The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
0answers
129 views

Unable to force passphraseless ssh authentication while port forwarding

I'm completely at a loss as to what is preventing my local machine from authenticating the connection that is being forwarded from the remote server. I've read a ton of the posts on here regarding ...
0
votes
1answer
208 views

Are using ssh keys PCI compliant?

From PCI-DSS point of view, are using SSH keys for passwordless authentication secure enough? TIA, Vitaly
-1
votes
2answers
1k views

How to ssh into ec2 instance running centos as a newly created user?

I am able to ssh into an ec2 instance as the root user using the private key .pem that was generated when I created the instance. $ ssh -i Desktop/key.pem root@123.us-west-2.compute.amazonaws.com I ...
2
votes
2answers
1k views

Creating SSH key on Jenkins Master - Centos Yum Install

I have installed Jenkins on a Centos VM as I am looking at replacing Bamboo, I have it all up and running by following the install instructions. That went fine, I then wanted to spin up a Slave, I ...
2
votes
2answers
2k views

Changing the passphrase of a puttygen private key in Windows

I have a private key in Windows, created by puttygen.exe. I used default options to save it, the tool automatically gave it a .ppk extension, and it looks like this: PuTTY-User-Key-File-2: ssh-rsa ...
0
votes
3answers
1k views

Setting up Chef Node: Amazon EC2 instance is create but bootstrap fails

I am trying to get going with Chef and the freebie Chef server from Opscode. I got my Chef workstation configured on a local VM running Ubuntu 12.04LTS. I downloaded the chef-repo from GitHub as ...
0
votes
2answers
470 views

Create an SSH tunnel with authentication keys - Syntax

I have to create an SSH tunnel to connect a deployment server to an VPN: DeploymentServer --> Gateway --> PrivateServer Each machine using a key, I tried the following command: myMachine $ ...
0
votes
0answers
235 views

Passwordless SSH key copied from one server to another now asks for passphrase

I'm using chef to build a server. I generated a passwordless SSH keypair on one server and added the public & private keys to chef. After testing, it worked. When I provision another server and ...
1
vote
2answers
139 views

Why to use password protected SSH key files for remote access? [duplicate]

I was thinking of using key files for remote SSH access to my server instead of entering the account's password manually at login. On the Internet I found several tutorials on how to do that for ...
1
vote
2answers
89 views

Why cant I ssh into my ubuntu server? (ssh_exchange_identification error) [duplicate]

I am trying to ssh into my ubuntu server (which I have done many times before) and I get the error: ssh_exchange_identification: Connection closed by remote host ssh -vvv shows the following: ...
1
vote
1answer
118 views

Default ubuntu user deleted, unable to access EC2 Instance via SSH

This is my first foray into using EC2, and I created my first instance using an Amazon AMI running Ubuntu 12.04. I created a keypair and downloaded the .pem file to my local machine. I was able to ...
2
votes
1answer
917 views

Bad owner or permissions on /root/.ssh/config

I have MASTER key under user alexus, yet whenever trying to ssh as root and/or other users on the box via sudo and getting error Bad owner or permissions on /root/.ssh/config [root@wcmisdlin02 ~]# ls ...
0
votes
1answer
217 views

Using authority-given .cer file to login on remote servers on OS X

A few months ago I bought a certificate from a popular certification authority (Certum). I used it to sign emails, but today the admin at my work asked me to connect to our main server via ssh. He ...
0
votes
2answers
191 views

No authorized_hosts file created`

I want to log in without having to enter a password. I have explored my options and generated keys. The next step mentioned is to copy the file contents to authorized_host file. But that file does not ...
1
vote
2answers
403 views

Is there any reason to use fail2ban with SSH password logins disabled?

I am setting up an Ubuntu server hosted by Linode. I am stepping through their security guide and they recommend installing fail2ban after disabling password based SSH logins. I don't see the point ...
0
votes
1answer
115 views

Reverse ssh-agent forwarding. Using a remote ssh key

I have my github.com private ssh key in an ssh-agent on a key server. From my home computer behind NAT I want to run git pull and use my github ssh key. The only way I know of doing this is to ssh ...
0
votes
2answers
2k views

Selinux in permissive mode, ssh key based auth and locked account

I noticed something weird regarding ssh key based login and selinux in permissive mode. Let me introduce you the setup: The server is an updated Centos 6.4 x86_64. We create user without a password ...
0
votes
2answers
160 views

Generate ssh key pairs to connect to additional remote machines

I've already generated a ssh key pair to connect to a remote machine, and now need to connect to a second/separate machine using the same method. Should I continue using the same existing key pair ...
1
vote
1answer
373 views

SSH: Possible to forward password authentication to command executed on remote machine?

