The tag has no wiki summary.

learn more… | top users | synonyms

5
votes
1answer
23 views

Are there any security benefits to deploying custom SSH DH groups to client-only systems?

One suggested mitigative strategy against Logjam-related attacks on SSH is to generate custom SSH Diffie-Hellman groups using something like (the below being for OpenSSH) ssh-keygen -G ...
1
vote
0answers
20 views

Hosting SSH Keys [on hold]

Most of us keep ssh-keys for server logins, which is perfect but once you have two different set of ssh-keys (office, personal) that means its hard for you to manage 'em once you have new servers in ...
39
votes
10answers
10k views

Why is SSH password authentication a security risk?

Most guides for OpenSSH configuration advise to disable password authentication in favor of key-based authentication. But in my opinion password authentication has a significant advantage: an ability ...
-3
votes
1answer
33 views

Connecting AWS from Windows. Error: Using username “ec2-user”. Server refused our key

I am connecting AWS EC2 using Putty from Windows 8, I followed all steps mentioned on this page of conversion of .pem to .ppk and have loaded .ppk in Putty. Putty Configurations: Host Address: ...
1
vote
2answers
28 views

To generate key for AWS server using ssh-keygen from .pem for PuTTY

AWS gave me a private key in the format of .pem. I am trying to use it with PuTTY but failed and I read I need to generate a key with PuTTYgen but PuTTYgen is only for Windows. So I am trying to use ...
4
votes
1answer
59 views

How to disable ALL authentication in sshd? [closed]

Here's a question that I have found absolutely no answers for: how can you configure sshd so that anybody can freely SSH into the box without password or key authentication? The objective is to allow ...
7
votes
5answers
5k views

Trying to SSH in to remote computer but still asking for password

Trying to SSH in to remote computer but still asking for password. I have a number of computers running SElinux and only one of them is giving me a hard time using ssh without the password. I did ...
1
vote
0answers
10 views

Is it possible to authenticate to Sonatype Nexus via ssh keys

Is it possible to authenticate to Sonatype Nexus via ssh keys or any other method that does not require user password in maven settings.xml? I know there are user generated tokens in Sonatype Nexus ...
6
votes
2answers
464 views

Using ssh key pair authentication and disabling ssh password authentication - what happens if private key lost?

I'm configuring my first server on Linode and going through their set up tutorials. In their Securing Your Server tutorial, it recommends using ssh key pair authentication and disabling password ...
3
votes
1answer
121 views

AuthorizedKeysFile line commented out but still seems to work

I'm setting up a server on Linode and following their Securing Your Server guide. They recommend setting up ssh key pair authentication. I have already uploaded my public key to server and the key ...
1
vote
2answers
159 views

password-less ssh works to connect to one user on a remote machine but not another

The remote server is running CentOS 5.5. I have created an rsa key from my client server, and copied it into /home/hadoop/.ssh/authorized_keys. This worked fine - I can ssh to hadoop@remoteserver ...
2
votes
1answer
2k views

How do I properly generate a keystore for ssl?

I'm trying to get an ssl certificate from godaddy for use with jetty. These are my steps: keytool -keystore keystore -alias jetty -genkey -keyalg RSA -keysize 2048 What is your first and last name?: ...
-1
votes
0answers
16 views

connect to openshift amazon ec2 server via bitvise

is it possible to connect to my open-shift application server via bitvise . i tried connecting but always got same error as in the image . if it is possible can someone please tell me the correct way ...
4
votes
1answer
1k views

ForwardAgent in Jenkins

I'm trying to enable ForwardAgent in the "Publish over SSH" Jenkins Plugin. This would allow jenkins to execute deployments, rsyncs and svn+ssh checkouts on remote servers. But there's no option for ...
1
vote
0answers
18 views

Ubuntu 14.04 - rsync corrupting SSH configs/keys?

I have two Ubuntu 14.04 servers S1 (user root) and S2 (user dataman). S1 is responsible for handling file uploads and transferring backups to S2. On S1 I am using PubKey authentication to S2 for ...
0
votes
0answers
19 views

why does having ~/.ssh/id_rsa.pub cause GUI dialog asking for SSH password even though SSH_ASKPASS is empty?

