Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.

learn more… | top users | synonyms (2)

1
vote
2answers
369 views

How to SSH to remote server using private key on linux?

I have been trying to connect to a remote server using my private key file on terminal but it doesn't seem to work. I don't understand why. Here is how I do it: $ ssh -i private.ppk oap@10.20.0.11 ...
0
votes
0answers
17 views

One SSH client can only connect through port 22, not other ports, on any remote server

I have a client server under Debian Wheezy. It can not connect to a server that has a special opened port for ssh (let us say 2222). All other clients I use (from other sites) can connect to my ...
0
votes
1answer
7 views

apt-get maddeningly doesn't work with tsocks proxy set up with ssh

I have a machine that cannot access the internet, yet can connect to a machine that does. I don't want to use a proxy server, I've been told that I can just use ssh. So I've proceeded simply by ssh ...
-1
votes
0answers
15 views

need to assign mysql root user to database with full permission [on hold]

I have a Centos 6 box with MySQL 5.6 There's a database control panel script I bought that requires full root access to MySQL. I can't figure out via CLI how to greant the mysql root user the full ...
0
votes
0answers
18 views

Host verification with cross-realm kerberos auth and ssh

I have configured kerberos to cross-realm trust(MIT+AD) and here is what happens: When I do: kinit foo@MIT-REALM.COM ssh foo@krbservice Everything works fine. When I do: kinit bar@AD-REALM.COM ...
-1
votes
0answers
6 views

Passwordless login for AFS

Is there a way to have passwordless login for a system running AFS? I tried a ssh key pair, and although I logged in with no issue, I did not get an AFS token. Every 24 hours, I need a new AFS token, ...
-2
votes
0answers
13 views

dadcomputer.home appears as dadcomputer.lan when logging in to another computer [on hold]

I changed ADSL router recently (from BT home hub 4 to technicolour tg582n) and now dadcomputer.home (ubuntu) appears as dadcomputer.lan when logging into my freeciv server, or SSHing into another ...
1
vote
1answer
19 views

Authenticate Users based on AD group membership. Ubuntu 14.04 , Cant find help anywhere

Been Googling for two days now. I am not new to Linux, but am new to AD and using it in Linux. So. I have an AD system ( not run be me ) and its joined happily. I followed this procedure: ...
-1
votes
1answer
22 views

Can scp maintain original file structure on remote server?

Supposing we have the following files to copy to a remote server: /dir/test.php /dir/inc/inc.php I now want to copy both files to the remote server as follows: cd /dir/ scp test.php inc/inc.php ...
1
vote
1answer
31 views

OpenSSH use (public key or password) + google authenticator

I want to allow these two authentication types: public key + google authenticator OR password + google authenticator. I have the following in my sshd_config: AuthenticationMethods ...
0
votes
0answers
5 views

Galera Rsync SST Secured via SSL/SSH

Is it possible to secure Galera Cluster SST via rsync with SSL/SSH? This page suggests it is not, specifically the following quote: Unlike rsync, xtrabackup includes support for SSL encryption ...
1
vote
1answer
27 views

Connection to postgresql hangs over SSH tunnel on OSX

Trying to connect to a remote PG server on OSX but it keeps timing out. First, I set up the tunnel: ssh -L 5433:serverip:5432 user@serverip Then in a separate terminal I attempt to connect to PG: ...
1
vote
2answers
40 views

Central control for SSH access to AWS instances

What are some approaches or best practices for managing SSH access by many devops to many AWS instances? I'd like to have the ability to e.g. add or remove access for a user to multiple instances ...
0
votes
0answers
29 views

Can't SSH to remote fedora server after reboot [on hold]

I have a dedicated server on Fedora 23 I rebooted 3 weeks ago and since that time, I can't login, I'm refused on the server. I can have a rescue mode and then I try to "chroot" drives I mounted. I ...
0
votes
1answer
40 views

Dumping command output from SSH session to procurve

I am trying to get information from the command "show mac-address" out of a collection of 12 procurve switches in 2 different locations all connected via fiber PTP. I want to import this into SQL for ...
1
vote
0answers
15 views

Clean install of Debian 8.3 missing PermitRootLogin in ssh_config (can't ssh root login) [migrated]

I just installed a new vm of Debian from a netinst ISO, everything went fine. But when I went into /etc/ssh/ssh_config to change the PermitRootLogin setting to yes, it wasn't there, so I added it, ...
0
votes
0answers
43 views