A quick background on what exactly I'm trying to do: I frequently have to set up public key authentication from remote clients to my local machine. I'm attempting to automate this process a bit by ...
1
vote
1answer
285 views

How to rsync to a server using ssh keys

I'm running on a Mac, and I want to set up a crontab to rsync from my VPS on a weekly basis to grab some backup archives. I'm using ssh keys (no passwords allowed on the VPS), and normally I can ssh ...
1
vote
1answer
174 views

Secure password less ssh configuration between HP-UX and Linux Suse

I already verify the permission (700 for .ssh and 600 for ./ssh/* ) review the config for the file sshd_config, but the server continu asking for a password, this is the log: nomgmpr@psoftn $ ssh ...
1
vote
1answer
288 views

Manage multiple ssh-keys for one user with Chef

I started to use Chef in my infrastructure, but cannot make recipe like this: -each developer has own public ssh-key. -in remote server there is an unique user, named ubuntu I want to use data bags ...
2
votes
1answer
3k views

Temporarily disable ssh public key authentication from client

really hope you're doing fine. Is there a way to temporarily disable public key authentication when ssh'ing, and use password authentication instead? I currently want to access remote server, but I'm ...
0
votes
1answer
146 views

ssh_exchange_identification: Connection closed by remote host remote desktop

I'm trying to connect to my work server using my macbook. in the morning it was working and now its not. This is what im doing ssh -vv muhammad@man.softwarehouse.com -L 1024:bolton:3389 This is ...
0
votes
2answers
114 views

puppet enterprise node install - Security risk?

I am learning puppet and using this tool install puppet clients on nodes. puppet node install --login=root --keyfile=~/.ssh/id_rsa --install-script puppet-enterprise --installer-payload ...
2
votes
5answers
3k views

how to SSH to EC2 without explicitly using the pem key?

I have a windows as my main OS. Using VMware player, I setup a Ubuntu server 12.4 as a guest machine. The Ubuntu server have "ubuntu" user. I created a new EC2 instance + setup pem key. From the ...
2
votes
1answer
208 views

SSH key-based authentication best practice

One of the security processes that we are thinking of changing is the way we allow users to access our servers. We have about 20 web servers where the only access is SSH and at the moment we use ...
5
votes
2answers
428 views

Which is the maximum number of keys in authorized_keys file?

I'm developing a solution which inserts a big number of SSH-keys into the authorized keys files of my SSH-server. Does anyone know the limit of keys that you can insert into that file? Are we talking ...
1
vote
1answer
613 views

automysqlbackup then rsync

I'm trying to configure an automatic MySQL backup solution under an Ubuntu server. I have chosen automysqlbackup and rsync for this purpose (does it seem to be a good choice ?) rsync will be used in ...
1
vote
3answers
1k views

Forgot the password for an encrypted SSH key that's in my (gnome) SSH agent. How do I extract unencrypted version? [closed]

OK, I have an encrypted ssh private key that provides access to a server. My Ubuntu GNOME desktop has an integrated graphical ssh agent (seahorse v3.2.2). That ssh key is in this ssh agent and it's ...
3
votes
2answers
1k views

Is there an easier way to add public-key authentication for new users?

I am in the arduous and painful process of setting up secure users on a new web LEMP server with Ubuntu 12.04. I was initially going to setup something like vsftpd or proftpd but many have suggested ...
1
vote
1answer
163 views

How to get an Ubuntu root account to forward ssh keys as the forwarding machine

UPDATE: the whole thing described below works fine for non-root accounts on the remote machine. That is, this works: anderson@client -> nonroot@remote -> anderson's-ssh-key@github.com This ...
5
votes
1answer
379 views

How to blacklist SSH public keys in OpenSSH?

