Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.

learn more… | top users | synonyms (2)

2
votes
1answer
26 views

Access to local dhcp server via ssh

I constructed dhcp server on centOS6 (which has a ipaddress 192.168.0.0) to allocate ip address, 192.168.0.5, to other local node. When i use "service network restart" on client node and type ...
-3
votes
1answer
19 views

How to remove SSH public key? [on hold]

I have an embedded device with Linux on board and ssh daemon. Users connect to that device using public key authentication. They generate rsa keys, when send it to me and I add them to ...
1
vote
1answer
32 views

Many failed ssh logins even with password authentication off

There are some bots trying to ssh (hundreds per day) all my servers at digital ocean. On /etc/ssh/sshd_config I´ve set: PermitRootLogin without-password PermitEmptyPasswords no ...
0
votes
0answers
37 views

SSH server on embedded device is not giving me a shell after logging in

I have a Solar-Log device which is presumably build upon an IPC@CHIP by Beck IPC. On this device I found several open ports, among which an SSH server on port 22. From Googling I found out this was ...
1
vote
2answers
40 views

Shutting down host from within jail

I've created a jail with ssh using Finch-Freebsd on a NAS4FREE and added a local non super user to access the jail via ssh. I want to be able to grant this user limited shell access specifically to ...
1
vote
0answers
14 views

linking a local windows git repository to the aws linux git server

I want to create a git server on my aws linux server so that whenever I want to update my website in the public_html I dont have to manually transfer files to the server, I want to make use of git, ...
-3
votes
2answers
34 views

Modifiying a server securely [on hold]

I wanted to purchase a dedicated server to host my site. I am a newcomer to this and wanted to know if I hired someone to secure the server and SSH for me, will that put me at risk? Or is there an ...
12
votes
3answers
547 views

SSH into NAT'd servers on the same public IP address

I am trying to SSH from in office X to a few Linux boxes in office Y. The Linux boxes in office Y are behind NAT and each run on their own ports. I can successfully reach all of them through SSH, but ...
-3
votes
2answers
41 views

How do I block SSH connections except those originating from within a /29 block of IP's or LAN? (CentOS 7 and Ubuntu 12) [on hold]

I see thousands of failed login attempts on our servers and want to do what I can to prevent a successful one from the bad guys. I want to block anyone not originating from a /29 block we own from ...
0
votes
0answers
19 views

SSH over WAN through reverse proxy to LAN git server

We have an URL to our external IP to our gateway that connects to a CentOS nginx reverse proxy behind which sits our Ubuntu Gitlab server on the company LAN Through this we currently have http access ...
1
vote
1answer
23 views

ssh from Server to Client through PPTP tunnel

I was able to set up a small PPTP VPN with a Server and two clients. All machines run Ubuntu 14.04. The connection works great and is reliable. I can ping all machines from everywhere. Also HTTP ...
3
votes
1answer
27 views

How to show the host/configured/default ssh “configuration”?

According to my ssh_config file... Configuration data is parsed as follows: command line options user-specific file system-wide file With that said, (and yes, I know, I could ...
0
votes
1answer
30 views

Netstat showing multiple connections for on ssh login

I connect to my server via ssh. I am the only person who has access to connect to the server. After connecting via ssh, I run the following command: sudo netstat -tupn The output includes the ...
1
vote
0answers
20 views

HTTP connection to SOCKS [on hold]

I have access to some HTTP proxies with different IPs. An app only accepts SOCKS connections. I'd like to set up a network like this where the client (laptop) receives the ip of http proxy but ...
0
votes
0answers
9 views

scp causes all other traffic through router to stop? [migrated]

Not sure what I'm seeing here, but when I scp a file through a bastion host into an AWS EC2 server, all other traffic through my home router (Asus RT-AC66R) stops. The mac laptop doing the scp-ing ...
0
votes
0answers
10 views

Reversed ssh through httptunnel

I used ssh tunnels (via ssh -R ...) to connect machines in uncertain network environments to a central server from where I can establish ssh connections to them. This way I already use two ssh ...
-1
votes
0answers
31 views

Browser based SSH is not working [closed]

In compute engine, the browser based SSH is not opening the shell. I have clicked on the SSH option under the VM instance of my project, and it keeps on retrying to open the shell. I am totally stuck ...
0
votes
1answer
34 views

