0
votes
2answers
16 views

Issue with sharp in host vars Ansible

Since # is considered as a comment in /etc/ansible/hosts I'm unable to use a password containing a sharp. [hosts] host1 ansible_ssh_user=user ansible_ssh_pass=userpass ansible_su_pass=My#Password ...
-2
votes
0answers
20 views

How do I stop rsync/github from asking my private key passphrase? [closed]

I've tried ssh-add when I first login. It still asks every time. How do I get rid of it asking for my passphrase?
-2
votes
2answers
26 views

SSH using ssh_key from a different account

Is there a way for a user to ssh as a different user using ssh_keys? For example, i have host A B and C. User X SSHes from A to B as himself ( A -- as X --> B ) Now the user wants to SSH to C from ...
2
votes
3answers
78 views

How to configure SSH access for key authentication for another client?

I know that if I want to configure SSH access for key authentication, I need to use the following command: ssh-keygen -b 2048 -t rsa -C “mypassphrase” I then need to copy the codes created in ...
-2
votes
3answers
44 views

Public Key authentication fails while using the -i parameter on ssh command

I have to do public key based authentication on two Linux servers. Machine 2 (192.168.3.132) username: vfx_30 home dir: /home/vfx_30 ssh keys: /home/vfx_30/.ssh/id_rsa /home/vfx_30/.ssh/id_rsa.pub ...
-1
votes
2answers
43 views

Add ssh public key to group instead of users on centos 6.5

I am a newbie to linux administration. I have a box with centos 6.5 x64. Ive been configuring ssh access via public/private key. Ive been wondering if I could add the public key to a user group ...
0
votes
1answer
45 views

Should I still disable root if I disable password authentication and enable only key authentication?

I'm new to the linux world and I've been reading a few tutorials on security. I've seen some questions on StackExchange tackling this subject, but from what I've seen, none of the answers clarified ...
1
vote
2answers
60 views

Allow only first login to ssh with password

I would like to allow to first remote login via ssh using password for a new users. After that authentication should be restricted to public key. How to deal with that? I mean how to restrict second ...
0
votes
1answer
44 views

Allow ssh access to git pull on remote machine

We have a server with some of our git repositories on and I would like to be able to clone one to our webserver (which runs debian). I ran ssh-keygen on the webserver and copied the public key into ...
3
votes
1answer
43 views

SSH authentication mode selection

I am trying to figure out the SSH mechanism used while I try to ssh onto a production host. I see that the SSH client can choose among the available modes. But I'm not sure which mode is chosen and ...
2
votes
1answer
115 views

ssh shared key authentication asks for password, unless sshd runs with -d option

My client is Ubuntu, and the server is CentOS. I have shared key authentication set up to login from client to server. When I run the server like: sudo `which sshd` -d Everything works as ...
1
vote
1answer
83 views

Multiple SSH keys per user on the server

Say I run a server which accepts SSH connections, and being a wise person, I use SSH keys instead of passwords to connect to it. There is one user, webmaster, which has access to and controls the ...
2
votes
2answers
170 views

SSH authentication between my VPS and Bitbucket fail

I'm trying to setup SSH authentication between my VPS and Bitbucket for configure later automatic deployment via Capistrano (for web projects) and Capifony (for Symfony2 projects) so I follow this ...
1
vote
1answer
79 views

Pam is unable to make users home directory

I have an ubuntu 12.04 LTS server that is tied to Active Directory. This is a git server running gitlab. Rather than using gitolite it uses the gitlab shell In the logs I notice that every time the ...
3
votes
2answers
297 views

OpenSSH and PAM authentication using a public key

I'm looking for a way to authenticate users using a public key which is stored in a db (MongoDB). Similar questions usually resulted with a suggestion to installed a patched version of OpenSSH ...
0
votes
0answers
41 views

Strange port-by-port connection on SSH git user

I'm facing very strange logs in my /var/log/auth.log. Every single second I can read one or more lines like this: Accepted publickey for git from MY_OWN_IP port 51885 ssh2: RSA ...
0
votes
1answer
73 views

Is it possible to create ssh socks server with authentication required?

