an authorization mechanism for SSH involving public-key cryptography.

learn more… | top users | synonyms

9
votes
3answers
427 views

SSH into NAT'd servers on the same public IP address

I am trying to SSH from in office X to a few Linux boxes in office Y. The Linux boxes in office Y are behind NAT and each run on their own ports. I can successfully reach all of them through SSH, but ...
0
votes
2answers
56 views

How does google compute engine create users and how to disable them?

I've got a CoreOS cluster running on GCE and one issue that I've noticed with all GCE instances is that as long as you're auth'd with the project on Google Cloud platform, you can login in as pretty ...
0
votes
1answer
49 views

What's the best way to push SSH public keys from a large number of hosts to a central instance?

The comments on this question have somewhat digressed from the actual question to the horror caused by the legacy system I have to maintain, so I've rephrased it and cut out the parts that don't ...
2
votes
1answer
22 views

Add two or more SSH keys to a user, in puppet

I need a solution to be able to add more than one SSH ´key´ to one user. class user { user { 'k': ensure => present, comment => 'bogo user', home => '/home/k', managehome ...
2
votes
1answer
43 views

Git: expire ssh keys just like passwords expire?

I'm setting up git in a corporate environment. Git operations will be primarily though SSH using a single account with SSH keys used for access control. (http will be used for account configuration, ...
0
votes
2answers
79 views

How do I generate SSH keys on a Google compute engine windows instance

There are a multiplicity of articles on the web about setting up SSH on Google compute engine for Linux instances but a lack of ones describing how to successfully generate them for a windows ...
2
votes
1answer
48 views

How to make ssh send a certificate for a key stored on a smartcard

I have a gpg key I use through a smartcard (yubikey neo) to ssh to many hosts. Some of these hosts use certificates as well as keys to authorize logins. For normal keys that are stored locally there ...
0
votes
0answers
18 views

Provisioning Vagrant Environments Capable of Cloning Repos Immediately

For some reason, I am having an incredibly hard time getting a working solution for this. We are ATTEMPTING to use Vagrant to provision our development environments. In regards to this post, our ...
0
votes
1answer
50 views

AWS CloudFormation give EC2 instance SSH Keys to other servers

I'm creating an EC2 instance using CloudFormation. The first thing I want to do is checkout a git repository containing puppet manifests. To do this I need an SSH key. What is the best way to get the ...
-4
votes
2answers
52 views

How can you re-download your personal key (pk) .pem file? amazon [closed]

i only remember my key name ,how can re download my key pair in my computer,or how can i attach new keypair to my instance
0
votes
1answer
25 views

Fail to login to sudo user on VPS

VPS Supplier: DigitalOcean OS: Cent OS 7 Client: Mac OS X 10.10.3 bash Root I login as root and created a sudo user me. Then I configured the /etc/ssh/sshd_config as following: RSAAuthentication ...
29
votes
2answers
1k views

Is there a security risk to disclosing your SSH known_hosts file?

I'm speaking at a conference next week about some software tools I've created. My laptop will be shown on a projector screen during this presentation. The presentation will be videotaped and posted ...
3
votes
1answer
59 views

How many SSH private key to setup for multiple servers?

The general process is to generate a pair of public and private keys and upload the public key to the server for SSH connection. Then, if I have to manage a large amount of servers, am I supposed to: ...
-3
votes
1answer
21 views

ssh How dose a second user log in with a ssh key file?

I am new to VPS, I have linux centos 6 and have followed instructions here to get started. I have create ssh key for the root user from instructions here I have disabled root log in and created a ...
2
votes
2answers
35 views

Restrict access to .ssh folder over network shares

I run a small server running Ubuntu Server 14.04 and have just noticed that the .ssh folder in the users home directory is accessible via SMB and NFS. The SMB and NFS are both secured, however I ...
0
votes
1answer
19 views

SSH: Login to local pc by key

I got a little problem. I'm using apt-dater to keep different linux-systems updated. Apt-dater uses ssh to login to these systems - there's no problem by doing this. To connect to localhost, the ...
0
votes
0answers
263 views

PEM_read_PrivateKey failed

I'm trying to use ssh to log in to AWS from OSX Mavericks and having a hell of a time. I enter: ssh -i ~/.ssh/filename.pem ec2-user@ec2-xx-x-xxx-xx.compute-1.amazonaws.com -v And I get this, as ...
0
votes
2answers
29 views

