an authorization mechanism for SSH involving public-key cryptography.

learn more… | top users | synonyms

1
vote
2answers
186 views

prevent files modification from users: is this method safe?

I was wondering today if there was a way to enforce a non root user to have a specific authorized_keys file (among other sensible files). I came up with this solution. Disable StrictModes in ...
0
votes
2answers
75 views

Public SFTP server directory with no password or keyfile

I want to be able to allow users to connect to my SFTP server under a restricted user that only has read access to view files in a certain directory that I upload to without it requiring a password or ...
0
votes
2answers
31 views

Multiple Servers, Multiple ssh Keys, Unique ssh keys for Infrastructure servers

Ok so I've done a bit of googling and haven't come across an answer. We have multiple servers in our environment and around 5 infrastructure servers. Then we have one server that we can ssh to all ...
0
votes
2answers
118 views

Are the keys created and added when launching an EC2 instance added to ~/.ssh/authorized_keys for ec2-user?

Are the keypairs created and added when launching an EC2 instance added to ~/.ssh/authorized_keys for the ec2-user ? or is there another mechanism used? If so, would the key have a name like 'master'? ...
5
votes
1answer
2k views

ForwardAgent in Jenkins

I'm trying to enable ForwardAgent in the "Publish over SSH" Jenkins Plugin. This would allow jenkins to execute deployments, rsyncs and svn+ssh checkouts on remote servers. But there's no option for ...
4
votes
1answer
744 views

AWS connection error: Permission denied (publickey)

Sorry if this sounds redundant to you but trust me its not. I have tried almost majority of the links related to this problem but nothing is working for me so far. I even tried this article two. Below ...
2
votes
1answer
163 views

How to make ssh send a certificate for a key stored on a smartcard

I have a gpg key I use through a smartcard (yubikey neo) to ssh to many hosts. Some of these hosts use certificates as well as keys to authorize logins. For normal keys that are stored locally there ...
2
votes
1answer
375 views

SSH dns issue giving break-in error

Address ..*.* maps to ec2---*-*.compute-1.amazonaws.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! I keep getting this when I try to log-in to my remote server. I have ...
2
votes
1answer
66 views

Is it possible to kill SSH connections that aren't running a command (e.g. with -N)

If a client does not execute a command (e.g. with -N) within some timeframe (1-2 seconds) after establishing the SSH connection, I'd like to terminate it from the server. Unfortunately, ForceCommand ...
1
vote
1answer
29 views

Google Cloud Platform: ssh from VM_1 in project_A to VM_2 in project_B

I am trying to connect virtual machine VM_1 in project_A to virtual machine VM_2 in project_B. Bot are on Debian Linux. Steps I did: On VM_1 Project_A Generated private and public keys ssh-keygen ...
1
vote
1answer
83 views

Instance created from shared snapshot gives Server refused our key error

I have created an instance from a shared snapshot from other aws account,following steps were done by me, 1.Share snapshot from other account. 2.copy it to my account. 3.create a volume from it ...
1
vote
1answer
195 views

Can access sshd-server with one user, but not with an second

I am using public-private-keys to access my server. With the user "peter" I can access the server normal, but with the user "git" I can not access the server. Its always asking me for a password. If I ...
1
vote
1answer
398 views

SSH: Unable to login with key after disabling password authentication

I have an ubuntu server is on Amazon EC2. Earlier I used to login with the original pem key file generated at instance launch time. ssh -i /path/to/key.pem ubuntu@instance-dns-name.com I tried to ...
1
vote
1answer
426 views

How to rsync to a server using ssh keys

I'm running on a Mac, and I want to set up a crontab to rsync from my VPS on a weekly basis to grab some backup archives. I'm using ssh keys (no passwords allowed on the VPS), and normally I can ssh ...
1
vote
1answer
264 views

How to get an Ubuntu root account to forward ssh keys as the forwarding machine

UPDATE: the whole thing described below works fine for non-root accounts on the remote machine. That is, this works: anderson@client -> nonroot@remote -> anderson's-ssh-key@github.com This ...
1
vote
1answer
592 views

Problems accessing EC2 instance with SSH key pair

Just set up a new EC2 instance, downloaded the pem file and currently cannot get into the box. I'm using the command... $ ssh -i .ssh/key.pem ubuntu@ec2-176-34-183-***.eu-west-1.compute.amazonaws.com ...
1
vote
1answer
432 views

How do I arrange for an ssh key with a passphrase to be loaded and available in ssh-agent to other processes on Windows startup?