How the problem started For some reason I did not have my id_rsa.pub file in ~/.ssh. So I copied it off one of my servers to ~/.ssh/ on my machine... so that I have it, so I can copy it to servers ...
4
votes
3answers
621 views

ssh-copy-id - permission denied (publickey) [closed]

I want to set up ssh tunnel to the mysql server which is in computer which has virtual machine. Also the tunnel has to work if the machine is restarted. So lets say A is computer with linux software. ...
1
vote
0answers
53 views

Is rbash secure if user login and ssh passwords are disabled?

I've got a server that I want to use as an SSH gateway for remote and local port forwarding. I don't want arbitrary commands to be able to be executed on it, only my scripts. I keep reading about how ...
0
votes
1answer
78 views

How to run php exec for nested scripting on remote machines?

I originally asked this question stackEx, and realized it was a much better fit here. I'm trying to automate the deployment of services on a cluster of hosts from a web-server. I've evoked the php ...
-1
votes
2answers
103 views

SSH key rejected by google compute engine instance

I generated my ssh key through the google sdk shell, then i went to put my key in FileZilla and connect to my google compute engine instance and it wont accept my key. How do i fix this?
4
votes
1answer
4k views

deploy ssh key from master to minion via salt pillars

I have two ssh keys that I'm trying to deploy to one of my minions.But I cant seem to get it to deploy.It errors out....Here is the init.sls in pillars.... /xxx/yyy/zzz/id_rsa: file.managed: - ...
0
votes
0answers
41 views

How to configure SSH host keys in cloudformation template?

I'm trying to configure an EC2 with known SSH host keys on boot using cloud-init in a cloudformation template. But now I can't SSH into the server. It's tricky to debug :-) Here's the userdata part ...
18
votes
6answers
12k views

Is there an equivalent to ssh-copy-id for Windows?

Is there any equivalent or port of ssh-copy-id available for Windows? That is, is there an easy way to transfer SSH keys from a local machine to a remote server under Windows? In case it helps, I'm ...
0
votes
1answer
49 views

SSH timeout issues not consistent

I am not sure if anyone else have had issues with SSH timeout I setup a FRESH install of CentOS 6.5 minimal without touching the SSH congfig at all and when i log into it via SSH using putty..it ...
0
votes
1answer
10 views

Server connects without passphrase via putty but asks for passphrase from the native command line?

I am trying to connect to an EC2 instance and it has a .ppk security key. I am not an expert on server frankly and I am still try to figure things out by trail and error. I usually connect to my ...
1
vote
2answers
44 views

sshd: logging client's public key

I need to run an SSH server and log the IP & public key of any client that attempts to connect (without actually granting access). The use case is this: I deploy this web app to a remote host ...
10
votes
2answers
607 views

SSH: Safe for client to host private RSA key?

Is it safe to generate a public/private key pair on the server, add the public key to the authorized_keys list, and then copy the private key to each client, as described here ...
2
votes
1answer
45 views

SSH key authentication not working

I've a server running Ubuntu 10.04 (as a VM) to which I can't connect using ssh key authentication without being asked for the password. I've read a lot before posting but I really don't know what I'm ...
2
votes
1answer
64 views

ssh command line specify server host key fingerprint

Using ssh command line (OpenSSH), can I specify the server's host key fingerprint? This is possible with winscp.com using (e.g.) -hostkey="ssh-rsa 2048 AA:BB:CC...etc I have read the man page a ...
1
vote
1answer
25 views

Determine which key is successfully used for authentication with AuthorizedKeyCommands

As of OpenSSH 6.2, the option to use an external program for key pair based authentication is available with AuthorizedKeysCommand. According to the sshd_config man page, this program should return ...
1
vote
2answers
623 views

Unable to ssh to GCE Permission denied (publickey)

I created a VM via bitnami in Google Compute Engine. Previously I was able to ssh via the bitnami web interface. I tried to ssh via terminal on my Mac but kept getting the Permission denied ...
1
vote
1answer
110 views

How to change SSH key on Google Cloud?

I need to replace the existing SSH key with a new one, but I don't see such options in Cloud admin panel. What is the right way to do this?
5
votes
4answers
572 views

Any point using Denyhosts for SSH when only RSA key logins are allowed anyway?

