The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
2answers
476 views

Strange ssh key issue

Scenario 1. I am doing this from /home/deploy directory I am trying to set up ssh with github for capistrano deployment. this has been an absolute nightmare. when I do ssh git@github.com as the ...
4
votes
1answer
1k views

ForwardAgent in Jenkins

I'm trying to enable ForwardAgent in the "Publish over SSH" Jenkins Plugin. This would allow jenkins to execute deployments, rsyncs and svn+ssh checkouts on remote servers. But there's no option for ...
2
votes
1answer
610 views

Any tricks for making sshfs authenticate only on write?

There is seemingly a trick for creating read-only sshfs logins with the read only attribute is enforced by the remote's ~/.ssh/authorized_keys file. You first create a program ~/.ssh/ro-sftp-server ...
1
vote
1answer
659 views

Is it possible to chain ssh-agent forwarding through multiple hops?

Suppose I have 4 machines, local, dmz, remote1, and remote2. I want to ssh from local to dmz then into remote1 and then scp a file from remote1 to remote2. Can I use ssh-agent forwarding to allow me ...
1
vote
1answer
234 views

How to get an Ubuntu root account to forward ssh keys as the forwarding machine

UPDATE: the whole thing described below works fine for non-root accounts on the remote machine. That is, this works: anderson@client -> nonroot@remote -> anderson's-ssh-key@github.com This ...
1
vote
1answer
422 views

Can one config LDAP to accept auth from ssh-agent instead of from Kerberos?

[This question is not about getting your LDAP password to authenticate you for SSH logins. We have that working just fine, thank you :-) ] Let's suppose you're on a Linux network (Ubuntu 11.10, slapd ...
0
votes
1answer
243 views

SSH using Agent Forwarding with Windows Host OS, Vagrant Ubuntu Guest OS, and Keepass/Keeagent

Intent: To be able to deploy to lan-example.com from any dev environment; whether it be directly from the virtual OS, or any single-OS system, or even over the internet using ONE SSH key stored in ...
0
votes
1answer
43 views

seamless ssh with condition

I am looking for a way of seamless ssh in a way that when user does ssh through shell, it will be disallowed (or normal rules apply) but if a process (non-interactive) tries to ssh with the same user ...
0
votes
1answer
177 views

Weird DNS bug - external server resolves to internal IP

I have a server that is hosted by my university. I have root access, but no control over network setup, firewall, etc. This server's DNS resolves to an internal IP here on campus (10.x.x.x), and an ...
4
votes
0answers
639 views

Can socat be used to forward an ssh-agent socket into a chroot?

I'm building custom Debian environments on a remote server, which I connect to over SSH. This involves building a debootstrap environment, then chrooting into it to run a custom installer. As part of ...
1
vote
0answers
12 views

sshpass like ssh-agent or vice versa

I like to hold ssh logins for the runtime of a script. For public key authentication, ssh-agent can be used, allowing me to enter the key passphrase once when the script is started. However, that ...
1
vote
0answers
377 views

ssh through a bastion machine works on someone else's desktop but not my own

I have to ssh into a bastion (jump) server in order to get to the final server. On the jump server, my .ssh/config says: Host * ForwardAgent yes My co-worker uses PuTTy and Pageant. When I use a ...
0
votes
0answers
17 views

Install keychain on Amazon Linux AMI?

I have a github account that I would like to push to on a regular basis from an Amazon ec2 instance. In order to connect to the github account I have an SSH key that's passphrase protected, so in ...
0
votes
0answers
72 views

`ssh-add -l` doesn't always print key paths

Recently, at least as of openssh 6.7_p1, ssh-add -l stopped, in some circumstances, printing the path to some ssh keys loaded in the agent. For example: 13:41:23 me@n00:~ $ ssh-add -l 256 ...
0
votes
0answers
34 views

Enable root password on remote server

I'm playing around with ssh-with-rsa-key authorization instead of password authorization and because I'm not really clever I've locked password authorization for root(passwd -l root) on remote server. ...
0
votes
0answers
19 views

How to lock pageant the same way ssh-add -x does?

Now that i understand how to highjack SSH_AGENT_SOCK & how to use it, it scares me that a fellow coworker, by having root access on any of my company server, might access to my personnal NAS. I ...
0
votes
0answers
39 views

ssh-add is required before each git push

Before I can git push / pull or capistrano deploy (using agent_forward => true) I have to run ssh-add command. If I try without this I get a publickey failure. Does anyone know why ssh-add is not ...
0
votes
0answers
163 views

ssh-agent doesn't seem to end when user disconnects

On one of the servers that I manage i've just noticed that there are hundreds of "ssh-agent" processes running. I'm at a loss as to where to even start here. Is there something that I've forgotten to ...