an authorization mechanism for SSH involving public-key cryptography.

learn more… | top users | synonyms

2
votes
2answers
689 views

SSH key and ip address

A co-worker keeps mentioning SSH keys being associates with an IP address but Im not sure what it exactly means. So i tried generating a SSH key and it had my host name at the end of the file. This ...
0
votes
2answers
89 views

Are the keys created and added when launching an EC2 instance added to ~/.ssh/authorized_keys for ec2-user?

Are the keypairs created and added when launching an EC2 instance added to ~/.ssh/authorized_keys for the ec2-user ? or is there another mechanism used? If so, would the key have a name like 'master'? ...
2
votes
1answer
103 views

How to programatically find default ssh key?

In most of my experience, by default, ssh will look in ~/.ssh/id_rsa(.pub) for the default key pair. Ocassionally I try to write scripts to take advantage of this default key location, but I end up ...
-1
votes
1answer
149 views

SSH through another machine at work to an external server [duplicate]

I'm fairly sure this will have been asked before, I have found similar questions but I do not fully understand how to apply them to my situation. So, sorry for asking again. We have a number of ...
15
votes
4answers
910 views

Publishing id_rsa.pub for easier setup of new environments?

To make setting up passwordless SSH easier on new machines and environments, is there any reason why the id_rsa.pub file (just the public half of the key pair) could not be published somewhere on the ...
4
votes
1answer
457 views

User@host in a SSH-RSA public key

What role does the user@host that often appears at the end of a public ssh-rsa key play? Is it necessary? Does if serve any purpose in the authentication, or is it simply a record of who and where ...
4
votes
1answer
338 views

SSH How do I ignore IdentityFile not found errors?

I currently have this in my .ssh/config file: Host * AskPassGUI no IdentityFile ~/.ssh/%r@%h IdentityFile ~/.ssh/%h IdentityFile ~/.ssh/id_dsa When I ssh into a host that I don't have a key file ...
1
vote
4answers
501 views

can't force ssh to use a particular key

I have tried to specify the key to be used but for some reason ssh still uses a different key as see below $ cat ~/.ssh/config Host BitBucket HostName ...
5
votes
5answers
11k views

SSH aborts with Too many authentication failures

I'm attempting to run this simple provisioning script but I'm encountering errors when running vagrant up and then vagrant provision commands. I read that I needed to create a /etc/ansible/hosts file ...
2
votes
1answer
2k views

How do I properly generate a keystore for ssl?

I'm trying to get an ssl certificate from godaddy for use with jetty. These are my steps: keytool -keystore keystore -alias jetty -genkey -keyalg RSA -keysize 2048 What is your first and last name?: ...
2
votes
3answers
296 views

Disabled root login for SSH in Centos 5.9, key login no longer working

I have a Centos 5.9 server which I have previously configured to access via SSH key login and this has been working fine for many months. I recently had to have an issue resolved remotely which ...
2
votes
3answers
186 views

To add security to SSH-keys from Man-in-middle-attacks [closed]

I would like to get Mobile-phone verification or something else besides the SSH-key verification. How can you add defence to the SSH-keys?
3
votes
1answer
1k views

How do I get a public ssh key on a docker jenkins image for git authentication?

I'm using Docker and I'm running a Jenkins image. The image I'm trying: https://github.com/orchardup/docker-jenkins I need to generate an ssh key pair so I may use it to authenticate to bitbucket. ...
1
vote
1answer
154 views

Can access sshd-server with one user, but not with an second

I am using public-private-keys to access my server. With the user "peter" I can access the server normal, but with the user "git" I can not access the server. Its always asking me for a password. If I ...
3
votes
1answer
98 views

Best approach to generate and use ssh key pairs

New to ServerFault, but have been on StackOverflow for a few months and loving it. I work on a daily basis on 5 servers I have been setting up for some time now. These servers are all AIX 7.1, and ...
-2
votes
1answer
2k views

Impossible to connect ssh /root/.ssh/known_hosts': No such file or directory

I can't connect to my server with ssh. I have already started a session with ssh but i know if i quit this session, i won't be able to connect again to my server. ssh root@genese.com ...
2
votes
1answer
120 views

Why do I have to log into ssh with my password once per day?