Ansible synchronize hangs when executing inside ssh with delegate_to

The following task works fine when run directly from my machine. When I run it from a remote machine through SSH it hangs forever. This is the task: - name: deploy public directory ...
0
votes
1answer
32 views

Ansible, Vagrant, sudo and ssh-agent

So I've seen this question and added the Defaults env_keep+=SSH_AUTH_SOCK into my /etc/sudoers file but I am still unable to clone from github on my Vagrant box using sudo: true and sudo_user: ...
0
votes
2answers
28 views

Failed to start stunnel4 on Ubuntu 15.04

I get the following error starting stunnel4 service on Ubuntu 15.04: root@scw-d91ec7:~# service stunnel4 start Job for stunnel4.service failed. See "systemctl status stunnel4.service" and "journalctl ...
3
votes
3answers
258 views

How to SSH after remotely restarting Redhat and enter recovery mode

I need to enter recovery mode of my redhat box which is running remotely on a virtual machine. OS: RedHat 5 64-bit Enterprise Edition I am logged into the box using SSH. I can restart using the ...
1
vote
1answer
35 views

what does 'Logged in without disclosing public key - Intrusion?' mean?

I have set up a new debian vm and installed gitlab-ce. There is not really much more on the VM... Right from the beginning, the following msg started to show up in the auth.log: Mon 2015-08-24 ...
0
votes
1answer
30 views

Gitlab - “Server refused public-key signature despite accepting key” on a valid key

I need some help with keys. On my windows 7 machine I have created a pair of keys using Puttygen in order to connect to a private gitlab site. In the gitlab I've added my public key to my profile. ...
0
votes
2answers
13 views

What is the correct way to set up a VPN and then only allowing SSH from that VPN?

What is the correct way to set up a VPN and then only allowing SSH from that VPN? I want to set this up to remove my SSH from the open internet and only allow access via a dedicated VPN connection, ...
0
votes
0answers
7 views

Route SSH traffic based on domain with HAProxy [migrated]

I'm currently building my own little cluster at home and I'm trying to get SSH routing (load balancing) to work with HAProxy. I have figured out how to route HTTP traffic but I'm struggling with SSH. ...
1
vote
3answers
71 views

SSH and security guidelines

I'm trying to set-up an ubuntu server (14.04 LTS) following some security guidelines. One of these guidelines suggests to disable root user and create a new user that works as an administrator using ...
0
votes
0answers
17 views

How to communicate effectively over a jumphost?

My company uses a jumphost to get into a datacenter. For various reasons I want to use applications that communicate from my localhost, to ports on a machine or set of machines in that datacenter. ...
0
votes
1answer
19 views

Ubuntu production server access configuration recovery options

I have a cloud based server. I followed this guide to configure its security : http://www.rubytreesoftware.com/resources/securely-setup-ubuntu-1404-server The configuration of SSH is as follows: # ...
1
vote
1answer
23 views

How to add server's ECDSA to known hosts but have a chance to verify it?

Is there any way to add known ECDSA fingerprint to known_hosts without trying to log into server or force ssh to show the key and ask me for acceptance? When I'm trying to log-in for the first time, ...
1
vote
1answer
25 views

Copying ansible keypair public key to existing AWS instances

We have around 10 instances already running on AWS using my personal AWS keypair justin.pem. I am setting up an Ansible box, and generated a new AWS keypair called ansible.pem. I copied ansible.pem ...
0
votes
1answer
22 views

Pool of machines without authentication?

I am working on a cluster of linux machines. What I need is for authentication to not be needed between the machines in this cluster, but required from outside. I have considered the idea of setting ...
-4
votes
1answer
63 views

SSH broken due to chmod -R /* [duplicate]

I made a total mistake here. Anyway I ran chmod -R 777 /* and immediately regretted my decision. I had to boot into single user mode to and ran chmod -R 755 /etc/* in order to login to the server. ...
0
votes
1answer
28 views

VPC VPN SSH stalls at host verification

I have set up a VPN tunnel to our VPC on Amazon which consists of a public subnet with a couple machines, one NAT instance, and then several private subnets with an assortment of machines as well. I ...
-1
votes
2answers
44 views

“Software caused connection abort” after removing rule in iptables

I use Putty to connect to a Linux Red Hat machine on an AWS instance. My local computer is Windows 8. On the iptables I had to make a change and accidentally forgot to put back this default rule: -A ...
2
votes
2answers
32 views