Cannot telnet to port from Azure VM

I have an Azure VM setup and I have a program that SSH's out from that VM to port 7022 on my supplier's server. Sometimes I am unable to connect to this port and this can last for up to 30 minutes or ...
0
votes
1answer
22 views

SSH remote execute command with special chars

Im trying to run this from my shell: I have a bunch of machines, so i have this in my .bash_profile function sssh() { ssh -i ~/.ssh/supersecret.pem $@ } This is the command: export ...
0
votes
0answers
14 views

Fabric failing to connect on EC2 Instance using public key

I'm deploying an app using fabric, everything goes fine with to others servers but when the EC2 instance turn come i got this logs, I also configure the same public key for the same user on both ...
-1
votes
0answers
5 views

Getting utf-8 support in screen via ssh [migrated]

If I ssh from iTerm2 on my macbook to my vps and then run the command screen -r irc, which is running weechat, utf-8 works properly. :) However, I’ve set up an alias for this on my mac: $ alias | ...
0
votes
2answers
27 views

Unable to login with SCP using ppk file

I need it to connect to a linux server form a windows using a .ppk file to connect. The steps are: Generate a id_rsa key in server linux using ssh-keygen. Copy the id_rsa file to a windows machine ...
0
votes
2answers
38 views

Does ssh autoload everything in `.ssh`?

According to the following post, it seems when you ssh into a box, by default it will load all keys (public and private) in ~/.ssh for authenticating on the server I am connecting to. Is this true? ...
1
vote
1answer
13 views

Can't get SSH ProxyCommand to work (ssh_exchange_identification: Connection closed by remote host)

I'm unsuccessfully trying to use SSH ProxyCommand to connect to a server via a jump box. My config is below, I'm running this command: ssh 10.0.2.54 -F ssh.config Host x.x.x.x User ...
0
votes
0answers
28 views

SSH ProxyCommand not working with ansible_ssh_common_args

I'm using a jump box (server A) to access server B. As per the ansible docs here, I have the following: ansible_ssh_common_args: '-o ProxyCommand="ssh -W %h:%p -q ec2-user@A.A.A.A"' Server B is, ...
-2
votes
0answers
16 views

Blocked from my own VPS? [closed]

Yesterday I was experiencing a small DDoS attempt. I have blocked them by installing some .sh scripts to my DirectAdmin that gave me the possibility of blocking various IP addresses. Now I tried to ...
0
votes
0answers
17 views

sshd locks up when multiple jobs are sent to it from many servers.

I have configured an AWS backup server where 20 servers send data and sync folders every hour (at a few minutes intervals) I have a script that does rsync for this purpose and then sends a few ssh ...
2
votes
1answer
29 views

Security implications when only allowing logins via key and UsePAM setting is 'yes'?

When setting up a new server, I generally want to allow logins only via key authentification and not from the root user. Therefore, I edit the sshd_config like this: I change 'PermitRootLogin' to ...
2
votes
1answer
29 views

SSH X11 forwarding is extremely slow over VPN

I'm using an VPN (with OpenVPN) to keep access between my home and work computers, and today I tried to ssh-forward an app which is GUI-only, and I found this to be terribly slow. I've used SSH X11 ...
-3
votes
1answer
24 views

Run Windows Explorer on remote system from its cygwin shell through SSH [closed]

Please consider my problem :) 1) I Have a Windows 7 - x64 system with cygwin installed and SSHD running. 2) From another Windows machine , from futty, SSH to the above machine. 3) Command "TaskKill ...
0
votes
1answer
19 views

Cannot ssh to EC2 instance copied across availability zones

I originally created an EC2 instance in US-East and wanted to move it to US-West. I stopped the instance, created an image of the AMI, and then copied it to the US-West availability zone. After ...
-2
votes
1answer
31 views

SSH — allow login with public key only / disable login with password [duplicate]

I am quite new to server administration and I am not doing it very often. Today I wanted to secure my server, especially the ssh server. Is it possible to configure ssh so that only users can login if ...
-1
votes
0answers
3 views

CentOS 7 Minimal Installation on Hyper-V: X11 forwarding using Xming and PuTTy error, xhost: unable to open display “:0.0” [migrated]

Before telling me that there are a lot of post relates to X11 forwarding error, let me put you in context of the things that I have done: I have installed the following packages: yum install -y ...
0
votes
1answer
46 views

I can't block port 22 to a specific IP (windows server 2008R2)

I'm using Bitvise SSH server and recently get a connection attempt every minute from one IP number. Bitvise terminates the connection immediately, but it's been going on every minute for days and I ...
-1
votes
0answers
19 views

Connection refused when connecting through domain

When I connect through domain, I get Connection refused when connecting through SSH. When I connect through the IP, it works fine.
1
vote
0answers
16 views

Debug slow lan (ssh, nfs) file transfer

I've got two linux boxes attached to a gigabit switch. They both have gigabit NICs, cables are cat7. Testing the network with iperf shows a fast connection but transferring files with rsync, scp, or ...
1
vote
2answers
41 views

Does known_hosts support comments?

