2
votes
3answers
51 views

Disallow ssh keys without passphrase [duplicate]

I'm currently disabling password authentication on all my ssh servers (good idea of the day!). Some of my servers are shared with other people and I want to force them to use a ssh key with a ...
2
votes
2answers
35 views

SSH key and ip address

A co-worker keeps mentioning SSH keys being associates with an IP address but Im not sure what it exactly means. So i tried generating a SSH key and it had my host name at the end of the file. This ...
1
vote
1answer
38 views

How to programatically find default ssh key?

In most of my experience, by default, ssh will look in ~/.ssh/id_rsa(.pub) for the default key pair. Ocassionally I try to write scripts to take advantage of this default key location, but I end up ...
-1
votes
1answer
48 views

SSH through another machine at work to an external server [duplicate]

I'm fairly sure this will have been asked before, I have found similar questions but I do not fully understand how to apply them to my situation. So, sorry for asking again. We have a number of ...
12
votes
4answers
753 views

Publishing id_rsa.pub for easier setup of new environments?

To make setting up passwordless SSH easier on new machines and environments, is there any reason why the id_rsa.pub file (just the public half of the key pair) could not be published somewhere on the ...
4
votes
1answer
45 views

SSH How do I ignore IdentityFile not found errors?

I currently have this in my .ssh/config file: Host * AskPassGUI no IdentityFile ~/.ssh/%r@%h IdentityFile ~/.ssh/%h IdentityFile ~/.ssh/id_dsa When I ssh into a host that I don't have a key file ...
0
votes
3answers
49 views

can't force ssh to use a particular key

I have tried to specify the key to be used but for some reason ssh still uses a different key as see below $ cat ~/.ssh/config Host BitBucket HostName ...
1
vote
0answers
46 views

ssh login not working for new user [closed]

I have done the same process in several servers. However, this particular one is not letting me login remotely using ssh. Here's what I did: adduser nagios sudo su - nagios mkdir .ssh vim ...
0
votes
3answers
44 views

SSH aborts with Too many authentication failures

I'm attempting to run this simple provisioning script but I'm encountering errors when running vagrant up and then vagrant provision commands. I read that I needed to create a /etc/ansible/hosts file ...
2
votes
3answers
85 views

Disabled root login for SSH in Centos 5.9, key login no longer working

I have a Centos 5.9 server which I have previously configured to access via SSH key login and this has been working fine for many months. I recently had to have an issue resolved remotely which ...
1
vote
1answer
68 views

Can access sshd-server with one user, but not with an second

I am using public-private-keys to access my server. With the user "peter" I can access the server normal, but with the user "git" I can not access the server. Its always asking me for a password. If I ...
3
votes
1answer
49 views

Best approach to generate and use ssh key pairs

New to ServerFault, but have been on StackOverflow for a few months and loving it. I work on a daily basis on 5 servers I have been setting up for some time now. These servers are all AIX 7.1, and ...
-2
votes
1answer
112 views

Impossible to connect ssh /root/.ssh/known_hosts': No such file or directory

I can't connect to my server with ssh. I have already started a session with ssh but i know if i quit this session, i won't be able to connect again to my server. ssh root@genese.com ...
1
vote
1answer
53 views

Why do I have to log into ssh with my password once per day?

When I try to ssh using an encrypted key held in ssh-agent, I get the following (using ssh -vvv): debug1: Next authentication method: publickey debug1: Offering RSA public key: ...
3
votes
2answers
110 views

Ssh-add and contacting server unsuccessfully

I forgot how to do this procedure. I did on OSX 10.9.1 run ssh-keygen in my server moved the private-key id_rsa to my laptop's $HOME/.ssh/id_rsa, removed the private key id_rsa from my server ...
0
votes
0answers
55 views

Capistrano, EC2, Permission Denied despite all user info being correct

So I'm using WP-Stack and trying to deploy from my local machine to an EC2 instance. Ive follow capistrano's SSH literature and I can for instance get the server info by just running SSH and the ...
0
votes
0answers
40 views

SSH between macs in a local environment, full control on each?

