1
vote
2answers
52 views

Allow only first login to ssh with password

I would like to allow to first remote login via ssh using password for a new users. After that authentication should be restricted to public key. How to deal with that? I mean how to restrict second ...
0
votes
1answer
20 views

Allow ssh access to git pull on remote machine

We have a server with some of our git repositories on and I would like to be able to clone one to our webserver (which runs debian). I ran ssh-keygen on the webserver and copied the public key into ...
3
votes
1answer
35 views

SSH authentication mode selection

I am trying to figure out the SSH mechanism used while I try to ssh onto a production host. I see that the SSH client can choose among the available modes. But I'm not sure which mode is chosen and ...
1
vote
1answer
73 views

Multiple SSH keys per user on the server

Say I run a server which accepts SSH connections, and being a wise person, I use SSH keys instead of passwords to connect to it. There is one user, webmaster, which has access to and controls the ...
2
votes
2answers
80 views

SSH authentication between my VPS and Bitbucket fail

I'm trying to setup SSH authentication between my VPS and Bitbucket for configure later automatic deployment via Capistrano (for web projects) and Capifony (for Symfony2 projects) so I follow this ...
1
vote
1answer
58 views

Pam is unable to make users home directory

I have an ubuntu 12.04 LTS server that is tied to Active Directory. This is a git server running gitlab. Rather than using gitolite it uses the gitlab shell In the logs I notice that every time the ...
2
votes
2answers
115 views

OpenSSH and PAM authentication using a public key

I'm looking for a way to authenticate users using a public key which is stored in a db (MongoDB). Similar questions usually resulted with a suggestion to installed a patched version of OpenSSH ...
0
votes
1answer
56 views

Is it possible to create ssh socks server with authentication required?

I was looking at this question while I was trying to find a good socks server for linux that would be easy to configure. The following command works fine: ssh -f -N -D 0.0.0.0:1080 localhost I ...
1
vote
0answers
72 views

How to add two-factor authetntication to ssh?

I am trying to add 2FA to sshd using PAM from oathtool package. I want two ways to login to server: publickey and 2FA, or password and 2FA So far I managed to add 2FA to publickey authentication, ...
5
votes
4answers
64 views

sshd logging attempts to login without a private key

On my VPS, running Debian 7, I have ssh enabled on the default port 22 with only private key authentication enabled, all other ports are filtered with iptables. I am frequently getting login attempts ...
1
vote
1answer
383 views

Solaris pam_ldap Authentication Using sshd-kbdint and Failing

Problem Overview Solaris 11 has been configured to use pam_ldap to authenticate users against an LDAP v3-compliant directory server. The Solaris host is only configured to use LDAP for ...
2
votes
2answers
94 views

SSH access for hundreds of thousands of users

I need to setup a solution similar to GitHub, where users can SSH to their git repository. This should scale for hundreds of thousands of users, so my idea is to use a distributed filesystem for the ...
-1
votes
2answers
71 views

Not able to login remotely to the custom linux box using root user credentials

I am not able to login to my custom Linux system with the root user credentials as it says access denied. I have reset the root password by logging in via the admin user. The message in the syslog ...
0
votes
0answers
44 views

SSH Connect/Disconnect hook - custom extensibility

I need to extend sshd so that i can hook some events and take some action on them. specifically: When a user connects and successfully authenticates, i need to make a database entry similarly, when ...
1
vote
0answers
245 views

putty openssh rsa key signature invalid

I'm running a server with Debian Linux 3.2.46-1+deb7u1 with OpenSSH Server 6.0 and secured the login with a 2048 bit RSA key. Although connecting with OpenSSH Client from another machine succeeds, ...
1
vote
1answer
164 views

SSH doesn't work with my key for an user but works for another

Server (Ubuntu): ~/.ssh/authorized_keys file (on issue-user): just one public key on one single line. No extra lines! No comments! correct user/group owner 644 rights Local Machine (Windows 7): ...
0
votes
1answer
28 views

connection timing out using ssh - “steps to take”?

