The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
1answer
374 views

Manage multiple ssh-keys for one user with Chef

I started to use Chef in my infrastructure, but cannot make recipe like this: -each developer has own public ssh-key. -in remote server there is an unique user, named ubuntu I want to use data bags ...
3
votes
1answer
7k views

Temporarily disable ssh public key authentication from client

really hope you're doing fine. Is there a way to temporarily disable public key authentication when ssh'ing, and use password authentication instead? I currently want to access remote server, but I'm ...
0
votes
1answer
170 views

ssh_exchange_identification: Connection closed by remote host remote desktop

I'm trying to connect to my work server using my macbook. in the morning it was working and now its not. This is what im doing ssh -vv muhammad@man.softwarehouse.com -L 1024:bolton:3389 This is ...
0
votes
2answers
136 views

puppet enterprise node install - Security risk?

I am learning puppet and using this tool install puppet clients on nodes. puppet node install --login=root --keyfile=~/.ssh/id_rsa --install-script puppet-enterprise --installer-payload ...
3
votes
5answers
5k views

how to SSH to EC2 without explicitly using the pem key?

I have a windows as my main OS. Using VMware player, I setup a Ubuntu server 12.4 as a guest machine. The Ubuntu server have "ubuntu" user. I created a new EC2 instance + setup pem key. From the ...
3
votes
1answer
247 views

SSH key-based authentication best practice

One of the security processes that we are thinking of changing is the way we allow users to access our servers. We have about 20 web servers where the only access is SSH and at the moment we use ...
5
votes
2answers
548 views

Which is the maximum number of keys in authorized_keys file?

I'm developing a solution which inserts a big number of SSH-keys into the authorized keys files of my SSH-server. Does anyone know the limit of keys that you can insert into that file? Are we talking ...
1
vote
1answer
745 views

automysqlbackup then rsync

I'm trying to configure an automatic MySQL backup solution under an Ubuntu server. I have chosen automysqlbackup and rsync for this purpose (does it seem to be a good choice ?) rsync will be used in ...
2
votes
3answers
2k views

Forgot the password for an encrypted SSH key that's in my (gnome) SSH agent. How do I extract unencrypted version? [closed]

OK, I have an encrypted ssh private key that provides access to a server. My Ubuntu GNOME desktop has an integrated graphical ssh agent (seahorse v3.2.2). That ssh key is in this ssh agent and it's ...
3
votes
2answers
1k views

Is there an easier way to add public-key authentication for new users?

I am in the arduous and painful process of setting up secure users on a new web LEMP server with Ubuntu 12.04. I was initially going to setup something like vsftpd or proftpd but many have suggested ...
1
vote
1answer
218 views

How to get an Ubuntu root account to forward ssh keys as the forwarding machine

UPDATE: the whole thing described below works fine for non-root accounts on the remote machine. That is, this works: anderson@client -> nonroot@remote -> anderson's-ssh-key@github.com This ...
5
votes
1answer
469 views

How to blacklist SSH public keys in OpenSSH?

How can I configure OpenSSH (5.9) to reject a given set of public keys? I know I can remove the keys from each respective .ssh/authorized_keys file, but I would like to do it on a server-wide basis. ...
2
votes
3answers
2k views

Why is SSHD hanging at “Server accepts key”

I've been ssh'ing to this box without problem for a year using public-key authentication. No changes have been made to the client or server's ssh config. Now, ssh connections never complete or fail, ...
0
votes
2answers
147 views

Web server intermediary for public key authentication

My home network is currently sitting behind a DD-WRT router that I can access using public key authentication. Whenever I need to access something from my home network I can simply create an SSH ...
1
vote
2answers
1k views

Best current authentication cipher for SSH2? Are certain ones only allowed/not allowed? How to tell what cipher an existing key is?

