The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
2answers
556 views

bash script to create user then create ssh keys

Please note I am a total linux newbie, please bare that in mind when answering this question as I have very limited knowledge of linux. OS: Debian Squeeze I am using ZSH and have created a function ...
2
votes
2answers
185 views

Is it wise to use very secure password for sudo users when using SSH Keys for server login?

I am not asking how to do anything here, rather trying to understand best practices and the "right" way to handle server security. To prevent brute force password attacks, I have secured my server in ...
1
vote
1answer
56 views

ssh keys from mac to ubuntu 12 lts

I am attempting to set up a scenario in which I do not require to submit a password to ssh into an ubuntu machine from a mac. This is procedure i have been following: 1 - Open a terminal in your mac ...
2
votes
2answers
665 views

SSH login fails for EC2 instances created from image of working EC2

I have a functioning EC2 instance with several users, some of whom are chrooted to their home directories, some of whom are ftp-only and have no shell access, etc... ec2-user is the main admin ...
2
votes
1answer
289 views

OpenStack EC2 Ubuntu cloud image — SSH host keys were changed after emegency reboot

Recently one of our servers was hanged due to IPMI BMC failure. It is CentOS 6.3 OpenStack compute host serving KVM vitual machines with qcow2 backend. There was running a VM based on EC2 Ubintu ...
2
votes
2answers
176 views

How to limit access to the private ssh key using SELinux policies?

I'm using Fedora distro - with its preinstalled SELinux policies. I want to limit unsecured access to my private keys in ~/.ssh folder - to prevent leaking by possible malware, that may run under my ...
0
votes
1answer
66 views

configuration files and ssh keys are being reset

I own a Centos 6.4 OS. I have standard lamp stack installed. Apache 2.2, PHP54 and mysql 5.5. I have also uploaded a public key into my authorized file in .ssh. I have my document root set in my ...
3
votes
2answers
3k views

Setup public key authorized SSH for non-root users

I was able to setup ssh login using public keys for root users and tried to apply the same logic for non-root users. I have tried to troubleshoot this issue in vain. I am using centos for both my ...
1
vote
2answers
265 views

SSH: Unable to login with key after disabling password authentication

I have an ubuntu server is on Amazon EC2. Earlier I used to login with the original pem key file generated at instance launch time. ssh -i /path/to/key.pem ubuntu@instance-dns-name.com I tried to ...
-4
votes
2answers
207 views

Does ssh-copy-id overwrite previous keys? [closed]

I haven't yet found any definitive answer on this using google. It seems like the answer is no, but I need to know for sure before I go ahead and do it. Does ssh-copy-id append the key to ...
1
vote
1answer
223 views

How can I add private key to windows credentials manager?

I have a linux macheen that uses a public key/private key login. I am trying to add a private key (with password) to windows 7/8 credentials manager. I use pageant right now but i would like for a ...
0
votes
1answer
1k views

Add authentication keys to dropbear ssh?

For ssh I usually add keys to /etc/ssh/keys-root/authorized_keys so that I can log in without entering a password. I recently discovered a few systems that use dropbear ssh instead of ssh/openssh. Is ...
2
votes
1answer
422 views

Change ssh ControlPath with host-specific declaration

I have a situation where I need to access the same SSH host (GitHub) with two different SSH keys. This is no problem and I can set it up easily by aliasing the hostname. The problem comes when this ...
1
vote
3answers
158 views

Disable Password Authentication for Remote Users Only

I've read how it is possible to disable password authentication on an Ubuntu server. However, is it possible to disable this for remote users only? I'm afraid that, if I enable this both locally and ...
1
vote
3answers
2k views

Any reason sshd_config can not be set to an authorized_keys file not in home?

Troubleshooting SSH and NX I have a working SSH connection using a RSA key. The trouble is NX server wants the sshd_config parameter AuthorizedKeysFile to be set to an NX installed file, ...
12
votes
1answer
448 views

Can Bash Tell Me Which SSH Public Key Was Used To Authenticate?

