an authorization mechanism for SSH involving public-key cryptography.

learn more… | top users | synonyms

1
vote
3answers
3k views

Any reason sshd_config can not be set to an authorized_keys file not in home?

Troubleshooting SSH and NX I have a working SSH connection using a RSA key. The trouble is NX server wants the sshd_config parameter AuthorizedKeysFile to be set to an NX installed file, /var/lib/...
14
votes
1answer
932 views

Can Bash Tell Me Which SSH Public Key Was Used To Authenticate?

Let's say I want to track my root users. Each of them has a unique private key and their public keys have been stored in /root/.ssh/authorized_keys. Given that each user logs in with their unique key ...
1
vote
1answer
2k views

SSH doesn't work with my key for an user but works for another

Server (Ubuntu): ~/.ssh/authorized_keys file (on issue-user): just one public key on one single line. No extra lines! No comments! correct user/group owner 644 rights Local Machine (Windows 7): ...
7
votes
1answer
7k views

deploy ssh key from master to minion via salt pillars

I have two ssh keys that I'm trying to deploy to one of my minions.But I cant seem to get it to deploy.It errors out....Here is the init.sls in pillars.... /xxx/yyy/zzz/id_rsa: file.managed: - ...
1
vote
1answer
911 views

SSH access to AWS working with default id_rsa.pub but not with key generated using ssh-keygen

Hi I've never posted a question here but, I'm trying to access an AWS instance without entering a password with the following and having some issues. $ ssh -i ~/.ssh/id_rsa_aws.pub ubuntu@...
0
votes
1answer
78 views

Can I use switch user “su” with keys / certificate?

I just locked myself out of SSH. Basically, I added three users to /etc/ssh/sshd_config using the AllowUsers directive, which is great because now they can login, but now I can't, and I'm the only ...
2
votes
3answers
5k views

ssh-copy-id in one line with password, possible?

I'm trying to setup an automated script in Ansible to set a new server, and i'm using ssh-copy-id to add the Ansible master server to the new server's authorized ssh keys. I created a script which ...
1
vote
2answers
301 views

SSH Key Forwarding fails as soon as I am root

Situation I add a ssh-key to the chain using ssh-add -K the_path as user@local I set up key forwarding as described here https://help.github.com/articles/using-ssh-agent-forwarding ...
2
votes
0answers
149 views

Unable to force passphraseless ssh authentication while port forwarding

I'm completely at a loss as to what is preventing my local machine from authenticating the connection that is being forwarded from the remote server. I've read a ton of the posts on here regarding ...
0
votes
1answer
696 views

Are using ssh keys PCI compliant?

From PCI-DSS point of view, are using SSH keys for passwordless authentication secure enough? TIA, Vitaly
0
votes
2answers
4k views

How to ssh into ec2 instance running centos as a newly created user?

I am able to ssh into an ec2 instance as the root user using the private key .pem that was generated when I created the instance. $ ssh -i Desktop/key.pem root@123.us-west-2.compute.amazonaws.com I ...
4
votes
2answers
11k views

Creating SSH key on Jenkins Master - Centos Yum Install

I have installed Jenkins on a Centos VM as I am looking at replacing Bamboo, I have it all up and running by following the install instructions. That went fine, I then wanted to spin up a Slave, I ...
4
votes
2answers
12k views

Changing the passphrase of a puttygen private key in Windows

I have a private key in Windows, created by puttygen.exe. I used default options to save it, the tool automatically gave it a .ppk extension, and it looks like this: PuTTY-User-Key-File-2: ssh-rsa ...
0
votes
3answers
3k views

Setting up Chef Node: Amazon EC2 instance is create but bootstrap fails

I am trying to get going with Chef and the freebie Chef server from Opscode. I got my Chef workstation configured on a local VM running Ubuntu 12.04LTS. I downloaded the chef-repo from GitHub as ...
0
votes
2answers
2k views

Create an SSH tunnel with authentication keys - Syntax

I have to create an SSH tunnel to connect a deployment server to an VPN: DeploymentServer --> Gateway --> PrivateServer Each machine using a key, I tried the following command: myMachine $ ...
1
vote
2answers
379 views

Why to use password protected SSH key files for remote access? [duplicate]

I was thinking of using key files for remote SSH access to my server instead of entering the account's password manually at login. On the Internet I found several tutorials on how to do that for Putty,...
1
vote
2answers
147 views

Why cant I ssh into my ubuntu server? (ssh_exchange_identification error) [duplicate]