Right, so if I can only SSH into my box by having the appropriate RSA keys configured, is there any point in using Denyhosts for SSH as well? Or is Denyhosts only looking at keyboard-interactive / ...
2
votes
1answer
248 views

SSH with DSA 2048 bits key

I need to set up secure connection through ssh keys, prerequisites are : DSA type number of bits : 2048 Passphrase : yes On my Linux I can't create this kind of key, the man says : DSA keys ...
0
votes
1answer
191 views

GitLab push not possible and always results in asking for git-user password [closed]

I have a problem with GitLab. Everything is fine, but I can't push. It is asking me all the time the password of the user git. Is it a problem, that I first installed the Omnibus package and then ...
3
votes
3answers
896 views

SSH Public Key Format

I have a public key in the format: ---- BEGIN SSH2 PUBLIC KEY ---- Comment: "somename-20060227" AAAAB3NzaC1yc2EAAAABJQAAAIBmhLUTJiP[and so on]== ---- END SSH2 PUBLIC KEY ---- Usually I see keys ...
0
votes
2answers
35 views

Adding an SSH public key to a new account without enabling password authentication

On a SSH server, I have the following (truncated) configuration: PubkeyAuthentication yes PasswordAuthentication yes On my client, I have a key pair, and have added my public key on the server ...
2
votes
2answers
4k views

Creating SSH key on Jenkins Master - Centos Yum Install

I have installed Jenkins on a Centos VM as I am looking at replacing Bamboo, I have it all up and running by following the install instructions. That went fine, I then wanted to spin up a Slave, I ...
2
votes
3answers
1k views

Passwordless ssh into the same machine

OK, I know the basics of how to set up passwordless ssh: create a keypair using ssh-keygen then add the public key from id_dsa.pub into the host's .ssh/authorized_keys. So for two different machines ...
8
votes
4answers
5k views

Automating ssh-copy-id

I have some arbitrary number of servers with the same user/pass combination. I want to write a script (that I call once) so that ssh-copy-id user@myserver is called for each server. Since they ...
2
votes
2answers
160 views

Default ubuntu user deleted, unable to access EC2 Instance via SSH

This is my first foray into using EC2, and I created my first instance using an Amazon AMI running Ubuntu 12.04. I created a keypair and downloaded the .pem file to my local machine. I was able to ...
3
votes
5answers
7k views

How do I configure sshd on Debian to use Public Key Authentication?

I'm working on a (Debian) Dreamhost VPS, and it seems to want password-based authentication only: adding my RSA and DSA public keys to ~/.ssh/authorized_keys did not change the behavior of requiring a ...
-1
votes
1answer
352 views

SSH failing to connect, No supported key exchange algorithms

There are numerous questions with the same title however none of the solutions apply to my issue. I get the following lines of error in my sshd log: Jan 6 21:57:55 <computer name> sshd[30103]: ...
1
vote
1answer
391 views

CoreOS / Docker “$ fleetctl satus my.service” - ssh: handshake failed

Digging in to CoreOS clusters with Docker and have come upon a SSH issue while trying to learn how to work with fleet. Deploying, running services etc goes well. SSH auth problem occure when executing ...
1
vote
1answer
87 views

gitolite git user asking for password with valid keys

My gitolite installation start to ask for password suddendly, I checked the /var/log/secure file and found this. sshd[9071]: User git not allowed because account is locked sshd[9072]: ...
0
votes
1answer
28 views

Is my private key safe if I use authenticaiton agent forwarding with the ssh -A option?

I love the option to connect to servers via SSH with the -A option, so I can use my private keys on the server. This lets me update git/svn repositories and connect to other servers without the need ...
1
vote
1answer
50 views

Instance created from shared snapshot gives Server refused our key error

I have created an instance from a shared snapshot from other aws account,following steps were done by me, 1.Share snapshot from other account. 2.copy it to my account. 3.create a volume from it ...
2
votes
2answers
5k views

Changing the passphrase of a puttygen private key in Windows

I have a private key in Windows, created by puttygen.exe. I used default options to save it, the tool automatically gave it a .ppk extension, and it looks like this: PuTTY-User-Key-File-2: ssh-rsa ...
1
vote
1answer
306 views

generating ssh-keys for a non root user with salt

I need to generate ssh-keys(public/private pair) for a user say helen. This user is already in all my salt minions. How do I generate ssh keys for this user from my salt master? For root user I ...
2
votes
2answers
517 views

Does Mac OS X Cache Private Keys for SSH?

I have SSH key-based authentication setup to connect to a remote server from my Macbook Air. The private key was originally stored in ~/.ssh/id_rsa, but I have since moved that file to a secure ...