Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.

learn more… | top users | synonyms (2)

0
votes
2answers
29 views

ssh authentication doesnt allow public key

Im having a problem with the authentication of SSH on one of our test servers. I have configured the sshd_config correctly yet the the Authentication method shows only password auth. [root@[client] ...
-2
votes
0answers
23 views

Use client ip adress from server

How would you do this: You have a server with a website, and this website offers a service to log in to a few other online accounts on behalf of a website visitor. The only problem is maintaining the ...
0
votes
1answer
10 views

Is it possible to specify multiple upstream ssh proxys for openssh in linux

Is it possible to configure openssh to use a specific upstream ssh server when connecting to a specific IP range in order to have a single ssh server that client connect through to get to multiple IP ...
1
vote
1answer
21 views

ssh bind address through multiple hosts

I'm trying to ssh through multiple hosts which works with no problems like so: ssh -t -t user1@host1 ssh -t -t -p 222 user2@host2 Now I would like to use local host for access to a third host and I ...
-3
votes
0answers
16 views

How to forward firefox graphics from remote to local system? [on hold]

I have installed CentOS7 in virtualbox through vagrant. Both guest and host operating system is CentOS7. Guest operating system is minimum installation of centos7 with no graphics. On both system I ...
0
votes
0answers
8 views

bulk enabling ssh on multiple macs in network

Is there a more automated way to enable ssh functionality on all the macs in a network. At the moment our solution is to manually do this machine by machine... this isn't ideal. This is part of the ...
0
votes
2answers
58 views

commands in authorized_keys

I've created an SSH non root/non super user with an authorized_key to remotely login to my server and shut it down however, i'm trying to do this from within the authorized_key file by using the ...
0
votes
1answer
16 views

Two factor authentication & Bitvise

On my server, Google two-factor authentication is up&running. I can login with the CLI from my desktop-ubuntu to the server. So, it's working. However, how can i login under Windows with the ...
1
vote
1answer
33 views

Access to local dhcp server via ssh [on hold]

I constructed dhcp server on centOS6 (which has a ipaddress 192.168.0.0) to allocate ip address, 192.168.0.5, to other local node. When i use "service network restart" on client node and type ...
-3
votes
1answer
20 views

How to remove SSH public key? [on hold]

I have an embedded device with Linux on board and ssh daemon. Users connect to that device using public key authentication. They generate rsa keys, when send it to me and I add them to ...
1
vote
1answer
35 views

Many failed ssh logins even with password authentication off

There are some bots trying to ssh (hundreds per day) all my servers at digital ocean. On /etc/ssh/sshd_config I´ve set: PermitRootLogin without-password PermitEmptyPasswords no ...
0
votes
0answers
57 views

SSH server on embedded device is not giving me a shell after logging in

I have a Solar-Log device which is presumably build upon an IPC@CHIP by Beck IPC. On this device I found several open ports, among which an SSH server on port 22. From Googling I found out this was ...
1
vote
2answers
46 views

Shutting down host from within jail

I've created a jail with ssh using Finch-Freebsd on a NAS4FREE and added a local non super user to access the jail via ssh. I want to be able to grant this user limited shell access specifically to ...
1
vote
0answers
15 views

linking a local windows git repository to the aws linux git server

I want to create a git server on my aws linux server so that whenever I want to update my website in the public_html I dont have to manually transfer files to the server, I want to make use of git, ...
-3
votes
2answers
36 views

Modifiying a server securely [on hold]

I wanted to purchase a dedicated server to host my site. I am a newcomer to this and wanted to know if I hired someone to secure the server and SSH for me, will that put me at risk? Or is there an ...
13
votes
4answers
628 views

SSH into NAT'd servers on the same public IP address

I am trying to SSH from in office X to a few Linux boxes in office Y. The Linux boxes in office Y are behind NAT and each run on their own ports. I can successfully reach all of them through SSH, but ...
-3
votes
2answers
45 views

How do I block SSH connections except those originating from within a /29 block of IP's or LAN? (CentOS 7 and Ubuntu 12) [closed]

I see thousands of failed login attempts on our servers and want to do what I can to prevent a successful one from the bad guys. I want to block anyone not originating from a /29 block we own from ...
0
votes
0answers
21 views

SSH over WAN through reverse proxy to LAN git server

We have an URL to our external IP to our gateway that connects to a CentOS nginx reverse proxy behind which sits our Ubuntu Gitlab server on the company LAN Through this we currently have http access ...
1
vote
1answer
26 views

ssh from Server to Client through PPTP tunnel

I was able to set up a small PPTP VPN with a Server and two clients. All machines run Ubuntu 14.04. The connection works great and is reliable. I can ping all machines from everywhere. Also HTTP ...
3
votes
1answer
29 views

How to show the host/configured/default ssh “configuration”?