Multiple Servers, Multiple ssh Keys, Unique ssh keys for Infrastructure servers

Ok so I've done a bit of googling and haven't come across an answer. We have multiple servers in our environment and around 5 infrastructure servers. Then we have one server that we can ssh to all ...
0
votes
1answer
43 views

Deleted authorized_keys from EC2 but still have PPK file and I'm connected

I just deleted my full ec2-user/.ssh/ folder and I want to recover the keys so I can access my EC2 server without stopping and starting it. I have on my computer a PPK file that has something like ...
10
votes
1answer
235 views

Are there any security benefits to deploying custom SSH DH groups to client-only systems?

One suggested mitigative strategy against Logjam-related attacks on SSH is to generate custom SSH Diffie-Hellman groups using something like (the below being for OpenSSH) ssh-keygen -G ...
0
votes
2answers
125 views

Add multiple SSH keys to a new server

I know I can do the following to copy an SSH key ssh-copy-id user@server.com but when I deploy a new server, I need to authorize multiple SSH keys to it. Is there anyway to make life easier for ...
1
vote
2answers
67 views

To generate key for AWS server using ssh-keygen from .pem for PuTTY

AWS gave me a private key in the format of .pem. I am trying to use it with PuTTY but failed and I read I need to generate a key with PuTTYgen but PuTTYgen is only for Windows. So I am trying to use ...
4
votes
1answer
75 views

How to disable ALL authentication in sshd? [closed]

Here's a question that I have found absolutely no answers for: how can you configure sshd so that anybody can freely SSH into the box without password or key authentication? The objective is to allow ...
-3
votes
1answer
86 views

Connecting AWS from Windows. Error: Using username “ec2-user”. Server refused our key

I am connecting AWS EC2 using Putty from Windows 8, I followed all steps mentioned on this page of conversion of .pem to .ppk and have loaded .ppk in Putty. Putty Configurations: Host Address: ...
1
vote
0answers
35 views

Is it possible to authenticate to Sonatype Nexus via ssh keys

Is it possible to authenticate to Sonatype Nexus via ssh keys or any other method that does not require user password in maven settings.xml? I know there are user generated tokens in Sonatype Nexus ...
4
votes
1answer
255 views

AuthorizedKeysFile line commented out but still seems to work

I'm setting up a server on Linode and following their Securing Your Server guide. They recommend setting up ssh key pair authentication. I have already uploaded my public key to server and the key ...
6
votes
2answers
586 views

Using ssh key pair authentication and disabling ssh password authentication - what happens if private key lost?

I'm configuring my first server on Linode and going through their set up tutorials. In their Securing Your Server tutorial, it recommends using ssh key pair authentication and disabling password ...
1
vote
0answers
54 views

Ubuntu 14.04 - rsync corrupting SSH configs/keys?

I have two Ubuntu 14.04 servers S1 (user root) and S2 (user dataman). S1 is responsible for handling file uploads and transferring backups to S2. On S1 I am using PubKey authentication to S2 for ...
0
votes
0answers
32 views

why does having ~/.ssh/id_rsa.pub cause GUI dialog asking for SSH password even though SSH_ASKPASS is empty?

How the problem started For some reason I did not have my id_rsa.pub file in ~/.ssh. So I copied it off one of my servers to ~/.ssh/ on my machine... so that I have it, so I can copy it to servers ...
5
votes
3answers
3k views

ssh-copy-id - permission denied (publickey) [closed]

I want to set up ssh tunnel to the mysql server which is in computer which has virtual machine. Also the tunnel has to work if the machine is restarted. So lets say A is computer with linux software. ...
-1
votes
2answers
418 views

SSH key rejected by google compute engine instance

I generated my ssh key through the google sdk shell, then i went to put my key in FileZilla and connect to my google compute engine instance and it wont accept my key. How do i fix this?
0
votes
0answers
98 views

How to configure SSH host keys in cloudformation template?

I'm trying to configure an EC2 with known SSH host keys on boot using cloud-init in a cloudformation template. But now I can't SSH into the server. It's tricky to debug :-) Here's the userdata part ...
0
votes
1answer
120 views

How to run php exec for nested scripting on remote machines?