Passwordless SSH Solaris->RHEL without ever prompting for password

I need make a script to SSH from a Solaris machine (A) to an RHEL machine (B) (actually it's Oracle Linux). Is it necessary to enter B's password at some point? I want to automate the process with ...
0
votes
1answer
38 views

How to set Cron Job to empty cached directory

I have plain Ubuntu based server, i want to set Cron job and it will empty my website cache directory in every 24 hours, due to massive records 'rm -rf ' not work, so manually i used 'find . -name '' ...
1
vote
0answers
15 views

How to enable SFTP error status in RHEL7.1?

Here is the problem that I am facing. I have a provisioning server which runs a perl script to upload and download certain files in a regular interval using sftp. The sftp command is executed in batch ...
0
votes
2answers
43 views

server1 & server2.. because w/same firm.. ssh connection shows private ip.. how to enforce public ip being using during ssh's?

server1 has a private and public ip. server2 has a private and public ip. generally.. if server1 to ssh to server2 .. server2 would recognize server1 by it's public ip. but because both servers are ...
0
votes
1answer
15 views

rdiff-backup with sudo on remote host: ListError Permission denied

I'm currently facing the following problem: I set up rdiff-backup on a backup machine running Ubuntu and would like to be able to backup my production machine running CentOS; My setup looks as ...
0
votes
0answers
31 views

Forward SSH to OpenVPN client via UFW

I have an Ubuntu 14 server that is running OpenVPN gateway and ufw. Let's call it Server A. I have an IP reservation for a permanently connected server (Server B). It always connects to OpenVPN and ...
0
votes
3answers
39 views

Connection refused on Ubuntu EC2 after EBS expansion

The problem After starting an Ubuntu 14.04 EC2 instance with expanded HD volumes, ssh-ing into it fails with Connection refused. The EBS expansion process One of my Ubuntu 14.04 EC2 machines was ...
2
votes
1answer
42 views

x2go passphrase prompt then authentication fail

Have read following post and although it had a similar title it wasn't the same problem: Able to connect by SSH, but not x2go From windows 7 client and windows 10 client at home to centOS6.7 remote ...
-1
votes
2answers
84 views

perform a full server backup using ssh centos [closed]

I have a dedicated server at hetzner and they told me the hard drives are broken and they must replace them with new ones. I MUST back up all my websites and databases, that is my life work! The ...
0
votes
0answers
31 views

Openshift: SSH key denied, even though they match

I am attempting to use the OpenShift RHC tool on a Windows machine to ssh into one of my applications. The public key associated with my OpenShift account matches my .\.ssh\id_rsa.pub and I've even ...
0
votes
2answers
77 views

why can't I ssh into my aws ec2 instance? Permission denied (publickey)

I created two ec2 instances, and was able to ssh into the first two fine. After creating the third, I get this error upon trying to ssh into any of them. This is what I'm running: ssh -v -i ...
-1
votes
2answers
54 views

turn the server on after rebooting

I have a server with CentOs 6.6 and I was trying to reboot it with the command reboot. It was taking forever and I thought the terminal in my mac froze and so I quitted the terminal app from my mac. ...
1
vote
2answers
31 views

Forwarding a ssh connection from one port to another

I have a box B (say on 1.2.3.4) which I can only ssh to from another box A. But a certain development tool on 192.168.0.1 only allows me to specify the host and port of a ssh server and not anything ...
0
votes
0answers
15 views

Connection to MS SQL Server instance through SSH SOCKS proxy fails

I use a local ssh socks proxy (localhost:7070) on my Linux Laptop to connect to my company's intranet over my company's Windows+cygwin laptop, which has intranet access: Linux --(ssh -N -D 7070 -p ...
1
vote
0answers
14 views

iptables rule limiting the number of connection in a broken pipe case

I am limiting the number of SSH connections using iptables but in case of, for example, a broken pipe (computer goes sleep mode, network problem, etc.) I am no longer able to reconnect. The rule I ...
0
votes
1answer
30 views

Rescue inaccessible VM without SSH in Google Cloud Platform

I made a mistake in the script of a service in my linux VM in Google Cloud Platform. Now the VM does not boot properly, and no ssh server starts. Is there any other way to rescue this instance and ...