I can ssh to the server using another machine with an ecdsa key, and that is set up just fine. I generated an ecdsa key on another machine and did a cat of the ecdsa public key to ...
1
vote
2answers
263 views

SSH Host-based authentication: How can SSH client force to use given key location

Linux man page on ssh say about host based authentication works as SSH server must be able to verify the client's host key (see the description of /etc/ssh/ssh_known_hosts and ~/.ssh/known_hosts, ...
0
votes
1answer
265 views

Unable to authentication after manual edit of /etc/passwd and /etc/shadow

On Scientific Linux 6.4 ( like CentOs6.4) When configuring a new server I have manually edited the file /etc/shadow so as to copy the password. Now I can only log in as user root and I can not use ...
3
votes
3answers
141 views

Is there a command line two-factor authentication verification code generator?

I manage a server with two-factor authentication. I have to use the Google Authenticator iPhone app to get the 6-digit verification code to enter after entering the normal server password. The setup ...
0
votes
1answer
47 views

Authenticate ftp users on mysql through secure channel

I've to face this problem regarding security: some sFTP servers (proftpd) in a dmz that need to authenticate users against a mysql (native cluster|percona cluster|MariaDB cluster) through a secure ...
1
vote
0answers
70 views

Kerberized SSH Failed

I want to authenticate ssh login with Kerberos, however fail. The following is a snippet of ssh debug information with the command ssh -vvv localhost. debug3: Wrote 80 bytes for a total of 1125 ...
0
votes
1answer
65 views

openldap authentication against a slave

I have an openldap master/slave configuration, setup as per the Ubuntu guide, on Ubuntu 12.04, running slapd 2.4.28-1.1ubuntu4.2. I have pam_ldap configured for ssh authentication, everything works ...
0
votes
1answer
44 views

ssh login using public/private key exchange authorized_keys not working?

I am trying to login from one ubuntu box to another using public/private keys with ssh, but it is not working.. OMD[live]:~/.ssh$ ssh -l myuser -v -i /test/sites/live/.ssh/id.rsa.myuser ...
0
votes
1answer
298 views

Converting the ssh key

to clone my bitbucket project,I changed the /.ssh/authorized_keys content by adding my bitbucket key and I am able to clone into my bitbucket,but after that I was not able to access my server at EC2 ...
2
votes
1answer
151 views

How to manage users and resources in a multiple server environment? [duplicate]

Possible Duplicate: A system for distributing SSH public keys Need help managing developer authentication on our system. We have multiple CentOS servers (database, Web, Redis, etc.), and ...
1
vote
1answer
97 views

Can't login anymore via sshd

I have been working with SSH for a long time, but recently I have needed to add another user to my set up. I followed some instructions I found on the web and did the folllowing. adduser sam sudo ...
1
vote
1answer
2k views

/var/log/auth.log not logging failed ssh attempts

I'm trying to go failed (either incorrect username, password, or both) on my server. I changed /etc/ssh/sshd_config from # Logging SyslogFacility AUTH LogLevel INFO to # Logging SyslogFacility ...
0
votes
0answers
50 views

Suggest good authentication scheme for remote clients to connect via SSH?

I have a project where I'll have a number of remote Linux systems in the field. From time to time they'll need to connect to a central server via SSH. These remote systems are automated and have no ...
1
vote
2answers
73 views

OpenSSH server Authentication refused

I am running a Linux version 2.6.27-vpac2 on a PXA270 platform (armv5tel) I have a version of OpenSSH 3.8.1 p1 (Debian-8.sarge.4) trying to get to run on it. I have run the sshd in -ddd format to ...
2
votes
2answers
498 views

How to add authentication to ssh dynamic port forwarding?

I am using ssh client as a SOCKS server by running on the remote server this command: ssh -f2qTnND *:1080 some-server-user@localhost There is only one problem here: anyone can connect to the server ...
12
votes
2answers
221 views

SSH only works after intentionally failed password

So, I'm having a rather weird problem. I have a server, that when I try to SSH into, immediately closes the connection if I type in the correct password on the first attempt. However, if I ...
4
votes
3answers
2k views

SSH: one authorized_keys for multiple service accounts

Is there a way to configure SSH to check a single authorized_keys file for multiple users? I know I can copy the public key into each user's authorized_keys file but for ease of management I'd like an ...
8
votes
1answer
5k views

Authenticate Linux sshd with TACACS+ (Cisco ACS)

Our network engineering team uses multiple linux servers for syslog collection, configuration backups, tftp, etc... We want to use TACACS+ on a Cisco ACS machine as our central authentication server ...
7
votes
3answers
1k views

How to create a Linux user without a password but being able to set it?