When I try to ssh using an encrypted key held in ssh-agent, I get the following (using ssh -vvv): debug1: Next authentication method: publickey debug1: Offering RSA public key: ...
3
votes
2answers
1k views

Ssh-add and contacting server unsuccessfully

I forgot how to do this procedure. I did on OSX 10.9.1 run ssh-keygen in my server moved the private-key id_rsa to my laptop's $HOME/.ssh/id_rsa, removed the private key id_rsa from my server ...
1
vote
0answers
326 views

Linux TACACS+ auth for SSH but allow users to use public key auth

we have running tacacs environment for centralised login to our routers, firewalls etc and even most of our linux boxes to ssh what we would like to do is allow users to authenticate to SSH via ...
0
votes
1answer
146 views

My new ubuntu server has ssh_host_ecdsa_key and ssh_host_rsa_key files on it already, is this normal?

I have a new dedicated server, which I currently access with username and password over ssh. I have not yet set up an ssh key. I am just looking into it now. So this is a new server with ubuntu ...
5
votes
1answer
2k views

SSH ForwardAgent multiple hops

I've been looking for a solution to the following problem for the past 2 hours with no luck. Development: I'm using publickey authentication to connect to my servers. I use ssh-agent forwarding in ...
0
votes
2answers
662 views

bash script to create user then create ssh keys

Please note I am a total linux newbie, please bare that in mind when answering this question as I have very limited knowledge of linux. OS: Debian Squeeze I am using ZSH and have created a function ...
2
votes
2answers
200 views

Is it wise to use very secure password for sudo users when using SSH Keys for server login?

I am not asking how to do anything here, rather trying to understand best practices and the "right" way to handle server security. To prevent brute force password attacks, I have secured my server in ...
1
vote
1answer
57 views

ssh keys from mac to ubuntu 12 lts

I am attempting to set up a scenario in which I do not require to submit a password to ssh into an ubuntu machine from a mac. This is procedure i have been following: 1 - Open a terminal in your mac ...
2
votes
2answers
730 views

SSH login fails for EC2 instances created from image of working EC2

I have a functioning EC2 instance with several users, some of whom are chrooted to their home directories, some of whom are ftp-only and have no shell access, etc... ec2-user is the main admin ...
2
votes
1answer
308 views

OpenStack EC2 Ubuntu cloud image — SSH host keys were changed after emegency reboot

Recently one of our servers was hanged due to IPMI BMC failure. It is CentOS 6.3 OpenStack compute host serving KVM vitual machines with qcow2 backend. There was running a VM based on EC2 Ubintu ...
2
votes
2answers
200 views

How to limit access to the private ssh key using SELinux policies?

I'm using Fedora distro - with its preinstalled SELinux policies. I want to limit unsecured access to my private keys in ~/.ssh folder - to prevent leaking by possible malware, that may run under my ...
0
votes
1answer
67 views

configuration files and ssh keys are being reset

I own a Centos 6.4 OS. I have standard lamp stack installed. Apache 2.2, PHP54 and mysql 5.5. I have also uploaded a public key into my authorized file in .ssh. I have my document root set in my ...
4
votes
2answers
4k views

Setup public key authorized SSH for non-root users

I was able to setup ssh login using public keys for root users and tried to apply the same logic for non-root users. I have tried to troubleshoot this issue in vain. I am using centos for both my ...
1
vote
2answers
305 views

SSH: Unable to login with key after disabling password authentication

I have an ubuntu server is on Amazon EC2. Earlier I used to login with the original pem key file generated at instance launch time. ssh -i /path/to/key.pem ubuntu@instance-dns-name.com I tried to ...
-4
votes
2answers
254 views

Does ssh-copy-id overwrite previous keys? [closed]

I haven't yet found any definitive answer on this using google. It seems like the answer is no, but I need to know for sure before I go ahead and do it. Does ssh-copy-id append the key to ...
1
vote
1answer
276 views

How can I add private key to windows credentials manager?

I have a linux macheen that uses a public key/private key login. I am trying to add a private key (with password) to windows 7/8 credentials manager. I use pageant right now but i would like for a ...
0
votes
1answer
2k views

Add authentication keys to dropbear ssh?