Let's say I want to track my root users. Each of them has a unique private key and their public keys have been stored in /root/.ssh/authorized_keys. Given that each user logs in with their unique key ...
1
vote
1answer
749 views

SSH doesn't work with my key for an user but works for another

Server (Ubuntu): ~/.ssh/authorized_keys file (on issue-user): just one public key on one single line. No extra lines! No comments! correct user/group owner 644 rights Local Machine (Windows 7): ...
3
votes
1answer
4k views

deploy ssh key from master to minion via salt pillars

I have two ssh keys that I'm trying to deploy to one of my minions.But I cant seem to get it to deploy.It errors out....Here is the init.sls in pillars.... /xxx/yyy/zzz/id_rsa: file.managed: - ...
1
vote
1answer
461 views

SSH access to AWS working with default id_rsa.pub but not with key generated using ssh-keygen

Hi I've never posted a question here but, I'm trying to access an AWS instance without entering a password with the following and having some issues. $ ssh -i ~/.ssh/id_rsa_aws.pub ...
0
votes
1answer
54 views

Can I use switch user “su” with keys / certificate?

I just locked myself out of SSH. Basically, I added three users to /etc/ssh/sshd_config using the AllowUsers directive, which is great because now they can login, but now I can't, and I'm the only ...
1
vote
3answers
2k views

ssh-copy-id in one line with password, possible?

I'm trying to setup an automated script in Ansible to set a new server, and i'm using ssh-copy-id to add the Ansible master server to the new server's authorized ssh keys. I created a script which ...
1
vote
2answers
231 views

SSH Key Forwarding fails as soon as I am root

Situation I add a ssh-key to the chain using ssh-add -K the_path as user@local I set up key forwarding as described here https://help.github.com/articles/using-ssh-agent-forwarding ...
2
votes
0answers
141 views

Unable to force passphraseless ssh authentication while port forwarding

I'm completely at a loss as to what is preventing my local machine from authenticating the connection that is being forwarded from the remote server. I've read a ton of the posts on here regarding ...
0
votes
1answer
281 views

Are using ssh keys PCI compliant?

From PCI-DSS point of view, are using SSH keys for passwordless authentication secure enough? TIA, Vitaly
0
votes
2answers
2k views

How to ssh into ec2 instance running centos as a newly created user?

I am able to ssh into an ec2 instance as the root user using the private key .pem that was generated when I created the instance. $ ssh -i Desktop/key.pem root@123.us-west-2.compute.amazonaws.com I ...
2
votes
2answers
3k views

Creating SSH key on Jenkins Master - Centos Yum Install

I have installed Jenkins on a Centos VM as I am looking at replacing Bamboo, I have it all up and running by following the install instructions. That went fine, I then wanted to spin up a Slave, I ...
2
votes
2answers
4k views

Changing the passphrase of a puttygen private key in Windows

I have a private key in Windows, created by puttygen.exe. I used default options to save it, the tool automatically gave it a .ppk extension, and it looks like this: PuTTY-User-Key-File-2: ssh-rsa ...
0
votes
3answers
2k views

Setting up Chef Node: Amazon EC2 instance is create but bootstrap fails

I am trying to get going with Chef and the freebie Chef server from Opscode. I got my Chef workstation configured on a local VM running Ubuntu 12.04LTS. I downloaded the chef-repo from GitHub as ...
0
votes
2answers
699 views

Create an SSH tunnel with authentication keys - Syntax

I have to create an SSH tunnel to connect a deployment server to an VPN: DeploymentServer --> Gateway --> PrivateServer Each machine using a key, I tried the following command: myMachine $ ...
0
votes
0answers
285 views

Passwordless SSH key copied from one server to another now asks for passphrase

I'm using chef to build a server. I generated a passwordless SSH keypair on one server and added the public & private keys to chef. After testing, it worked. When I provision another server and ...
1
vote
2answers
217 views

Why to use password protected SSH key files for remote access? [duplicate]

I was thinking of using key files for remote SSH access to my server instead of entering the account's password manually at login. On the Internet I found several tutorials on how to do that for ...
1
vote
2answers
114 views

Why cant I ssh into my ubuntu server? (ssh_exchange_identification error) [duplicate]

I am trying to ssh into my ubuntu server (which I have done many times before) and I get the error: ssh_exchange_identification: Connection closed by remote host ssh -vvv shows the following: ...
2
votes
2answers
155 views

Default ubuntu user deleted, unable to access EC2 Instance via SSH

This is my first foray into using EC2, and I created my first instance using an Amazon AMI running Ubuntu 12.04. I created a keypair and downloaded the .pem file to my local machine. I was able to ...
2
votes
1answer
1k views