I was looking at this question while I was trying to find a good socks server for linux that would be easy to configure. The following command works fine: ssh -f -N -D 0.0.0.0:1080 localhost I ...
1
vote
0answers
102 views

How to add two-factor authetntication to ssh?

I am trying to add 2FA to sshd using PAM from oathtool package. I want two ways to login to server: publickey and 2FA, or password and 2FA So far I managed to add 2FA to publickey authentication, ...
5
votes
4answers
68 views

sshd logging attempts to login without a private key

On my VPS, running Debian 7, I have ssh enabled on the default port 22 with only private key authentication enabled, all other ports are filtered with iptables. I am frequently getting login attempts ...
1
vote
1answer
599 views

Solaris pam_ldap Authentication Using sshd-kbdint and Failing

Problem Overview Solaris 11 has been configured to use pam_ldap to authenticate users against an LDAP v3-compliant directory server. The Solaris host is only configured to use LDAP for ...
2
votes
2answers
104 views

SSH access for hundreds of thousands of users

I need to setup a solution similar to GitHub, where users can SSH to their git repository. This should scale for hundreds of thousands of users, so my idea is to use a distributed filesystem for the ...
-1
votes
2answers
76 views

Not able to login remotely to the custom linux box using root user credentials

I am not able to login to my custom Linux system with the root user credentials as it says access denied. I have reset the root password by logging in via the admin user. The message in the syslog ...
0
votes
0answers
65 views

SSH Connect/Disconnect hook - custom extensibility

I need to extend sshd so that i can hook some events and take some action on them. specifically: When a user connects and successfully authenticates, i need to make a database entry similarly, when ...
1
vote
0answers
276 views

putty openssh rsa key signature invalid

I'm running a server with Debian Linux 3.2.46-1+deb7u1 with OpenSSH Server 6.0 and secured the login with a 2048 bit RSA key. Although connecting with OpenSSH Client from another machine succeeds, ...
1
vote
1answer
216 views

SSH doesn't work with my key for an user but works for another

Server (Ubuntu): ~/.ssh/authorized_keys file (on issue-user): just one public key on one single line. No extra lines! No comments! correct user/group owner 644 rights Local Machine (Windows 7): ...
0
votes
1answer
28 views

connection timing out using ssh - “steps to take”?

I can ssh to the server using another machine with an ecdsa key, and that is set up just fine. I generated an ecdsa key on another machine and did a cat of the ecdsa public key to ...
1
vote
2answers
335 views

SSH Host-based authentication: How can SSH client force to use given key location

Linux man page on ssh say about host based authentication works as SSH server must be able to verify the client's host key (see the description of /etc/ssh/ssh_known_hosts and ~/.ssh/known_hosts, ...
0
votes
1answer
292 views

Unable to authentication after manual edit of /etc/passwd and /etc/shadow

On Scientific Linux 6.4 ( like CentOs6.4) When configuring a new server I have manually edited the file /etc/shadow so as to copy the password. Now I can only log in as user root and I can not use ...
3
votes
3answers
180 views

Is there a command line two-factor authentication verification code generator?

I manage a server with two-factor authentication. I have to use the Google Authenticator iPhone app to get the 6-digit verification code to enter after entering the normal server password. The setup ...
0
votes
1answer
50 views

Authenticate ftp users on mysql through secure channel

I've to face this problem regarding security: some sFTP servers (proftpd) in a dmz that need to authenticate users against a mysql (native cluster|percona cluster|MariaDB cluster) through a secure ...
1
vote
0answers
82 views

Kerberized SSH Failed

I want to authenticate ssh login with Kerberos, however fail. The following is a snippet of ssh debug information with the command ssh -vvv localhost. debug3: Wrote 80 bytes for a total of 1125 ...
0
votes
1answer
69 views

openldap authentication against a slave

I have an openldap master/slave configuration, setup as per the Ubuntu guide, on Ubuntu 12.04, running slapd 2.4.28-1.1ubuntu4.2. I have pam_ldap configured for ssh authentication, everything works ...
0
votes
1answer
48 views

ssh login using public/private key exchange authorized_keys not working?