I am trying to ssh into my ubuntu server (which I have done many times before) and I get the error: ssh_exchange_identification: Connection closed by remote host ssh -vvv shows the following: ...
2
votes
1answer
236 views

Default ubuntu user deleted, unable to access EC2 Instance via SSH

This is my first foray into using EC2, and I created my first instance using an Amazon AMI running Ubuntu 12.04. I created a keypair and downloaded the .pem file to my local machine. I was able to ...
3
votes
1answer
2k views

Bad owner or permissions on /root/.ssh/config

I have MASTER key under user alexus, yet whenever trying to ssh as root and/or other users on the box via sudo and getting error Bad owner or permissions on /root/.ssh/config [root@wcmisdlin02 ~]# ls ...
4
votes
3answers
6k views

Turn off strict checking of ssh keys

Each user creates and destroys 15+ VM's per day. The VM's are created in the company's internal OpenStack cloud. Every time a new vm is assigned an ip address which has previously been handed out, ...
0
votes
1answer
324 views

Using authority-given .cer file to login on remote servers on OS X

A few months ago I bought a certificate from a popular certification authority (Certum). I used it to sign emails, but today the admin at my work asked me to connect to our main server via ssh. He ...
0
votes
3answers
430 views

No authorized_hosts file created

I want to log in without having to enter a password. I have explored my options and generated keys. The next step mentioned is to copy the file contents to authorized_host file. But that file does not ...
2
votes
3answers
611 views

Is there any reason to use fail2ban with SSH password logins disabled?

I am setting up an Ubuntu server hosted by Linode. I am stepping through their security guide and they recommend installing fail2ban after disabling password based SSH logins. I don't see the point ...
0
votes
1answer
301 views

Reverse ssh-agent forwarding. Using a remote ssh key

I have my github.com private ssh key in an ssh-agent on a key server. From my home computer behind NAT I want to run git pull and use my github ssh key. The only way I know of doing this is to ssh ...
0
votes
2answers
4k views

Selinux in permissive mode, ssh key based auth and locked account

I noticed something weird regarding ssh key based login and selinux in permissive mode. Let me introduce you the setup: The server is an updated Centos 6.4 x86_64. We create user without a password (...
0
votes
2answers
226 views

Generate ssh key pairs to connect to additional remote machines

I've already generated a ssh key pair to connect to a remote machine, and now need to connect to a second/separate machine using the same method. Should I continue using the same existing key pair (...
1
vote
1answer
790 views

SSH: Possible to forward password authentication to command executed on remote machine?

A quick background on what exactly I'm trying to do: I frequently have to set up public key authentication from remote clients to my local machine. I'm attempting to automate this process a bit by ...
1
vote
1answer
440 views

How to rsync to a server using ssh keys

I'm running on a Mac, and I want to set up a crontab to rsync from my VPS on a weekly basis to grab some backup archives. I'm using ssh keys (no passwords allowed on the VPS), and normally I can ssh ...
1
vote
1answer
523 views

Secure password less ssh configuration between HP-UX and Linux Suse

I already verify the permission (700 for .ssh and 600 for ./ssh/* ) review the config for the file sshd_config, but the server continu asking for a password, this is the log: nomgmpr@psoftn $ ssh -...
1
vote
1answer
569 views

Manage multiple ssh-keys for one user with Chef

I started to use Chef in my infrastructure, but cannot make recipe like this: -each developer has own public ssh-key. -in remote server there is an unique user, named ubuntu I want to use data bags ...
15
votes
1answer
19k views

Temporarily disable ssh public key authentication from client

Is there a way to temporarily disable public key authentication when ssh'ing, and use password authentication instead? I currently want to access remote server, but I'm using another laptop, not mine....
0
votes
1answer
214 views

ssh_exchange_identification: Connection closed by remote host remote desktop

I'm trying to connect to my work server using my macbook. in the morning it was working and now its not. This is what im doing ssh -vv muhammad@man.softwarehouse.com -L 1024:bolton:3389 This is ...
0
votes
2answers
150 views

puppet enterprise node install - Security risk?

I am learning puppet and using this tool install puppet clients on nodes. puppet node install --login=root --keyfile=~/.ssh/id_rsa --install-script puppet-enterprise --installer-payload ~/puppet/...
9
votes
5answers
11k views

how to SSH to EC2 without explicitly using the pem key?