I am a linux newbie. I plan on generally using OpenSSH I have spent a number of hours & I can't seem too quickly find the answer I have briefly read some on IETF, however I will be honest its WAY ...
2
votes
1answer
127 views

ssh public key authentication

I have tried to configure ssh to use public key authentication The link /etc/ssh/sshd_config has got this parameters. RSAAuthentication yes PubkeyAuthentication yes AuthorizedKeysFile ...
3
votes
2answers
156 views

How long does a putty keyphrase need to be (i.e. how does putty encrypt private keys)

I'd like to know what a good minimum password length for a putty passphrase is. This depends on the amount of entropy the passphrase needs to have, which in turn depends on the length one attempt ...
1
vote
1answer
976 views

ssh-keyscan - still promoted with The authenticity of host '[hostname] ([IP address])' can't be established

I am scripting a remote rsync setup, and need to add a remote server to the local known_hosts file to avoid getting prompted wit the below when the script is first ran: The authenticity of host ...
1
vote
2answers
80 views

Securing a remote LAMP server that uses Capistrano for Git deploys

I am deploying my Github repo to a Media Temple Grid Server using Capistrano. In order to do this, I've setup the following: Enabled logging into the remote server with SSH keys (following this ...
0
votes
3answers
104 views

can't ssh passwordless - get another user

server 1 which dials into server 2 ssh-keygen -t dsa -b 1024 (no password) scp id_dsa.pub user@server2.com:/home/user/.ssh server2: [~/.ssh]# cat id_dsa.pub >> ./authorized_keys But when I ...
1
vote
1answer
2k views

SSH not working over VPN only

EDIT: the SSH public key setup is a red herring. I actually cannot SSH to any boxes over Junos Pulse VPN, even ones where I don't have my SSH keys stored for password-less login. I have an SSH public ...
0
votes
1answer
2k views

ssh server: could not load host key

I'm configuring ssh server, but have faced an issue. First I generate the private/public rsa keys with: ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key and set password on prompt. Then try to start ...
6
votes
1answer
1k views

Can I SSH into my Amazon EC2 server instance if I don't have .pem file from when instance was created?

I am working with some Amazon EC2 servers that are up and running, and I need to SSH into the servers. I don't have any keys that were generated when the servers were first set up (someone else did it ...
1
vote
1answer
2k views

Git server SSH user authorization failed

I have been installed gitlabhq on SERVER. I have issue while cloning repo from client machine. Not work: client> git clone git@my.serv.ip.addr:myrepo.git /tmp/myrepo client> ssh ...
2
votes
1answer
412 views

Use CloudInit cloud-config file to add authorized_keys for multiple users

Is it possible to add ssh authorized keys for multiple users using a #cloud-config file with CloudInit? I'm trying to initialize a new EC2 instance created from an Amazon Linux AMI using CloudInit. ...
0
votes
2answers
1k views

How do I set up an AWS instance to allow others to SSH in?

I've recently set up a AWS EC2 instance (using an Ubuntu AMI) for a web project. I of course created a public/private pem key which I sued to log in a and set up the instance. Now I have a new ...
1
vote
2answers
1k views

How to use PEM keys from EC2

I understand the concept of "ssh keys" to login to a server without entering a password, however, I am not understanding how/what PEM key files are to log in to EC2 instances. In the AWS console, I ...
0
votes
1answer
799 views

ubuntu - public-key for authentication

I have a master and slave cluster. I am setting up cloudera manager. On the master I created a passwordless key using the following. ssh-keygen -f id_rsa -t rsa -N '' eval `ssh-agent` ssh-add ...
0
votes
1answer
2k views

SFTP without password prompt (from linux to windows)

I'm using freeFTPd as a sftp server on windows machine. From my linux machine(ubuntu) I want to do a SFTP from to windows and i want to bypass entering password as i'm trying to do this with scripts. ...
0
votes
2answers
819 views

EC2 SSH / SFTP issues

I have done a lot of searching on this issue, and can not find anything particularly relevant. I have many instances spread across zones and grouped into various load balancers. One of the groups is ...
7
votes
4answers
12k views

How to change a SSH host key?

I cloned a server and so they've the same RSA key fingerprint. It seems to be defined in /etc/ssh/ssh_host_rsa_key.pub. What is the correct way to change that? Thanks.
0
votes
2answers
197 views

Is it “safe” to allow external access via SSH if authorized keys are required? [closed]

CentOS 6 | OpenSSH I have an external facing server and would like the convenience of being able to access it via my phone. The system itself is an island and has no association/connection to my ...
0
votes
1answer
143 views

passwordless scp without keys

I am looking for some option that will allow me to accept files from any server using SCP command. I am aware of the process of creating password-less logins. But what I am looking for is an option on ...
11
votes
2answers
576 views

What to do when someone logged as root on my server

I have a server running Debian 6.0 with logcheck installed. Yesterday ago, I received this message: Jan 19 19:15:10 hostname sshd[28397]: Authentication tried for root with correct key but not from a ...
1
vote
1answer
141 views

