Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.

learn more… | top users | synonyms (2)

24
votes
5answers
30k views

Is it possible to use rsync over sftp (without an ssh shell)?

Rsync over ssh, works great every time. However, trying to rsync to a host which allows only sftp logins, but not ssh logins, provides the following error: rsync -av /source ssh ...
12
votes
6answers
16k views

When IP aliasing how does the OS determine which IP address will be used as source for outbound TCP/IP connections?

I have a server running Ubuntu Server with four IP addresses aliased on a single NIC. eth0 192.168.1.100 eth0:0 192.168.1.101 eth0:1 192.168.1.102 eth0:2 192.168.1.103 (Using ...
8
votes
1answer
9k views

Authenticate Linux sshd with TACACS+ (Cisco ACS)

Our network engineering team uses multiple linux servers for syslog collection, configuration backups, tftp, etc... We want to use TACACS+ on a Cisco ACS machine as our central authentication server ...
8
votes
3answers
2k views

Is SSH logging capabilities equivalent to su logging for private/public key authentication?

Here at work, we have a non-root shared login account on UNIX that is used to admin a particular application. The policy is to not allow direct logins to the shared account; you must login as yourself ...
6
votes
6answers
15k views

Amazon EC2 - No SSH After Reboot, Connection Refused

I've replicated this two or three times, so I'm guessing there's something wrong with what I'm doing. Here are my steps: Launch new instance via EC2 Management console using: Ubuntu Server 13.10 - ...
4
votes
3answers
3k views

Can't change assigned key pair on amazon ec2 instance

I can't seem to find the option to assign a newly created key pair to an amazon ec2 instance after deleting away the original key pair. I wanted to "deny" the first key pair from access to the ...
5
votes
2answers
6k views

No TTY present when running commands over SSH in here-document

I'm trying to run a command over SSH like this in a here-document: ssh example.com <<END sudo /etc/init.d/apache2 reload END Which normally works except when I'm trying to run something that ...
5
votes
15answers
5k views

Best way to mount a Linux filesystem on Windows over the Internet?

I was going to attempt Samba over SSH, any better ideas? Edit: My mom has been bugging me to do some offsite backing up of her files. She currently uses Norton Ghost. I have a VPS that I use for ...
4
votes
4answers
4k views

Yum install php-pecl-memcached - No package found (Have epel-release-6-8.noarch.rpm)

I believed I've downloaded and updated the EPEL rpm but I can't install php-pecl-memcached.. I'm very new to this, any help is appreciated. #rpm -Uvh epel-release-6-8.noarch.rpm warning: ...
4
votes
4answers
2k views

root locked out of EC2

I was in the process of disabling root logins on an AWS EC2 instance. Right after setting PermitRootLogin no and restarting sshd, I closed the terminal on accident -- before setting up users with sudo ...
3
votes
3answers
348 views

Block interactive SSH sessions while allowing certain commands

How would one only allow certain commands to be run via SSH and block interactive sessions? rsync.net does this as well as bakop.com. I.e. this would work: ssh <user@host> mkdir test scp ...
2
votes
2answers
574 views

Possibility of WAN Optimization for SSH traffic

While I do understand that SSH by itself is a very low bandwidth utilizing protocol, it is sometimes choking up bandwidth during peak hours in our office environment. I want to know if at all it is ...
1
vote
1answer
2k views

Anonymizing OpenVPN Allow SSH Access to Internal Server

I'm using an anonymizing VPN, but want SSH access to internal computer. How do I access my internal computer through SSH? When I do ssh 98.123.45.6, the connection times out. IP address from cable ...
205
votes
19answers
263k views

How do I tell Git for Windows where to find my private RSA key?

My GIT setup runs fine in Linux, but when I try to set things up under Windows (using Git for Windows and TortoiseGit), I don't know where to put my private ssh key (or, better still, how to tell ssh ...
31
votes
3answers
22k views

What's best practice for communication between Amazon EC2 instances?

I've been setting up Amazon EC2 instances for an upcoming project. They are all micro instances, running Ubuntu Server 64bit. Here's what I've setup so far: Web Server -- Apache Database Server ...
22
votes
4answers
7k views

Centralized management system for SSH keys?