According to my ssh_config file... Configuration data is parsed as follows: command line options user-specific file system-wide file With that said, (and yes, I know, I could ...
0
votes
1answer
36 views

Netstat showing multiple connections for on ssh login

I connect to my server via ssh. I am the only person who has access to connect to the server. After connecting via ssh, I run the following command: sudo netstat -tupn The output includes the ...
1
vote
0answers
21 views

HTTP connection to SOCKS [closed]

I have access to some HTTP proxies with different IPs. An app only accepts SOCKS connections. I'd like to set up a network like this where the client (laptop) receives the ip of http proxy but ...
0
votes
0answers
9 views

scp causes all other traffic through router to stop? [migrated]

Not sure what I'm seeing here, but when I scp a file through a bastion host into an AWS EC2 server, all other traffic through my home router (Asus RT-AC66R) stops. The mac laptop doing the scp-ing ...
0
votes
0answers
10 views

Reversed ssh through httptunnel

I used ssh tunnels (via ssh -R ...) to connect machines in uncertain network environments to a central server from where I can establish ssh connections to them. This way I already use two ssh ...
-1
votes
0answers
31 views

Browser based SSH is not working [closed]

In compute engine, the browser based SSH is not opening the shell. I have clicked on the SSH option under the VM instance of my project, and it keeps on retrying to open the shell. I am totally stuck ...
0
votes
1answer
36 views

Ansible synchronize hangs when executing inside ssh with delegate_to

The following task works fine when run directly from my machine. When I run it from a remote machine through SSH it hangs forever. This is the task: - name: deploy public directory ...
0
votes
1answer
36 views

Ansible, Vagrant, sudo and ssh-agent

So I've seen this question and added the Defaults env_keep+=SSH_AUTH_SOCK into my /etc/sudoers file but I am still unable to clone from github on my Vagrant box using sudo: true and sudo_user: ...
0
votes
2answers
40 views

Failed to start stunnel4 on Ubuntu 15.04

I get the following error starting stunnel4 service on Ubuntu 15.04: root@scw-d91ec7:~# service stunnel4 start Job for stunnel4.service failed. See "systemctl status stunnel4.service" and "journalctl ...
3
votes
3answers
260 views

How to SSH after remotely restarting Redhat and enter recovery mode

I need to enter recovery mode of my redhat box which is running remotely on a virtual machine. OS: RedHat 5 64-bit Enterprise Edition I am logged into the box using SSH. I can restart using the ...
1
vote
1answer
35 views

what does 'Logged in without disclosing public key - Intrusion?' mean?

I have set up a new debian vm and installed gitlab-ce. There is not really much more on the VM... Right from the beginning, the following msg started to show up in the auth.log: Mon 2015-08-24 ...
0
votes
1answer
38 views

Gitlab - “Server refused public-key signature despite accepting key” on a valid key

I need some help with keys. On my windows 7 machine I have created a pair of keys using Puttygen in order to connect to a private gitlab site. In the gitlab I've added my public key to my profile. ...
0
votes
2answers
13 views

What is the correct way to set up a VPN and then only allowing SSH from that VPN?

What is the correct way to set up a VPN and then only allowing SSH from that VPN? I want to set this up to remove my SSH from the open internet and only allow access via a dedicated VPN connection, ...
0
votes
0answers
7 views

Route SSH traffic based on domain with HAProxy [migrated]

I'm currently building my own little cluster at home and I'm trying to get SSH routing (load balancing) to work with HAProxy. I have figured out how to route HTTP traffic but I'm struggling with SSH. ...
1
vote
3answers
72 views

SSH and security guidelines

I'm trying to set-up an ubuntu server (14.04 LTS) following some security guidelines. One of these guidelines suggests to disable root user and create a new user that works as an administrator using ...
0
votes
0answers
17 views

How to communicate effectively over a jumphost?