Bad owner or permissions on /root/.ssh/config

I have MASTER key under user alexus, yet whenever trying to ssh as root and/or other users on the box via sudo and getting error Bad owner or permissions on /root/.ssh/config [root@wcmisdlin02 ~]# ls ...
0
votes
1answer
245 views

Using authority-given .cer file to login on remote servers on OS X

A few months ago I bought a certificate from a popular certification authority (Certum). I used it to sign emails, but today the admin at my work asked me to connect to our main server via ssh. He ...
0
votes
2answers
248 views

No authorized_hosts file created`

I want to log in without having to enter a password. I have explored my options and generated keys. The next step mentioned is to copy the file contents to authorized_host file. But that file does not ...
2
votes
2answers
456 views

Is there any reason to use fail2ban with SSH password logins disabled?

I am setting up an Ubuntu server hosted by Linode. I am stepping through their security guide and they recommend installing fail2ban after disabling password based SSH logins. I don't see the point ...
0
votes
1answer
168 views

Reverse ssh-agent forwarding. Using a remote ssh key

I have my github.com private ssh key in an ssh-agent on a key server. From my home computer behind NAT I want to run git pull and use my github ssh key. The only way I know of doing this is to ssh ...
0
votes
2answers
3k views

Selinux in permissive mode, ssh key based auth and locked account

I noticed something weird regarding ssh key based login and selinux in permissive mode. Let me introduce you the setup: The server is an updated Centos 6.4 x86_64. We create user without a password ...
0
votes
2answers
181 views

Generate ssh key pairs to connect to additional remote machines

I've already generated a ssh key pair to connect to a remote machine, and now need to connect to a second/separate machine using the same method. Should I continue using the same existing key pair ...
1
vote
1answer
509 views

SSH: Possible to forward password authentication to command executed on remote machine?

A quick background on what exactly I'm trying to do: I frequently have to set up public key authentication from remote clients to my local machine. I'm attempting to automate this process a bit by ...
1
vote
1answer
352 views

How to rsync to a server using ssh keys

I'm running on a Mac, and I want to set up a crontab to rsync from my VPS on a weekly basis to grab some backup archives. I'm using ssh keys (no passwords allowed on the VPS), and normally I can ssh ...
1
vote
1answer
320 views

Secure password less ssh configuration between HP-UX and Linux Suse

I already verify the permission (700 for .ssh and 600 for ./ssh/* ) review the config for the file sshd_config, but the server continu asking for a password, this is the log: nomgmpr@psoftn $ ssh ...
1
vote
1answer
364 views

Manage multiple ssh-keys for one user with Chef

I started to use Chef in my infrastructure, but cannot make recipe like this: -each developer has own public ssh-key. -in remote server there is an unique user, named ubuntu I want to use data bags ...
3
votes
1answer
6k views

Temporarily disable ssh public key authentication from client

really hope you're doing fine. Is there a way to temporarily disable public key authentication when ssh'ing, and use password authentication instead? I currently want to access remote server, but I'm ...
0
votes
1answer
168 views

ssh_exchange_identification: Connection closed by remote host remote desktop

I'm trying to connect to my work server using my macbook. in the morning it was working and now its not. This is what im doing ssh -vv muhammad@man.softwarehouse.com -L 1024:bolton:3389 This is ...
0
votes
2answers
135 views

puppet enterprise node install - Security risk?

I am learning puppet and using this tool install puppet clients on nodes. puppet node install --login=root --keyfile=~/.ssh/id_rsa --install-script puppet-enterprise --installer-payload ...
3
votes
5answers
5k views

how to SSH to EC2 without explicitly using the pem key?

I have a windows as my main OS. Using VMware player, I setup a Ubuntu server 12.4 as a guest machine. The Ubuntu server have "ubuntu" user. I created a new EC2 instance + setup pem key. From the ...
3
votes
1answer
240 views

SSH key-based authentication best practice

One of the security processes that we are thinking of changing is the way we allow users to access our servers. We have about 20 web servers where the only access is SSH and at the moment we use ...
5
votes
2answers
525 views

Which is the maximum number of keys in authorized_keys file?

I'm developing a solution which inserts a big number of SSH-keys into the authorized keys files of my SSH-server. Does anyone know the limit of keys that you can insert into that file? Are we talking ...