Disable specific OpenSSH host keys

The general idea I've been finding on this is that if you remove the HostKey line which corresponds to a specific key, the key will stop being generated. For whatever reason though, my sshd_config ...
0
votes
2answers
156 views

SSH:using single public key on multiple remote machines and spoofing-by-known-server

Lyrics Usually, people say, that using single public key on several servers is just as secure as using unique public keys on each of them. (If we're not talking about possibility of private key being ...
0
votes
3answers
6k views

ssh key error - Permission denied (publickey,gssapi-keyex,gssapi-with-mic)

Amazon Ec2 :: Redhat 6. 64 Bit I'm trying to follow the socks5 guidelines (http://www.catonmat.net/blog/linux-socks5-proxy/ ) to open a socks on one of our servers but unfortunately I got suck at step ...
0
votes
1answer
43 views

seamless ssh with condition

I am looking for a way of seamless ssh in a way that when user does ssh through shell, it will be disallowed (or normal rules apply) but if a process (non-interactive) tries to ssh with the same user ...
0
votes
1answer
194 views

Write permissions of www-data user and public key issue

I am using Ubuntu and I am having the following problem. I am using a PHP function called exec to get the latest git changes from my remote repo. E.g.: exec("git pull");. The file is placed in ...
7
votes
5answers
5k views

Trying to SSH in to remote computer but still asking for password

Trying to SSH in to remote computer but still asking for password. I have a number of computers running SElinux and only one of them is giving me a hard time using ssh without the password. I did ...
4
votes
1answer
77 views

ssh rsa key auth only occurs if I am already logged in on console

Can't figure this out - am using id_rsa key based authentication to our servers (approximately 400 Linux and UNIX servers). In this case I have 3 identical servers with 3 recent installs of Ubuntu ...
0
votes
3answers
439 views

rsync without password, none of google (server fault) tutorials worked

I need to use rsync for a daily backup operation and in the past (on different servers) I managed to just use a rsa key etc, but now none of google (serverfault) tutorials work at all. It keeps ...
0
votes
2answers
71 views

Unable to SSH into EC2 instance on Fedora 17

I did following steps But I am not able to SSH to it(Same steps work fine on Fedora 14 image). I am getting Permission denied (publickey,gssapi-keyex,gssapi-with-mic) I created new instance using ...
3
votes
1answer
4k views

ubuntu 12.10/linux mint 14 ssh-copy-id doesn't work and returns Ambiguous output redirect

I recently got a new computer and I'm trying to use ssh-copy-id to put my keys on another server so I can login without password. but when I try ssh-copy-id -i ~/.ssh/id_rsa.pub user@server and ...
1
vote
6answers
17k views

SSH as root using public key still prompts for password on RHEL 6.1

I've generated rsa keys with cygwin ssh-keygen and copied them to the server with ssh-copy-id -i id_rsa.pub root@my.ip.address I've got the following settings in my /etc/ssh/sshd_config file ...
2
votes
2answers
592 views

Gerrit ssh key setup on windows server

I am attempting to configure google's 'Gerrit' code review web app on a Windows server 2008 virtual machine on our internal network. We are using Apache Tomcat (6.0.36) to host the web app and have ...
9
votes
2answers
7k views

How do I validate a RSA ssh public key file (id_rsa.pub)?

Are there any command I can verify the public key (id_rsa.pub), just the format only Sometimes I have added a new linebreak, sometimes the file missed the ssh-rsa prefix, so are there any command to ...
1
vote
5answers
419 views

Setting up SSH Key securely for SCP/rsync to run without password

This is how I am currently doing it: # ssh-keygen -t dsa -b 1024 -f /root/localhost-rsnapshot-key Enter passphrase (empty for no passphrase): [press enter here] Enter same passphrase again: [press ...
1
vote
3answers
560 views

How do I solve this error: ssh_exchange_identification: Connection closed by remote host

data@server01:~$ ssh user@10.7.4.1 -vvv OpenSSH_5.5p1 Debian-6, OpenSSL 0.9.8o 01 Jun 2010 debug1: Reading configuration data /etc/ssh/ssh_config debug1: Applying options for * debug2: ssh_connect: ...
0
votes
1answer
116 views

SSH automatic logon works for one user but not the other

I want to enable automatic ssh login using the .ssh/config file for my git user. Here is my .ssh/config file: Host test HostName myserver.net User test IdentityFile ~/.ssh/id_rsa Host ...