I'm attempting to use my Mac Mini as my "central server" in my local environment and then I develop on it, it runs nginx, php-fpm, etc. Everything is working fine. But I wish to do capistrano ...
0
votes
0answers
83 views

Linux TACACS+ auth for SSH but allow users to use public key auth

we have running tacacs environment for centralised login to our routers, firewalls etc and even most of our linux boxes to ssh what we would like to do is allow users to authenticate to SSH via ...
0
votes
1answer
37 views

My new ubuntu server has ssh_host_ecdsa_key and ssh_host_rsa_key files on it already, is this normal?

I have a new dedicated server, which I currently access with username and password over ssh. I have not yet set up an ssh key. I am just looking into it now. So this is a new server with ubuntu ...
3
votes
1answer
108 views

SSH ForwardAgent multiple hops

I've been looking for a solution to the following problem for the past 2 hours with no luck. Development: I'm using publickey authentication to connect to my servers. I use ssh-agent forwarding in ...
1
vote
1answer
34 views

ssh keys from mac to ubuntu 12 lts

I am attempting to set up a scenario in which I do not require to submit a password to ssh into an ubuntu machine from a mac. This is procedure i have been following: 1 - Open a terminal in your mac ...
2
votes
2answers
204 views

SSH login fails for EC2 instances created from image of working EC2

I have a functioning EC2 instance with several users, some of whom are chrooted to their home directories, some of whom are ftp-only and have no shell access, etc... ec2-user is the main admin ...
2
votes
2answers
184 views

Setup public key authorized SSH for non-root users

I was able to setup ssh login using public keys for root users and tried to apply the same logic for non-root users. I have tried to troubleshoot this issue in vain. I am using centos for both my ...
1
vote
2answers
74 views

SSH: Unable to login with key after disabling password authentication

I have an ubuntu server is on Amazon EC2. Earlier I used to login with the original pem key file generated at instance launch time. ssh -i /path/to/key.pem ubuntu@instance-dns-name.com I tried to ...
0
votes
1answer
127 views

Add authentication keys to dropbear ssh?

For ssh I usually add keys to /etc/ssh/keys-root/authorized_keys so that I can log in without entering a password. I recently discovered a few systems that use dropbear ssh instead of ssh/openssh. Is ...
2
votes
1answer
120 views

Change ssh ControlPath with host-specific declaration

I have a situation where I need to access the same SSH host (GitHub) with two different SSH keys. This is no problem and I can set it up easily by aliasing the hostname. The problem comes when this ...
1
vote
3answers
100 views

Disable Password Authentication for Remote Users Only

I've read how it is possible to disable password authentication on an Ubuntu server. However, is it possible to disable this for remote users only? I'm afraid that, if I enable this both locally and ...
0
votes
3answers
395 views

Any reason sshd_config can not be set to an authorized_keys file not in home?

Troubleshooting SSH and NX I have a working SSH connection using a RSA key. The trouble is NX server wants the sshd_config parameter AuthorizedKeysFile to be set to an NX installed file, ...
1
vote
1answer
106 views

SSH doesn't work with my key for an user but works for another

Server (Ubuntu): ~/.ssh/authorized_keys file (on issue-user): just one public key on one single line. No extra lines! No comments! correct user/group owner 644 rights Local Machine (Windows 7): ...
2
votes
1answer
472 views

deploy ssh key from master to minion via salt pillars

I have two ssh keys that I'm trying to deploy to one of my minions.But I cant seem to get it to deploy.It errors out....Here is the init.sls in pillars.... /xxx/yyy/zzz/id_rsa: file.managed: - ...
1
vote
1answer
136 views

SSH access to AWS working with default id_rsa.pub but not with key generated using ssh-keygen

Hi I've never posted a question here but, I'm trying to access an AWS instance without entering a password with the following and having some issues. $ ssh -i ~/.ssh/id_rsa_aws.pub ...
0
votes
1answer
49 views

Can I use switch user “su” with keys / certificate?

I just locked myself out of SSH. Basically, I added three users to /etc/ssh/sshd_config using the AllowUsers directive, which is great because now they can login, but now I can't, and I'm the only ...
1
vote
3answers
473 views

ssh-copy-id in one line with password, possible?

