The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
2answers
468 views

Strange ssh key issue

Scenario 1. I am doing this from /home/deploy directory I am trying to set up ssh with github for capistrano deployment. this has been an absolute nightmare. when I do ssh git@github.com as the ...
4
votes
1answer
1k views

ForwardAgent in Jenkins

I'm trying to enable ForwardAgent in the "Publish over SSH" Jenkins Plugin. This would allow jenkins to execute deployments, rsyncs and svn+ssh checkouts on remote servers. But there's no option for ...
2
votes
1answer
553 views

Any tricks for making sshfs authenticate only on write?

There is seemingly a trick for creating read-only sshfs logins with the read only attribute is enforced by the remote's ~/.ssh/authorized_keys file. You first create a program ~/.ssh/ro-sftp-server ...
1
vote
1answer
536 views

Is it possible to chain ssh-agent forwarding through multiple hops?

Suppose I have 4 machines, local, dmz, remote1, and remote2. I want to ssh from local to dmz then into remote1 and then scp a file from remote1 to remote2. Can I use ssh-agent forwarding to allow me ...
1
vote
1answer
209 views

How to get an Ubuntu root account to forward ssh keys as the forwarding machine

UPDATE: the whole thing described below works fine for non-root accounts on the remote machine. That is, this works: anderson@client -> nonroot@remote -> anderson's-ssh-key@github.com This ...
1
vote
1answer
393 views

Can one config LDAP to accept auth from ssh-agent instead of from Kerberos?

[This question is not about getting your LDAP password to authenticate you for SSH logins. We have that working just fine, thank you :-) ] Let's suppose you're on a Linux network (Ubuntu 11.10, slapd ...
0
votes
1answer
43 views

seamless ssh with condition

I am looking for a way of seamless ssh in a way that when user does ssh through shell, it will be disallowed (or normal rules apply) but if a process (non-interactive) tries to ssh with the same user ...
0
votes
1answer
170 views

Weird DNS bug - external server resolves to internal IP

I have a server that is hosted by my university. I have root access, but no control over network setup, firewall, etc. This server's DNS resolves to an internal IP here on campus (10.x.x.x), and an ...
3
votes
0answers
598 views

Can socat be used to forward an ssh-agent socket into a chroot?

I'm building custom Debian environments on a remote server, which I connect to over SSH. This involves building a debootstrap environment, then chrooting into it to run a custom installer. As part of ...
1
vote
0answers
371 views

ssh through a bastion machine works on someone else's desktop but not my own

I have to ssh into a bastion (jump) server in order to get to the final server. On the jump server, my .ssh/config says: Host * ForwardAgent yes My co-worker uses PuTTy and Pageant. When I use a ...
0
votes
0answers
42 views

`ssh-add -l` doesn't always print key paths

Recently, at least as of openssh 6.7_p1, ssh-add -l stopped, in some circumstances, printing the path to some ssh keys loaded in the agent. For example: 13:41:23 me@n00:~ $ ssh-add -l 256 ...
0
votes
0answers
170 views

SSH using Agent Forwarding with Windows Host OS, Vagrant Ubuntu Guest OS, and Keepass/Keeagent

Intent: To be able to deploy to lan-example.com from any dev environment; whether it be directly from the virtual OS, or any single-OS system, or even over the internet using ONE SSH key stored in ...
0
votes
0answers
30 views

Enable root password on remote server

I'm playing around with ssh-with-rsa-key authorization instead of password authorization and because I'm not really clever I've locked password authorization for root(passwd -l root) on remote server. ...
0
votes
0answers
19 views

How to lock pageant the same way ssh-add -x does?

Now that i understand how to highjack SSH_AGENT_SOCK & how to use it, it scares me that a fellow coworker, by having root access on any of my company server, might access to my personnal NAS. I ...
0
votes
0answers
34 views

ssh-add is required before each git push

Before I can git push / pull or capistrano deploy (using agent_forward => true) I have to run ssh-add command. If I try without this I get a publickey failure. Does anyone know why ssh-add is not ...
0
votes
0answers
141 views

ssh-agent doesn't seem to end when user disconnects

On one of the servers that I manage i've just noticed that there are hundreds of "ssh-agent" processes running. I'm at a loss as to where to even start here. Is there something that I've forgotten to ...
-1
votes
0answers
5 views

ssh-add issue Could not open a connection to your authentication agent

I'm having a little issue with my ssh-agent. Indeed I can't make it work and I don't understand why. This is the console's output : http://hpics.li/807f3fe I'm sure that ssh agent is running. For ...