We are looking to switch to key-based management of SSH logins, and wonder if there any key-management systems which would allow us to centrally manage the access keys world-wide. The system should ...
54
votes
1answer
28k views

How do I change my private key passphrase?

I have an existing public/private key pair, the private key is password protected, the encryption may be either RSA or DSA. These keys are the kind you generate with ssh-keygen and generally store ...
20
votes
7answers
25k views

How do I run a local bash script on remote machines via ssh?

I am looking for a way to push configuration from one central machine to several remote machines without the need to install anything on the remote machines. The aim is to do something like you ...
10
votes
5answers
18k views

Using SSH to remotely start a process

I have written a script that I am using to push and deploy a new service to several machines under my control, and in order to execute the process I am using ssh to remotely start the process. ...
8
votes
2answers
16k views

How to setup ssh tunnel to forward ssh?

I have computer with Ubuntu behind router that I can't configure. However I want to have ssh access to that computer. I think it is possible with ssh tunneling, but I don't know how to do it. I have ...
8
votes
7answers
5k views

BASH shell session logging on remote host

What's the best method of logging a BASH shell session to a file on the host machine? The preferred output format would be equivalent to PuTTY's "printable output" log setting, as viewed by the user ...
53
votes
5answers
7k views

I accidentaly forbid SSH connection to a remote server… What's next?

Let's say it again, we all make mistakes, and I have just made one. A brief history: I was doing some stuff on a VPS (Debian) I'm renting, when I noticed some strange behaviour. Using the netstat ...
13
votes
9answers
6k views

SSH server zero-day exploit - Suggestions to protect ourselves

According to the Internet Storm Center, there seems to be a SSH zero-day exploit out there. There is some proof of concept code in here and some reference: ...
8
votes
4answers
701 views

Remote Root Login

I know one of the first things you do to secure a server is disallowing remote root login. Passwords are pretty weak; what do people think of only allowing root login via ssh keys or other ...
5
votes
4answers
4k views

Running git pull from a php script

I was trying the Perfect Workflow, with Git, GitHub, and SSH, but it seems i can't run git pull. I've tried git status and it's fine. When i git pull 2>&1 i get: error: cannot open ...
5
votes
2answers
4k views

How do I setup ssh with both private key and password?

How do I setup ssh with both private key and password? In /etc/ssh/sshd_config, I currently have: RSAAuthentication yes PubkeyAuthentication yes PasswordAuthentication yes But apparently this ...
21
votes
5answers
56k views

How to remove strict RSA key checking in SSH and what's the problem here?

I have a Linux server that whenever I connect it shows me the message that changed the SSH host key: $ ssh root@host1 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: ...
10
votes
6answers
34k views

Linux closing connection after successful login

I am working on a server with Debian 5.2.2. Barely having any administrative knowledge with Linux, I think I screwed something up. I used apt-get update and apt-get upgrade to get everything up to ...
8
votes
4answers
2k views

Reverse SSH tunnel: how can I send my port number to the server?

I have two machines, Client and Server. Client (who is behind a corporate firewall) opens a reverse SSH tunnel to Server, which has a publicly-accessible IP address, using this command: ssh -nNT ...
7
votes
5answers
24k views

Disable usage of console-kit-daemon in Ubuntu

I administrate several Ubuntu 9.04 servers, and everytime I log in, I get the Landscape utility printout with server stats, etc. I really don't need this and it slows down my logins considerably. ...
5
votes
2answers
4k views

ssh fails to execute remote command when run from cron bash script - works from CLI

I have a script, written in bash, which runs from cron. One of the first things it does is SSH to a remote host and retrieve a list of files in a directory. Everything works fine when run from the ...
3
votes
3answers
6k views

How to assign a hostname to SSH tunnel

I'm using ssh root@my.server.ip -g -L 4321:localhost:28017 to establish a tunnel from my MacBook to my dedicated server at my hosting provider. It works well. Now I want to access several admin sites ...
14
votes
3answers
9k views

Connect through SSH and type in password automatically, without using a public key

A server allows SSH connections, but not using public key authentication. It's not within my power to change this at the moment (due to technical difficulties, not organizational) but I will get on it ...
7
votes
3answers
4k views

Running 'sudo' over SSH

I'm writing a script which is to log onto a bunch of remote machines and run a command on them. I've set up keys so the user running the script does not have to type the password of each machine, but ...
4
votes
3answers
2k views