I have a username and an SSH key for a (hypothetical) guy and I need to give him admin access to a Linux (Ubuntu) server. I want him to be able to log in via SSH and then set his password by himself ...
0
votes
2answers
264 views

Google 2 factor authentication on Ec2?

I have set up google two factor authentication on my local machine. So when I do : ssh localhost I need to verify the code along with password. But when I try to connect to my Ec2 instance like so ...
2
votes
1answer
353 views

SSH - slow authentication

This is more of a curiosity question then a problem at this point. I have resolved my problem which i'll post the solution that worked for me. problem I was getting rather slow authentication times ...
2
votes
4answers
2k views

PAM module causes flurry of SSH sessions

While tailing /var/log/auth.log I noticed that there where multiple entries being entered (instantly) by the minute for user "foo". I personally had only one connection open as user "root_bar" while ...
0
votes
1answer
249 views

sshd_config versus authorized_keys command parameter

Background: I added OTP token authentication to my web server. I modified the /etc/ssh/sshd_config file with the ForceCommand /token/script command. Problem: I have a local Jenkins instance ...
1
vote
2answers
155 views

How to create a new user and exempt the user of key authentication?

1 I have configured Ubuntu server with Key authentication & it is working fine. I have disabled password authentication for key authentication to work. Server is always accessed via remote ...
2
votes
1answer
150 views

SSH jumpbox with group Authorisation

I'm trying to setup a SSH Jumpbox. Users logged on the Jumpbox needs to be able to authorize to another SSH servers depending on their group. (UserA is on group Project1, UserB is on group Project2, ...
26
votes
7answers
4k views

SSH: Two Factor Authentication

I currently have a Ubuntu Server 12.04 running OpenSSH along with Samba and a few other services. At the current time I have public key authentication set up, and I'm wondering if it's possible to set ...
4
votes
3answers
280 views

SSH still asks for password even after adding key to authorized_keys

Here are the steps I did on my local computer: ssh-keygen -t rsa cat ~/.ssh/id_rsa | ssh root@remotehost.com -p 1234 "cat > ~/.ssh/authorized_keys" When I do a ssh root@remotehost.com -p 1234 it ...
0
votes
2answers
60 views

Can i use SSH key Authentication for logging into a server which share the ssh folder?

I have 2 server systems: remoteserver1 & remoteserver2. Remoteserver2 is protected from outside login so in order for me to access it, i have to ssh into remoteserver1 and then ssh into ...
1
vote
3answers
1k views

How to use PAM to limit failed login attempts by IP?

I'm working through a process of hardening my server security against the daily hacking attempts that arise the moment you attach a server to an IP and give it a domain name. I get anywhere from 1 to ...
3
votes
1answer
132 views

How to log all fingerprints in sshd, even if the connection was unsuccessful?

I understand that by adjusting the LogLevel in /etc/ssh/sshd_config I can log the fingerprints when authentication is successful, but what I would like to do is to see a fingerprint of a key that was ...
3
votes
3answers
455 views

SSH Public Key Format

I have a public key in the format: ---- BEGIN SSH2 PUBLIC KEY ---- Comment: "somename-20060227" AAAAB3NzaC1yc2EAAAABJQAAAIBmhLUTJiP[and so on]== ---- END SSH2 PUBLIC KEY ---- usually i see keys in ...
0
votes
1answer
1k views

How to make ssh connection between servers using public-key authentication

I am setting up a continuos integration(CI) server and a test web server. I would like that CI server would access web server with public key authentication. In the web server I have created an user ...
1
vote
1answer
301 views

Can one config LDAP to accept auth from ssh-agent instead of from Kerberos?

[This question is not about getting your LDAP password to authenticate you for SSH logins. We have that working just fine, thank you :-) ] Let's suppose you're on a Linux network (Ubuntu 11.10, slapd ...
1
vote
1answer
368 views

Using command in ssh authorized_keys breaks scp

I would like to use command per key in authorized_keys to set some environment variables. command="MYVAR=test $SHELL" ssh-rsa mykey Shell works fine but scp is not working. What would be the ...