I find the ~/.ssh/known_hosts file a bit hard to read. It'd help if I could add comments to it so I thought I should ask if that's possible.
-2
votes
1answer
24 views

Is it possible to “sudo su” using ssh in bash? [duplicate]

#!/bin/bash USERNAME=ksmith HOSTS="linux1" YUPDATE="sudo yum -y update" FIXDATE="sudo -u echo -e 'ZONE="America/New_York"\nUTC=true' > /etc/sysconfig/clock" for HOSTNAME in ${HOSTS} ; do ssh -tt ...
1
vote
1answer
64 views

hpn-ssh on Debian 8 (Jessie)

I'm refering this this project: https://www.psc.edu/index.php/hpn-ssh I'm running Debian 8, with OpenSSH_6.7p1 Debian-5+deb8u1, OpenSSL 1.0.1k 8 Jan 2015 and hpn-ssh doesn't have a patch for this ...
0
votes
2answers
50 views

Tunnelling through an IP alias

I have a server machine with a dedicated IP and several IP aliases. It has a single network interface and on it there are multiple IPs "attached". So let's say IP1 is the main ip but I also have IP2 ...
1
vote
1answer
80 views

How to use Ansible to manage remote lxc containers?

How can I use Ansible to execute tasks on lxc containers on a remote server? We use Ansible to deploy our code on several servers (physical and virtual machines). Until now, every instance had a ...
0
votes
0answers
26 views

kerberos authentication to linux from windows

We have mostly unix/linux server in our data center. We access them from our workstations running windows using putty. All the workstations are part of an AD domain but the servers are not. Kerberos ...
0
votes
1answer
19 views

What is right way to tmux with fabric django?

1.I am doing this on local machine tmux new -s amazon then I ssh in to the server into tmux window shh user@amazon then I detach it ctrl b-d Into fabfile.py I am doing like this local("tmux ...
0
votes
1answer
35 views

Can VPN authentication be used for SSH?

Can VPN authentication details be re-used for SSH access? Context: I'm looking into the feasability of having SSO to authenticate with a VPN and then be able to log into a server via SSH without ...
0
votes
0answers
54 views

Why is my private key accepted on SSH only after I login on the target machine?

I have an interesting situation which I'm not even sure where to begin to investigate from. I have a Ubuntu 12.04 server with SSH locked down to PK-auth. When I reboot my server, and try to SSH into ...
0
votes
0answers
30 views

How to copy ssh keys on a new VM

Hello guys (and girls) I'm having the following situation: -new CentOS6 VM (created within a Hyper-v failover cluster), joined Windows AD via script I need to bootstrap this new VM in chef server ...
0
votes
1answer
44 views

Ansible: Permission denied (publickey, password)

I'm not able to connect to a host in Ansible. This is the error: 192.168.1.12 | UNREACHABLE! => { "changed": false, "msg": "ERROR! SSH encountered an unknown error during the ...
0
votes
0answers
7 views

how to upgrade brew ssh after recent client exploit [migrated]

Since the recently discovered SSH client exploit here: http://undeadly.org/cgi?action=article&sid=20160114142733 I'm running OS X El Capitan 10.11.1 I wanted to take action to secure myself. In ...
3
votes
0answers
89 views

SSH - 1s hang at “Entering interactive session” (Not DNS; possibly SELinux related)

I'm having an issue on CentOS 6.7 where SSH logins are 1s more than any non-6.7 machines on this network (e.g. 7.2, 5.11). Running debugging on the client side showed the hang at "Entering interactive ...
-2
votes
1answer
28 views

Prevent users from going upward from their home directories [closed]

I guess this questions has been asked a few times, but my needs are very specific, so I'll take my chance in asking. I have three users, which each have a folder in /var/share, soft linked to there ...
2
votes
2answers
37 views

Setup an ssh account that can only be used for a socks5 proxy

I have an arch linux machine behind a firewall. I can open a port forwarding for the ssh port. I would like to create a user that can be used only for a socks proxy. ssh -N -D 5000 user@server -p9000 ...