a VPN to tunnel all my traffic thought it setup. It works great no issues but this one. I can connect ssh,web server,etc on local lan but when I port ...
0
votes
1answer
19 views

running a remote command with ssh seems to hang all other network activity

I'm running the following command to backup a mysql database from a remote machine: ssh root@example.com 'mysqldump mainserver' | gzip -c > mainserver.sql.gz I've timed the command and it seems ...
0
votes
1answer
48 views

Executing command remotely on another linux server from a shell script

I have a shell-script which extract details from a log file between two dates and executes a command on the output to generate some report.The log files are on different server and scripts are ...
0
votes
1answer
28 views

Adding new user to AWS EC2 - Permission denied (publickey)

I am trying to set up a new user for my AWS EC2. I have followed step by step this tutorial but I get Permission denied (publickey) error. I tried as well creating a newuser-key-pair.pem from AWS EC2 ...
-1
votes
1answer
22 views

Fastest way to copy small files over secure network without regard for file mod times or size

I want to sync files in dir1 and dir2 (two different servers). I do not care if the file sizes or modification times differ. EXAMPLE: dir1 contains file1, file2, file3, file4, and dir2 contains ...
0
votes
1answer
24 views

Is it normal for the identity of a host to change after enabling SSL?

I logged in to a known host - ssh username@example.com. I did a2enmod ssl and I generated a CSR to enable SSL on one of the virtual hosts on the server. From a separate terminal tab, I tried to do an ...
0
votes
0answers
15 views

Can OS X Server Wiki show Active Directory Files?

I have active directory (2008R2) and an OS X Server (Yosemite) setup. OSX Server recognises the Active Directory and when I SSH into it with an AD account I am able to see my home folder. Now my aim ...
0
votes
1answer
28 views

The authenticity of the server when accessing it through a domain name instead of an IP

When I do ssh username@123.123.123.12, I log into the server fine. However, if I do ssh username@example.com, where example.com points to the same IP addrees, I get: The authenticity of host ...
0
votes
0answers
32 views

Forgot password in remote ubuntu

I have a remote server with Ubuntu. I have ssh key for it and can login to this machine from my computer without password. Now I like to sudo, but I forgot my password for it. How can I get or ...
0
votes
0answers
17 views

Can I use keys from both an ssh-agent running on an SSH remote and also from a forwarded agent? [closed]

I have an ssh-agent holding key A, running on my local machine. I connect with SSH to a remote machine, with agent forwarding on. That remote machine has an ssh-agent running that is holding key B. ...
-2
votes
1answer
49 views

SSH connection manager on Mac OSX (An alternative to PuTTY/MTPuTTY?) [closed]

On a Windows PC, I always found it helpful to store SSH connection details in a tool like PuTTY (and in extension MTPuTTY). It offers: - a clean overview of which hosts I connect to - terminal ...
1
vote
0answers
11 views

Sync failure between Gerrit & Github for Windows client

I've set up a POC Gerrit server, and am able to push to it via the Git Command Line. I'm trying to set it up so that less experienced colleagues can use the Github for Windows client to sync commits ...
2
votes
0answers
25 views

Using Windows NPS for Cisco router aaa authentication - is this safe?

I setup RADIUS authentication on a Cisco router and pointed it to a Windows NPS. Now I can ssh into the router my with AD account YAY. But now that I got it working I'm going over the settings to ...
2
votes
0answers
57 views

How to change the sshd listen address on Mac OS X?

This question is similar to the question here, about changing the sshd port on Mac OSX, but instead of changing the port number, I want to change the listen address of my Mac's ssh server. Setting it ...
0
votes
1answer
35 views

Connecting to a pool member over SSH w/ a host certificate good for the pool name only

I'm using OpenSSH certificates for a pool of hosts. That is to say, in ~/.ssh/known_hosts, there's an entry that looks thus: @cert-authority service.redacted.com ssh-rsa ... ...and ...
0
votes
0answers
26 views

“Permanently added the RSA host key” what does it mean? [migrated]

I'm very new to Unix and things around it, particularly for this question is SSH and authentication. I know that I can create identities (create a pair of public/private key), put it into ssh-agent ...
1
vote
1answer
22 views

What's the downside of disabling PAM in OpenSSH if only public-key login is allowed?

/etc/ssh/sshd_config by default has the following line UsePAM yes I read through available documentation and came to the conclusion that PAM is not used if I only use public-key login. What ...
0
votes
3answers
62 views

Alternatives to Kerberos for passwordless server access

I have a bunch of Linux servers and three Windows servers 2008 R2. I would need a solution which would enable passwordless SSH login from each of those servers to all others. I could do this by ...
0
votes
1answer
47 views

Enable SSH on public IP [closed]

I've just taken the control of a server. This server worked in a private environment, in a VPN, accesible via a private IP. Now it's public and linked to a domain name. I can access SSH via the VPN ...
0
votes
0answers
16 views

How to tell if PuTTY is using my ssh key from Pageant or not [migrated]

I'm trying to set up an ssh key and use it via PuTTY/pageant. I've added the key into my .ssh/authorized_keys file, I have my key loaded in pageant, and I have "Attempt authentication using Pageant" ...
0
votes
0answers
25 views