I'm trying to setup an automated script in Ansible to set a new server, and i'm using ssh-copy-id to add the Ansible master server to the new server's authorized ssh keys. I created a script which ...
1
vote
2answers
125 views

SSH Key Forwarding fails as soon as I am root

Situation I add a ssh-key to the chain using ssh-add -K the_path as user@local I set up key forwarding as described here https://help.github.com/articles/using-ssh-agent-forwarding ...
2
votes
0answers
112 views

Unable to force passphraseless ssh authentication while port forwarding

I'm completely at a loss as to what is preventing my local machine from authenticating the connection that is being forwarded from the remote server. I've read a ton of the posts on here regarding ...
0
votes
1answer
118 views

Are using ssh keys PCI compliant?

From PCI-DSS point of view, are using SSH keys for passwordless authentication secure enough? TIA, Vitaly
-1
votes
2answers
429 views

How to ssh into ec2 instance running centos as a newly created user?

I am able to ssh into an ec2 instance as the root user using the private key .pem that was generated when I created the instance. $ ssh -i Desktop/key.pem root@123.us-west-2.compute.amazonaws.com I ...
0
votes
2answers
165 views

Create an SSH tunnel with authentication keys - Syntax

I have to create an SSH tunnel to connect a deployment server to an VPN: DeploymentServer --> Gateway --> PrivateServer Each machine using a key, I tried the following command: myMachine $ ...
0
votes
0answers
172 views

Passwordless SSH key copied from one server to another now asks for passphrase

I'm using chef to build a server. I generated a passwordless SSH keypair on one server and added the public & private keys to chef. After testing, it worked. When I provision another server and ...
1
vote
2answers
62 views

Why to use password protected SSH key files for remote access? [duplicate]

I was thinking of using key files for remote SSH access to my server instead of entering the account's password manually at login. On the Internet I found several tutorials on how to do that for ...
1
vote
2answers
63 views

Why cant I ssh into my ubuntu server? (ssh_exchange_identification error) [duplicate]

I am trying to ssh into my ubuntu server (which I have done many times before) and I get the error: ssh_exchange_identification: Connection closed by remote host ssh -vvv shows the following: ...
1
vote
1answer
71 views

Default ubuntu user deleted, unable to access EC2 Instance via SSH

This is my first foray into using EC2, and I created my first instance using an Amazon AMI running Ubuntu 12.04. I created a keypair and downloaded the .pem file to my local machine. I was able to ...
2
votes
1answer
520 views

Bad owner or permissions on /root/.ssh/config

I have MASTER key under user alexus, yet whenever trying to ssh as root and/or other users on the box via sudo and getting error Bad owner or permissions on /root/.ssh/config [root@wcmisdlin02 ~]# ls ...
0
votes
1answer
106 views

Using authority-given .cer file to login on remote servers on OS X

A few months ago I bought a certificate from a popular certification authority (Certum). I used it to sign emails, but today the admin at my work asked me to connect to our main server via ssh. He ...
0
votes
2answers
102 views

No authorized_hosts file created`

I want to log in without having to enter a password. I have explored my options and generated keys. The next step mentioned is to copy the file contents to authorized_host file. But that file does not ...
1
vote
2answers
186 views

Is there any reason to use fail2ban with SSH password logins disabled?

I am setting up an Ubuntu server hosted by Linode. I am stepping through their security guide and they recommend installing fail2ban after disabling password based SSH logins. I don't see the point ...
0
votes
1answer
51 views

Reverse ssh-agent forwarding. Using a remote ssh key

I have my github.com private ssh key in an ssh-agent on a key server. From my home computer behind NAT I want to run git pull and use my github ssh key. The only way I know of doing this is to ssh ...
0
votes
2answers
112 views

Generate ssh key pairs to connect to additional remote machines

I've already generated a ssh key pair to connect to a remote machine, and now need to connect to a second/separate machine using the same method. Should I continue using the same existing key pair ...
0
votes
0answers
60 views

ssh agent forwarding appears to be failing on only one machine

I have two servers, with a common home directory, and therefore common ~/.ssh directories. I add my private key to the agent on my desktop. In this way, I can ssh -A from desktop -> machine1a then ...
1
vote
1answer
244 views

SSH: Possible to forward password authentication to command executed on remote machine?

A quick background on what exactly I'm trying to do: I frequently have to set up public key authentication from remote clients to my local machine. I'm attempting to automate this process a bit by ...