I'm setting up automated deployment of applications in a Windows environment from continuous integration (TeamCity build-agents), and using cygwin + openssh to perform the remote-execution part of ...
0
votes
1answer
23 views

SSH: Login to local pc by key

I got a little problem. I'm using apt-dater to keep different linux-systems updated. Apt-dater uses ssh to login to these systems - there's no problem by doing this. To connect to localhost, the ...
0
votes
1answer
1k views

Fabric used to work with ssh-keys, but not anymore

I have my ssh key set up correctly and I can ssh into the remote machine without password. However, my fabric deploy script which could authenticate automatically until a couple of hours ago, started ...
0
votes
1answer
751 views

sshfs mounts from command line but not through fstab

I'm able to mount an sshfs network share from the command line (using Ubuntu 14.04), like this: sshfs server-name:/usr/local/things /home/myname/stuff but I can't make it persistent using fstab. ...
0
votes
1answer
112 views

Ssh host key verification

I have a Server behind a Port-forwarding Firewall. Server <---> Firewall <------> NAT Port 222 | -----------> VPN I can ssh per key into it from ...
0
votes
1answer
51 views

seamless ssh with condition

I am looking for a way of seamless ssh in a way that when user does ssh through shell, it will be disallowed (or normal rules apply) but if a process (non-interactive) tries to ssh with the same user ...
0
votes
1answer
800 views

Can not log in to Amazon EC2 instance (Beginner)

I am having difficulty logging onto my Amazon ec2 instance. I set it up, downloaded the key. At first it complained because my permissions were setup correctly. Then I executed: chmod 400 ...
-1
votes
1answer
26 views

Two accounts need new SSH keys

I've got two accounts which are used for automated file uploads on a server and company policy requires that they are updated after 3 years. I wasn't here 3 years ago and I've not done this before. I ...
-1
votes
1answer
77 views

How to auto login a .ssh server from a .ssh2 server?

I have a server A which ssh-keygen produce a .ssh2 direcotry and id_dsa_2048_a* files and a server B which ssh-keygen produce a .ssh directory and id_rsa* files and a server C like B How can auto ...
-3
votes
1answer
1k views

Connecting AWS from Windows. Error: Using username “ec2-user”. Server refused our key

I am connecting AWS EC2 using Putty from Windows 8, I followed all steps mentioned on this page of conversion of .pem to .ppk and have loaded .ppk in Putty. Putty Configurations: Host Address: ...
-4
votes
1answer
44 views

Disable ssh auth by keys

Usually all disable ssh login with password only. I'm asking about reverse situation. Does sshd_config allow to disable authentication with keys only?
5
votes
0answers
2k views

SSH_ORIGINAL_COMMAND variable not getting set

I am working with two servers, both of which run FreeBSD 8.4-RELEASE-p1 and OpenSSH_6.1p1. Both servers' ssh_config files, located in /etc/ssh, are identical. Both servers are configured to allow ...
2
votes
0answers
225 views

Mac OSX - SSHD partially broken after El Capitan Upgrade

I recently upgraded my firm's Mac Mini device to El Capitan from Yosemite, and encountered several issues during the upgrade. I've gotten most of them resolved but one that's still failing is the SSH ...
2
votes
0answers
76 views

EC2 SSH Login Temporarily Hangs on “Entering Interactive Session”

I've been researching this for hours now, can't figure out why this is happening. Originally marked it as internet but checked my speeds (37 down, 10 up). I went from California to Oregon, and since ...
2
votes
0answers
31 views

Forced to change expired password when using ssh key

I am working in an environment where I have an account on multiple linux machines where accounts and passwords are managed independently (no active directory/LDAP/etc) and passwords expire every 30 ...
2
votes
0answers
765 views

ssh to ILO on a DL380 gives key_verify failed for server_host_key

When I try to do connect to the ILO 4 of a DL380 I get the following error: ssh -vvv ilo@me2_ilo OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 debug1: Reading configuration data ...
2
votes
0answers
147 views

Unable to force passphraseless ssh authentication while port forwarding

I'm completely at a loss as to what is preventing my local machine from authenticating the connection that is being forwarded from the remote server. I've read a ton of the posts on here regarding ...
1
vote
0answers
23 views