SSH from A through B to C, using private key on B

I'm looking for a simple way to SSH from my local machine, A, through a proxy, B, to a destination host, C. The private key that goes with the public key on C is on B, and I can't put that key on my ...
4
votes
3answers
5k views

Escaping spaces in a remote path when using rsync over a remote SSH connection

When using SSH to connect rsync to a remote server, how do you escape spaces and such in the remote path? A simple backslash escapes the space for the local bash prompt, but on the remote machine the ...
4
votes
2answers
3k views

Restrict SSH login from a specific user to a specific IP address

I'd like to restrict SSH logins for a specific FreeBSD user account to a specific IP address (they're automated rsync backups from one machine to another, no actual user should ever be logging in, ...
0
votes
3answers
5k views

“Corrupted MAC on input. Packet Corrupt” on file transfer over SSH, SCP, and FTP on Linux Server

help on this would be great. Specs: LAMP server Linux OS - Debian 5.0.1 4x Intel(R) Xeon(TM) CPU 2.80GHz Important Packages: openssl - SSL security iptables - firewall to block all requests ...
19
votes
6answers
22k views

protocol version mismatch — is your shell clean?

When following the instructions to do rsync backups given here: http://troy.jdmz.net/rsync/index.html I get the error "protocol version mismatch -- is your shell clean?" I read somewhere that I ...
8
votes
6answers
465 views

Why shouldn't root be allowed to login via ssh?

why should root access be disabled for ssh? I always hear that's for security reasons. But I don't get it. What's different to login as non-root and then sudo su -? What's the preferred way to handle ...
7
votes
1answer
4k views

Using Upstart to Manage AutoSSH Reverse Tunnel

I'm using upstart to manage a reverse SSH tunnel via autossh. When I do a "sudo start tunnel" the connection comes up just fine; however the command is not being automatically run when the networking ...
4
votes
1answer
553 views

Accessing SSH_AUTH_SOCK from another non-root user

The Scenario: I am running ssh-agent on my local PC, and all my servers/clients are setup to forward SSH agent auth. I can hop between all my machines using the ssh-agent on my local PC. That works. ...
3
votes
4answers
8k views

Why does the $PATH of an ssh remote command differ from that of an interactive shell?

I have a user that has made no modifications to the $PATH in any dot-files: it is exactly the system default setting. From a login shell: $ ssh example.com user@example.com:~$ cat /tmp/hello.hs ...
2
votes
1answer
7k views

how to connect to mongodb server via ssh tunnel

It was easy for me to connect to my remote mysql server on AWS using a sequelpro, however I'm struggling with doing the same thing with mongodb. I tried setting up an ssh tunnel via command line ...
2
votes
1answer
18k views

How to shutdown a virtual machine on ESXi5 over an ssh terminal session?

How can I shutdown a virtual machine when I am on the commandline of an ESXi5 host over ssh? Sidenote: To enable scripts on other machines to login to the ESXi without password, add the public ...
2
votes
3answers
192 views

Copy a file from remote to local

I am trying to copy a file from 10.10.10.99:/home/shantanu/ to the localhost. The only problem is that I need to tunnel the connection through 10.10.10.98 Something like this does not work.... ssh ...
2
votes
3answers
9k views

how to restrict ssh login to a specific ip or host

i want to restrict my ssh login only for one ip address so i modified the following file $ nano /etc/ssh/sshd_config and added this line (i.e. my ip ) hoping that it will work ListenAddress ...
2
votes
3answers
2k views

Can a malicious user bypass a ssh authorized_keys forced command?

Using Linux and Openssh: A user can connect using ssh to a server on which his key is in the authorized_keys list. His public key is preceded by command="command..." which forces execution of a ...
0
votes
2answers
904 views

Can I limit my SSH Tunneling Speed?

So, I'm kind of making sshusers for ssh tunneling to surf some content which is blocked by my country. But, I don't want somebody to slow down others internet speed , therefore I want to limit the ...
10
votes
2answers
1k views

SSH home directory per subdomain

I'm wondering if it is possible to set different home directories for the same ssh user for each subdomain. So let's say you login with ssh myuser@example.com your home directory will be: ...