How can I configure OpenSSH (5.9) to reject a given set of public keys? I know I can remove the keys from each respective .ssh/authorized_keys file, but I would like to do it on a server-wide basis. ...
2
votes
3answers
1k views

Why is SSHD hanging at “Server accepts key”

I've been ssh'ing to this box without problem for a year using public-key authentication. No changes have been made to the client or server's ssh config. Now, ssh connections never complete or fail, ...
0
votes
2answers
121 views

Web server intermediary for public key authentication

My home network is currently sitting behind a DD-WRT router that I can access using public key authentication. Whenever I need to access something from my home network I can simply create an SSH ...
1
vote
2answers
1k views

Best current authentication cipher for SSH2? Are certain ones only allowed/not allowed? How to tell what cipher an existing key is?

I am a linux newbie. I plan on generally using OpenSSH I have spent a number of hours & I can't seem too quickly find the answer I have briefly read some on IETF, however I will be honest its WAY ...
2
votes
1answer
119 views

ssh public key authentication

I have tried to configure ssh to use public key authentication The link /etc/ssh/sshd_config has got this parameters. RSAAuthentication yes PubkeyAuthentication yes AuthorizedKeysFile ...
2
votes
2answers
140 views

How long does a putty keyphrase need to be (i.e. how does putty encrypt private keys)

I'd like to know what a good minimum password length for a putty passphrase is. This depends on the amount of entropy the passphrase needs to have, which in turn depends on the length one attempt ...
1
vote
1answer
455 views

ssh-keyscan - still promoted with The authenticity of host '[hostname] ([IP address])' can't be established

I am scripting a remote rsync setup, and need to add a remote server to the local known_hosts file to avoid getting prompted wit the below when the script is first ran: The authenticity of host ...
1
vote
2answers
77 views

Securing a remote LAMP server that uses Capistrano for Git deploys

I am deploying my Github repo to a Media Temple Grid Server using Capistrano. In order to do this, I've setup the following: Enabled logging into the remote server with SSH keys (following this ...
0
votes
3answers
90 views

can't ssh passwordless - get another user

server 1 which dials into server 2 ssh-keygen -t dsa -b 1024 (no password) scp id_dsa.pub user@server2.com:/home/user/.ssh server2: [~/.ssh]# cat id_dsa.pub >> ./authorized_keys But when I ...
0
votes
1answer
2k views

SSH not working over VPN only

EDIT: the SSH public key setup is a red herring. I actually cannot SSH to any boxes over Junos Pulse VPN, even ones where I don't have my SSH keys stored for password-less login. I have an SSH public ...
0
votes
1answer
1k views

ssh server: could not load host key

I'm configuring ssh server, but have faced an issue. First I generate the private/public rsa keys with: ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key and set password on prompt. Then try to start ...
6
votes
1answer
1k views

Can I SSH into my Amazon EC2 server instance if I don't have .pem file from when instance was created?

I am working with some Amazon EC2 servers that are up and running, and I need to SSH into the servers. I don't have any keys that were generated when the servers were first set up (someone else did it ...
1
vote
1answer
2k views

Git server SSH user authorization failed

I have been installed gitlabhq on SERVER. I have issue while cloning repo from client machine. Not work: client> git clone git@my.serv.ip.addr:myrepo.git /tmp/myrepo client> ssh ...
2
votes
1answer
346 views

Use CloudInit cloud-config file to add authorized_keys for multiple users

Is it possible to add ssh authorized keys for multiple users using a #cloud-config file with CloudInit? I'm trying to initialize a new EC2 instance created from an Amazon Linux AMI using CloudInit. ...
0
votes
2answers
928 views

How do I set up an AWS instance to allow others to SSH in?

I've recently set up a AWS EC2 instance (using an Ubuntu AMI) for a web project. I of course created a public/private pem key which I sued to log in a and set up the instance. Now I have a new ...
1
vote
2answers
802 views

How to use PEM keys from EC2

I understand the concept of "ssh keys" to login to a server without entering a password, however, I am not understanding how/what PEM key files are to log in to EC2 instances. In the AWS console, I ...
0
votes
1answer
560 views

ubuntu - public-key for authentication

I have a master and slave cluster. I am setting up cloudera manager. On the master I created a passwordless key using the following. ssh-keygen -f id_rsa -t rsa -N '' eval `ssh-agent` ssh-add ...
0
votes
1answer
1k views

SFTP without password prompt (from linux to windows)

I'm using freeFTPd as a sftp server on windows machine. From my linux machine(ubuntu) I want to do a SFTP from to windows and i want to bypass entering password as i'm trying to do this with scripts. ...