OpenSSH Windows Error

I want to connect with putty from one machine_1 to another Windows machine machine_2. So I install a OpenSSH Server on machine_2. I generate 2 a key pair with puttygen. I paste the public key in ...
1
vote
0answers
55 views

Warning: Remote host identification has changed (SSH)

Most likely someone did a server update last night, because when I try to do a rsync (from win 7) I get the message (short version): WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! It is possible ...
1
vote
0answers
185 views

Enabling SSH for deploy of a bitbucket git repo

I'm trying to deploy my git repo to my server. To make this work I first needed to setup ssh on my locale computer and on my server. for bitbucket I followed ...
1
vote
0answers
147 views

Is it possible to authenticate to Sonatype Nexus via ssh keys

Is it possible to authenticate to Sonatype Nexus via ssh keys or any other method that does not require user password in maven settings.xml? I know there are user generated tokens in Sonatype Nexus ...
1
vote
0answers
75 views

Ubuntu 14.04 - rsync corrupting SSH configs/keys?

I have two Ubuntu 14.04 servers S1 (user root) and S2 (user dataman). S1 is responsible for handling file uploads and transferring backups to S2. On S1 I am using PubKey authentication to S2 for ...
1
vote
0answers
74 views

why does having ~/.ssh/id_rsa.pub cause GUI dialog asking for SSH password even though SSH_ASKPASS is empty?

How the problem started For some reason I did not have my id_rsa.pub file in ~/.ssh. So I copied it off one of my servers to ~/.ssh/ on my machine... so that I have it, so I can copy it to servers ...
1
vote
0answers
112 views

Is rbash secure if user login and ssh passwords are disabled?

I've got a server that I want to use as an SSH gateway for remote and local port forwarding. I don't want arbitrary commands to be able to be executed on it, only my scripts. I keep reading about how ...
1
vote
0answers
45 views

Centralize way to prevent interactive logins

I have an Ubuntu server that is used for two primary purposes for my students: To hold on to files that students need to temporarily upload for my assessment (ie: I give them an input image, and ...
1
vote
0answers
431 views

Linux TACACS+ auth for SSH but allow users to use public key auth

we have running tacacs environment for centralised login to our routers, firewalls etc and even most of our linux boxes to ssh what we would like to do is allow users to authenticate to SSH via ...
0
votes
0answers
9 views

Connect to esXi host from CentOS client with vCLI with RSA Pub/Priv Key

So I successfully setup vCLI on CentOS 7, and I am trying to connect via SSH, but since I set up RSA authentication without Password authentication (on the esxi host), I was wondering if anybody knows ...
0
votes
0answers
18 views

Apt-Dater: sorry, you must have a tty to run sudo

Unfortunately I can not connect to a host using apt-dater. The error is: Pseudo-terminal will not be allocated because stdin is not a terminal. ADPROTO: 0.7 LSBREL: CentOS|7.2.1511|Core VIRT: ...
0
votes
0answers
89 views

SSH Connection To Joyent Instance Using PuTTY - server refused our key error

I have a Joyent account with a Linux Unbuntu 14.04 Instance created on it. I'm trying to connect to the instance using SSH. I'm on a Windows machine using FreeSSHd for my SSH server, PuTTY Key ...
0
votes
0answers
82 views

How to save ssh-keyscan result with the port to .ssh/known_hosts

When I run ssh-keyscan -p NNN -t rsa GITHOST it produces sting like GITHOST ssh-rsa ...
0
votes
0answers
27 views

Provisioning Vagrant Environments Capable of Cloning Repos Immediately

For some reason, I am having an incredibly hard time getting a working solution for this. We are ATTEMPTING to use Vagrant to provision our development environments. In regards to this post, our ...
0
votes
0answers
927 views

PEM_read_PrivateKey failed

I'm trying to use ssh to log in to AWS from OSX Mavericks and having a hell of a time. I enter: ssh -i ~/.ssh/filename.pem ec2-user@ec2-xx-x-xxx-xx.compute-1.amazonaws.com -v And I get this, as ...
0
votes
0answers
39 views

Enable root password on remote server

I'm playing around with ssh-with-rsa-key authorization instead of password authorization and because I'm not really clever I've locked password authorization for root(passwd -l root) on remote server. ...
0
votes
0answers
346 views

SSH not working when called by automated script

SUMMARY: My script which includes ssh runs fine from the command line but the ssh part does not work when the script is called by an an automated daemon (apcupsd). DETAIL: I've got an ESXi server and ...