`ssh-add -l` doesn't always print key paths

Recently, at least as of openssh 6.7_p1, ssh-add -l stopped, in some circumstances, printing the path to some ssh keys loaded in the agent. For example: 13:41:23 me@n00:~ $ ssh-add -l 256 ...
0
votes
0answers
4 views

SSH to a local VirtualBox with Ubuntu [migrated]

I installed an Ubuntu server image on VirtualBox. Next I configured port forwarding 2222=>22. When I use the following command things work ok : ssh -p 2222 java@127.0.0.1 Password is prompted and ...
0
votes
0answers
26 views

pam_mount not working when logging in from ssh or console

okay so i configured pam_mount on my centos 6 machine as i did on my centos 7 and 5 machines. But when i login locally or via ssh, pam_mount can't mount my home dir. when i login with a local user, ...
2
votes
1answer
82 views

Why is sshd engaging PAM still?

Background/Behavior is: if you ssh to box via and GSSAPI/Kerberos succeeds and you have a local user in /etc/passwd, you login fine per below PAM config. All Good there. But if you don't have a ...
0
votes
1answer
16 views

“git pull” fails, but only remotely?

When I try to ssh -C user@my_server 'cd /home/me/my_repo' it works. When I try to ssh user@my_server, then cd /home/me/my_repo' and then git pull it works. But when I try to ssh -C user@my_server 'cd ...
1
vote
0answers
71 views

ssh-add -D deletes keys on originating host [migrated]

I have an ssh-agent running on my macbook. I use ssh -A and carry the keys forward to my redhat box. The thing that surprises me though is that when I do a 'ssh-add -D' on the redhat box, the keys ...
0
votes
1answer
57 views

LDAP users can't ssh

When I ssh to my CentOS 6 server with root account, everything is working fine. But when I try with an LDAP user, I get permission denied. I tried logging in with root, and then su to a LDAP user, to ...
1
vote
0answers
36 views

Weird proxy behaviour

I recently installed a computer in a network that is behind a proxy, I configured a reverse ssh tunnel to connect to it, and tunneled the ssh connection with corkscrew to connect to a server, this ...
13
votes
3answers
2k views

Is there a safe way to store passwords used for ssh by a script?

So first, I know, I should use key auth with SSH. No need to explain me that. Issue here is that I have a (big) bunch of servers, and I need to have a script be able to connect each of these. I use ...
0
votes
1answer
27 views

WinSCP, Debian & Sublime Text - File change not recognised by server

I'm connecting to a Debian server using WinSCP (with private key not password if that makes a difference). It's setup so that when I double click on a file it opens in Sublime Text (v3, Build 3065). ...
0
votes
0answers
33 views

CentOS - how to chroot sftp and have mysql as shell

I have a user who I would like to have sftp access to one folder only (chrooted). Also he logs in with ssh, I would like him to only have access to mysql. I am able to chroot the users sftp (by ...
-1
votes
1answer
33 views

Pushing to Bitbucket with SSH works, but without a private key on my server

How is it that I am successfully pushing to Bitbucket, when there is no private key file on my Digital Ocean server? When I created my Digital Ocean server, I provided it with a public key. This key ...
1
vote
1answer
102 views

ssh server config - input_userauth_request: invalid user

I have a problem configuring my SSH server to be able to log in with public key, without password. tail -f /var/log/auth.log gives Feb 6 14:56:06 ubuntu sshd[24654]: rexec line 26: Deprecated ...
0
votes
0answers
55 views

Executing a remote command over an SSH tunnel

I have created a reverse SSH tunnel from computerB to computerA. On computerA I have a script (r1on.sh) with the following content: #!/bin/bash echo 'r1on' > command.log /usr/bin/ssh -p2222 ...
-1
votes
0answers
19 views

To use ssh-id-copy do you need both id_rsa.pub and id_rsa? [migrated]

I am trying to setup a second access ssh key for a friend. He sent me his id_rsa.pub. ssh-copy-id -i id_rsa.pub root@123.123.123.123 /usr/local/bin/ssh-copy-id: ERROR: failed to open ID file ...
0
votes
1answer
27 views

nfs mount passwordless login

Setup: OS : CentOS5 node 1 : 172.16.1.1 sandbox1.local node 2 : 172.16.1.2 sandbox2.local The nodes have the hostnames in the hots file. Pinging to each other works fine. Problem: My home is ...
0
votes
1answer
20 views

ssh tunneling on the same machine

I am pretty lost with that. I have a machine with multiple adaptors, wlan0, eth0 and vpn_tun10. I want to set a tunnel on this machine to listen to request on the port 1080 and route them to the same ...
-1
votes
0answers
14 views

Unable to port forward to VM through loopback (127.0.0.1) [migrated]

I have a somewhat strange issue on my PC where I am unable to reach a Virtual Box VM with port forwarding through 127.0.0.1. It will however work through 127.0.100.1, or 127.x.x.x for that matter. I ...
8
votes
1answer
676 views

reboot multiple machines remotely

I need to reboot a number of machines remotely. Normally I just issue for host in <hostlist>;do ssh ${host} 'sudo shutdown -r now';done But I want give the users some time before the ...