I have a windows as my main OS. Using VMware player, I setup a Ubuntu server 12.4 as a guest machine. The Ubuntu server have "ubuntu" user. I created a new EC2 instance + setup pem key. From the ...
3
votes
1answer
348 views

SSH key-based authentication best practice

One of the security processes that we are thinking of changing is the way we allow users to access our servers. We have about 20 web servers where the only access is SSH and at the moment we use ...
5
votes
2answers
897 views

Which is the maximum number of keys in authorized_keys file?

I'm developing a solution which inserts a big number of SSH-keys into the authorized keys files of my SSH-server. Does anyone know the limit of keys that you can insert into that file? Are we talking ...
1
vote
1answer
1k views

automysqlbackup then rsync

I'm trying to configure an automatic MySQL backup solution under an Ubuntu server. I have chosen automysqlbackup and rsync for this purpose (does it seem to be a good choice ?) rsync will be used in ...
3
votes
3answers
4k views

Forgot the password for an encrypted SSH key that's in my (gnome) SSH agent. How do I extract unencrypted version? [closed]

OK, I have an encrypted ssh private key that provides access to a server. My Ubuntu GNOME desktop has an integrated graphical ssh agent (seahorse v3.2.2). That ssh key is in this ssh agent and it's ...
4
votes
2answers
3k views

Is there an easier way to add public-key authentication for new users?

I am in the arduous and painful process of setting up secure users on a new web LEMP server with Ubuntu 12.04. I was initially going to setup something like vsftpd or proftpd but many have suggested ...
1
vote
1answer
271 views

How to get an Ubuntu root account to forward ssh keys as the forwarding machine

UPDATE: the whole thing described below works fine for non-root accounts on the remote machine. That is, this works: anderson@client -> nonroot@remote -> anderson's-ssh-key@github.com This ...
6
votes
1answer
814 views

How to blacklist SSH public keys in OpenSSH?

How can I configure OpenSSH (5.9) to reject a given set of public keys? I know I can remove the keys from each respective .ssh/authorized_keys file, but I would like to do it on a server-wide basis. ...
2
votes
3answers
3k views

Why is SSHD hanging at “Server accepts key”

I've been ssh'ing to this box without problem for a year using public-key authentication. No changes have been made to the client or server's ssh config. Now, ssh connections never complete or fail, ...
0
votes
2answers
210 views

Web server intermediary for public key authentication

My home network is currently sitting behind a DD-WRT router that I can access using public key authentication. Whenever I need to access something from my home network I can simply create an SSH ...
1
vote
2answers
2k views

Best current authentication cipher for SSH2? Are certain ones only allowed/not allowed? How to tell what cipher an existing key is?

I am a linux newbie. I plan on generally using OpenSSH I have spent a number of hours & I can't seem too quickly find the answer I have briefly read some on IETF, however I will be honest its WAY ...
2
votes
1answer
179 views

ssh public key authentication

I have tried to configure ssh to use public key authentication The link /etc/ssh/sshd_config has got this parameters. RSAAuthentication yes PubkeyAuthentication yes AuthorizedKeysFile .ssh/...
3
votes
2answers
226 views

How long does a putty keyphrase need to be (i.e. how does putty encrypt private keys)

I'd like to know what a good minimum password length for a putty passphrase is. This depends on the amount of entropy the passphrase needs to have, which in turn depends on the length one attempt ...
3
votes
1answer
2k views

ssh-keyscan - still promoted with The authenticity of host '[hostname] ([IP address])' can't be established

I am scripting a remote rsync setup, and need to add a remote server to the local known_hosts file to avoid getting prompted wit the below when the script is first ran: The authenticity of host '[...
1
vote
2answers
87 views

Securing a remote LAMP server that uses Capistrano for Git deploys

I am deploying my Github repo to a Media Temple Grid Server using Capistrano. In order to do this, I've setup the following: Enabled logging into the remote server with SSH keys (following this ...
0
votes
3answers
139 views

can't ssh passwordless - get another user

server 1 which dials into server 2 ssh-keygen -t dsa -b 1024 (no password) scp id_dsa.pub user@server2.com:/home/user/.ssh server2: [~/.ssh]# cat id_dsa.pub >> ./authorized_keys But when I ...
1
vote
1answer
4k views

SSH not working over VPN only

EDIT: the SSH public key setup is a red herring. I actually cannot SSH to any boxes over Junos Pulse VPN, even ones where I don't have my SSH keys stored for password-less login. I have an SSH public ...