I am trying to login from one ubuntu box to another using public/private keys with ssh, but it is not working.. OMD[live]:~/.ssh$ ssh -l myuser -v -i /test/sites/live/.ssh/id.rsa.myuser ...
0
votes
1answer
312 views

Converting the ssh key

to clone my bitbucket project,I changed the /.ssh/authorized_keys content by adding my bitbucket key and I am able to clone into my bitbucket,but after that I was not able to access my server at EC2 ...
1
vote
1answer
57 views

SSH login without recheck all public key

I have several servers and different users. Also i have two different authorize method: via keys and password. When i try login ssh recheck all public keys. Is there method to bind public key and ...
2
votes
1answer
158 views

How to manage users and resources in a multiple server environment? [duplicate]

Possible Duplicate: A system for distributing SSH public keys Need help managing developer authentication on our system. We have multiple CentOS servers (database, Web, Redis, etc.), and ...
1
vote
1answer
99 views

Can't login anymore via sshd

I have been working with SSH for a long time, but recently I have needed to add another user to my set up. I followed some instructions I found on the web and did the folllowing. adduser sam sudo ...
1
vote
1answer
2k views

/var/log/auth.log not logging failed ssh attempts

I'm trying to go failed (either incorrect username, password, or both) on my server. I changed /etc/ssh/sshd_config from # Logging SyslogFacility AUTH LogLevel INFO to # Logging SyslogFacility ...
0
votes
0answers
50 views

Suggest good authentication scheme for remote clients to connect via SSH?

I have a project where I'll have a number of remote Linux systems in the field. From time to time they'll need to connect to a central server via SSH. These remote systems are automated and have no ...
1
vote
2answers
80 views

OpenSSH server Authentication refused

I am running a Linux version 2.6.27-vpac2 on a PXA270 platform (armv5tel) I have a version of OpenSSH 3.8.1 p1 (Debian-8.sarge.4) trying to get to run on it. I have run the sshd in -ddd format to ...
2
votes
2answers
537 views

How to add authentication to ssh dynamic port forwarding?

I am using ssh client as a SOCKS server by running on the remote server this command: ssh -f2qTnND *:1080 some-server-user@localhost There is only one problem here: anyone can connect to the server ...
12
votes
2answers
234 views

SSH only works after intentionally failed password

So, I'm having a rather weird problem. I have a server, that when I try to SSH into, immediately closes the connection if I type in the correct password on the first attempt. However, if I ...
4
votes
3answers
2k views

SSH: one authorized_keys for multiple service accounts

Is there a way to configure SSH to check a single authorized_keys file for multiple users? I know I can copy the public key into each user's authorized_keys file but for ease of management I'd like an ...
8
votes
1answer
5k views

Authenticate Linux sshd with TACACS+ (Cisco ACS)

Our network engineering team uses multiple linux servers for syslog collection, configuration backups, tftp, etc... We want to use TACACS+ on a Cisco ACS machine as our central authentication server ...
7
votes
3answers
1k views

How to create a Linux user without a password but being able to set it?

I have a username and an SSH key for a (hypothetical) guy and I need to give him admin access to a Linux (Ubuntu) server. I want him to be able to log in via SSH and then set his password by himself ...
0
votes
2answers
278 views

Google 2 factor authentication on Ec2?

I have set up google two factor authentication on my local machine. So when I do : ssh localhost I need to verify the code along with password. But when I try to connect to my Ec2 instance like so ...
2
votes
1answer
373 views

SSH - slow authentication

This is more of a curiosity question then a problem at this point. I have resolved my problem which i'll post the solution that worked for me. problem I was getting rather slow authentication times ...
2
votes
4answers
2k views

PAM module causes flurry of SSH sessions

While tailing /var/log/auth.log I noticed that there where multiple entries being entered (instantly) by the minute for user "foo". I personally had only one connection open as user "root_bar" while ...
0
votes
1answer
257 views

sshd_config versus authorized_keys command parameter

Background: I added OTP token authentication to my web server. I modified the /etc/ssh/sshd_config file with the ForceCommand /token/script command. Problem: I have a local Jenkins instance ...
1
vote
2answers
157 views

How to create a new user and exempt the user of key authentication?

1 I have configured Ubuntu server with Key authentication & it is working fine. I have disabled password authentication for key authentication to work. Server is always accessed via remote ...