For ssh I usually add keys to /etc/ssh/keys-root/authorized_keys so that I can log in without entering a password. I recently discovered a few systems that use dropbear ssh instead of ssh/openssh. Is ...
2
votes
1answer
488 views

Change ssh ControlPath with host-specific declaration

I have a situation where I need to access the same SSH host (GitHub) with two different SSH keys. This is no problem and I can set it up easily by aliasing the hostname. The problem comes when this ...
1
vote
3answers
172 views

Disable Password Authentication for Remote Users Only

I've read how it is possible to disable password authentication on an Ubuntu server. However, is it possible to disable this for remote users only? I'm afraid that, if I enable this both locally and ...
1
vote
3answers
2k views

Any reason sshd_config can not be set to an authorized_keys file not in home?

Troubleshooting SSH and NX I have a working SSH connection using a RSA key. The trouble is NX server wants the sshd_config parameter AuthorizedKeysFile to be set to an NX installed file, ...
14
votes
1answer
562 views

Can Bash Tell Me Which SSH Public Key Was Used To Authenticate?

Let's say I want to track my root users. Each of them has a unique private key and their public keys have been stored in /root/.ssh/authorized_keys. Given that each user logs in with their unique key ...
1
vote
1answer
896 views

SSH doesn't work with my key for an user but works for another

Server (Ubuntu): ~/.ssh/authorized_keys file (on issue-user): just one public key on one single line. No extra lines! No comments! correct user/group owner 644 rights Local Machine (Windows 7): ...
5
votes
1answer
5k views

deploy ssh key from master to minion via salt pillars

I have two ssh keys that I'm trying to deploy to one of my minions.But I cant seem to get it to deploy.It errors out....Here is the init.sls in pillars.... /xxx/yyy/zzz/id_rsa: file.managed: - ...
1
vote
1answer
573 views

SSH access to AWS working with default id_rsa.pub but not with key generated using ssh-keygen

Hi I've never posted a question here but, I'm trying to access an AWS instance without entering a password with the following and having some issues. $ ssh -i ~/.ssh/id_rsa_aws.pub ...
0
votes
1answer
57 views

Can I use switch user “su” with keys / certificate?

I just locked myself out of SSH. Basically, I added three users to /etc/ssh/sshd_config using the AllowUsers directive, which is great because now they can login, but now I can't, and I'm the only ...
2
votes
3answers
3k views

ssh-copy-id in one line with password, possible?

I'm trying to setup an automated script in Ansible to set a new server, and i'm using ssh-copy-id to add the Ansible master server to the new server's authorized ssh keys. I created a script which ...
1
vote
2answers
245 views

SSH Key Forwarding fails as soon as I am root

Situation I add a ssh-key to the chain using ssh-add -K the_path as user@local I set up key forwarding as described here https://help.github.com/articles/using-ssh-agent-forwarding ...
2
votes
0answers
145 views

Unable to force passphraseless ssh authentication while port forwarding

I'm completely at a loss as to what is preventing my local machine from authenticating the connection that is being forwarded from the remote server. I've read a ton of the posts on here regarding ...
0
votes
1answer
330 views

Are using ssh keys PCI compliant?

From PCI-DSS point of view, are using SSH keys for passwordless authentication secure enough? TIA, Vitaly
0
votes
2answers
2k views

How to ssh into ec2 instance running centos as a newly created user?

I am able to ssh into an ec2 instance as the root user using the private key .pem that was generated when I created the instance. $ ssh -i Desktop/key.pem root@123.us-west-2.compute.amazonaws.com I ...
2
votes
2answers
5k views

Creating SSH key on Jenkins Master - Centos Yum Install

I have installed Jenkins on a Centos VM as I am looking at replacing Bamboo, I have it all up and running by following the install instructions. That went fine, I then wanted to spin up a Slave, I ...
3
votes
2answers
6k views

Changing the passphrase of a puttygen private key in Windows

I have a private key in Windows, created by puttygen.exe. I used default options to save it, the tool automatically gave it a .ppk extension, and it looks like this: PuTTY-User-Key-File-2: ssh-rsa ...
0
votes
3answers
2k views

Setting up Chef Node: Amazon EC2 instance is create but bootstrap fails

I am trying to get going with Chef and the freebie Chef server from Opscode. I got my Chef workstation configured on a local VM running Ubuntu 12.04LTS. I downloaded the chef-repo from GitHub as ...
0
votes
2answers
836 views

Create an SSH tunnel with authentication keys - Syntax

I have to create an SSH tunnel to connect a deployment server to an VPN: DeploymentServer --> Gateway --> PrivateServer Each machine using a key, I tried the following command: myMachine $ ...