My company uses a jumphost to get into a datacenter. For various reasons I want to use applications that communicate from my localhost, to ports on a machine or set of machines in that datacenter. ...
1
vote
1answer
20 views

Ubuntu production server access configuration recovery options

I have a cloud based server. I followed this guide to configure its security : http://www.rubytreesoftware.com/resources/securely-setup-ubuntu-1404-server The configuration of SSH is as follows: # ...
1
vote
1answer
23 views

How to add server's ECDSA to known hosts but have a chance to verify it?

Is there any way to add known ECDSA fingerprint to known_hosts without trying to log into server or force ssh to show the key and ask me for acceptance? When I'm trying to log-in for the first time, ...
1
vote
1answer
28 views

Copying ansible keypair public key to existing AWS instances

We have around 10 instances already running on AWS using my personal AWS keypair justin.pem. I am setting up an Ansible box, and generated a new AWS keypair called ansible.pem. I copied ansible.pem ...
0
votes
1answer
22 views

Pool of machines without authentication?

I am working on a cluster of linux machines. What I need is for authentication to not be needed between the machines in this cluster, but required from outside. I have considered the idea of setting ...
-4
votes
1answer
64 views

SSH broken due to chmod -R /* [duplicate]

I made a total mistake here. Anyway I ran chmod -R 777 /* and immediately regretted my decision. I had to boot into single user mode to and ran chmod -R 755 /etc/* in order to login to the server. ...
0
votes
1answer
30 views

VPC VPN SSH stalls at host verification

I have set up a VPN tunnel to our VPC on Amazon which consists of a public subnet with a couple machines, one NAT instance, and then several private subnets with an assortment of machines as well. I ...
-1
votes
2answers
45 views

“Software caused connection abort” after removing rule in iptables

I use Putty to connect to a Linux Red Hat machine on an AWS instance. My local computer is Windows 8. On the iptables I had to make a change and accidentally forgot to put back this default rule: -A ...
2
votes
2answers
32 views

Passwordless SSH Solaris->RHEL without ever prompting for password

I need make a script to SSH from a Solaris machine (A) to an RHEL machine (B) (actually it's Oracle Linux). Is it necessary to enter B's password at some point? I want to automate the process with ...
0
votes
1answer
38 views

How to set Cron Job to empty cached directory

I have plain Ubuntu based server, i want to set Cron job and it will empty my website cache directory in every 24 hours, due to massive records 'rm -rf ' not work, so manually i used 'find . -name '' ...
1
vote
0answers
17 views

How to enable SFTP error status in RHEL7.1?

Here is the problem that I am facing. I have a provisioning server which runs a perl script to upload and download certain files in a regular interval using sftp. The sftp command is executed in batch ...
0
votes
2answers
43 views

server1 & server2.. because w/same firm.. ssh connection shows private ip.. how to enforce public ip being using during ssh's?

server1 has a private and public ip. server2 has a private and public ip. generally.. if server1 to ssh to server2 .. server2 would recognize server1 by it's public ip. but because both servers are ...
0
votes
1answer
17 views

rdiff-backup with sudo on remote host: ListError Permission denied

I'm currently facing the following problem: I set up rdiff-backup on a backup machine running Ubuntu and would like to be able to backup my production machine running CentOS; My setup looks as ...
0
votes
0answers
34 views

Forward SSH to OpenVPN client via UFW

I have an Ubuntu 14 server that is running OpenVPN gateway and ufw. Let's call it Server A. I have an IP reservation for a permanently connected server (Server B). It always connects to OpenVPN and ...
0
votes
3answers
42 views

Connection refused on Ubuntu EC2 after EBS expansion

The problem After starting an Ubuntu 14.04 EC2 instance with expanded HD volumes, ssh-ing into it fails with Connection refused. The EBS expansion process One of my Ubuntu 14.04 EC2 machines was ...
2
votes
1answer
45 views

x2go passphrase prompt then authentication fail

Have read following post and although it had a similar title it wasn't the same problem: Able to connect by SSH, but not x2go From windows 7 client and windows 10 client at home to centOS6.7 remote ...