I originally asked this question stackEx, and realized it was a much better fit here. I'm trying to automate the deployment of services on a cluster of hosts from a web-server. I've evoked the php ...
0
votes
1answer
82 views

SSH timeout issues not consistent

I am not sure if anyone else have had issues with SSH timeout I setup a FRESH install of CentOS 6.5 minimal without touching the SSH congfig at all and when i log into it via SSH using putty..it ...
0
votes
1answer
19 views

Server connects without passphrase via putty but asks for passphrase from the native command line?

I am trying to connect to an EC2 instance and it has a .ppk security key. I am not an expert on server frankly and I am still try to figure things out by trail and error. I usually connect to my ...
1
vote
2answers
65 views

sshd: logging client's public key

I need to run an SSH server and log the IP & public key of any client that attempts to connect (without actually granting access). The use case is this: I deploy this web app to a remote host ...
10
votes
2answers
650 views

SSH: Safe for client to host private RSA key?

Is it safe to generate a public/private key pair on the server, add the public key to the authorized_keys list, and then copy the private key to each client, as described here ...
2
votes
1answer
53 views

SSH key authentication not working

I've a server running Ubuntu 10.04 (as a VM) to which I can't connect using ssh key authentication without being asked for the password. I've read a lot before posting but I really don't know what I'm ...
2
votes
1answer
98 views

ssh command line specify server host key fingerprint

Using ssh command line (OpenSSH), can I specify the server's host key fingerprint? This is possible with winscp.com using (e.g.) -hostkey="ssh-rsa 2048 AA:BB:CC...etc I have read the man page a ...
1
vote
1answer
36 views

Determine which key is successfully used for authentication with AuthorizedKeyCommands

As of OpenSSH 6.2, the option to use an external program for key pair based authentication is available with AuthorizedKeysCommand. According to the sshd_config man page, this program should return ...
2
votes
1answer
426 views

SSH with DSA 2048 bits key

I need to set up secure connection through ssh keys, prerequisites are : DSA type number of bits : 2048 Passphrase : yes On my Linux I can't create this kind of key, the man says : DSA keys ...
0
votes
2answers
45 views

Adding an SSH public key to a new account without enabling password authentication

On a SSH server, I have the following (truncated) configuration: PubkeyAuthentication yes PasswordAuthentication yes On my client, I have a key pair, and have added my public key on the server ...
1
vote
1answer
299 views

How to change SSH key on Google Cloud?

I need to replace the existing SSH key with a new one, but I don't see such options in Cloud admin panel. What is the right way to do this?
0
votes
1answer
261 views

GitLab push not possible and always results in asking for git-user password [closed]

I have a problem with GitLab. Everything is fine, but I can't push. It is asking me all the time the password of the user git. Is it a problem, that I first installed the Omnibus package and then ...
1
vote
0answers
68 views

Is rbash secure if user login and ssh passwords are disabled?

I've got a server that I want to use as an SSH gateway for remote and local port forwarding. I don't want arbitrary commands to be able to be executed on it, only my scripts. I keep reading about how ...
-1
votes
1answer
967 views

SSH failing to connect, No supported key exchange algorithms

There are numerous questions with the same title however none of the solutions apply to my issue. I get the following lines of error in my sshd log: Jan 6 21:57:55 <computer name> sshd[30103]: ...
1
vote
1answer
576 views

CoreOS / Docker “$ fleetctl satus my.service” - ssh: handshake failed

Digging in to CoreOS clusters with Docker and have come upon a SSH issue while trying to learn how to work with fleet. Deploying, running services etc goes well. SSH auth problem occure when executing ...
1
vote
1answer
126 views

gitolite git user asking for password with valid keys

My gitolite installation start to ask for password suddendly, I checked the /var/log/secure file and found this. sshd[9071]: User git not allowed because account is locked sshd[9072]: ...
0
votes
1answer
42 views

Is my private key safe if I use authenticaiton agent forwarding with the ssh -A option?

I love the option to connect to servers via SSH with the -A option, so I can use my private keys on the server. This lets me update git/svn repositories and connect to other servers without the need ...
1
vote
1answer
529 views

generating ssh-keys for a non root user with salt

I need to generate ssh-keys(public/private pair) for a user say helen. This user is already in all my salt minions. How do I generate ssh keys for this user from my salt master? For root user I ...