Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.

learn more… | top users | synonyms (2)

2
votes
1answer
42 views

sshd no longer logging after update on fresh CentOS 7 Install

I am running a VPS with CentOS 7. After a clean install, I correctly saw failed login attempts and service restarts appearing in /var/log/secure like so: Jul 8 13:55:32 vps unix_chkpwd[2561]: ...
0
votes
1answer
26 views

Configure ssh on Ubuntu 16.04 recovery mode

So I have a dedicated server. My host was able to get me to recovery mode. I am able to log in using ssh. Here's my dilemma. I accidentally changed ssh ports while logged in and forgot to add a rule ...
0
votes
0answers
12 views

Force traffic through a double-SSH tunnel (SOCKS proxy)

This is going to sound like a n00b question but I can not find any information on this specific task. I know how to set up an SSH tunnel from PuTTY. Let's say there's a private server, 10.10.10.20 ...
0
votes
0answers
34 views

Still have access to LAMP server, even after deleting local ssh keys

So I'm trying to break my ssh key authentication between me and my LAMP stack although I can't. In other words, it just gives me access and I don't know how! Here's what I've done... Created a key ...
0
votes
1answer
31 views

SSH jump box with private keys on jump box

I basically want to do what is explained in this serverfault question, so I want a group of people ("admins") be able to login in to many hidden servers with ssh using a jumpbox which stores the ...
0
votes
0answers
18 views

Can still access LAMP server, even after deleting local ssh keys [duplicate]

Server newbie here and on a mac for reference. So I'm trying to break my ssh key authentication between me and my LAMP stack although I can't. In other words, it just gives me access and I don't know ...
0
votes
0answers
18 views

How to authenticate without password on Chef deployed nodes

I started to use Chef to deal with DevOps automation and now I have a situation were there are two database servers(primary and secondary) being deployed using knife server create , and during the ...
0
votes
1answer
37 views

Why Linux server closed the SSH client unexpectly and killed all the process started by the me?

I'm using a CentOS(CentOS release 6.4 (Final)) to upload data to cluster, the bandwidth reached to about 100MByte/s (and the net usage is full). Also, a redis(v=3.2.1) server (0.0.0.0:6379) running to ...
0
votes
0answers
30 views

Can't ssh from nodes to VM Proxmox 4.2

SOLVED: I edited the /etc/ssh/sshd_config and changed "PermitRootLogin" to "yes" instead of "without-password". For whatever reason by default it is set to yes for each node, but in the VM it's set ...
0
votes
0answers
23 views

Troubleshooting connection timeouts and SYN_RECV

My DigitalOcean droplet fails very often to connect to different resources, like making a REST call with curl or establish SSH connection. Every time it happens, I can see sockets with SYN_RECV state ...
0
votes
1answer
44 views

Traffic is routed via unknown means

I have 2 machines running CentOS: Machine A has two NICs: 192.168.150.1/255.255.255.0 and 192.168.1.1/255.255.255.0 Machine B has one NIC: 192.168.150.2/255.255.255.0 Machine B is connected ...
0
votes
0answers
33 views

Weird thing with Vagrant and DNS on my Ubuntu

On my local computer I have make a record on hosts file pointing to a specific IP address. The record is like the following: 199.199.199.147 my-local-domain.ext The above domain it is required ...
1
vote
0answers
37 views

How can I know which specific private key is used for 1 ssh connection? [migrated]

I cannot find from my linux box in which file the private key is stored. In below testing, my findings is , there is no ~/.ssh.config file, nor ~/.ssh/id_dsa or equivalent. From the testing result, ...
1
vote
0answers
27 views

Is /var/log/auth.log incomplete a symptom of unauthorized access?

Today I found that /var/log/auth.log file only has records from latest week, and I'm suspecting that I was hacked by using an insecure SSH password, and the attacker deleted access logs to avoid ...
1
vote
2answers
28 views

Managing SSH access for rolling teams to many AWS instances

We have a team of 20+ interns that join and leave us every 3-6 months. They each have individual SSH logins setup on 10-15 shared AWS instances, some of which have been running for years, others run ...
1
vote
2answers
60 views

Cannot ssh with shared keys on CentOS 7 server refused our key

I cannot ssh to a CentOS 7 server using pre-shared keys, I get a "server refused our key" message. Below is an ssh attempt using -vv OpenSSH_7.2p2, OpenSSL 1.0.2h-fips 3 May 2016 debug1: Reading ...
0
votes
0answers
14 views

Multi user passwordless directory specific ssh login

I am running Ubuntu 14.04 LTS. I want to allow multi user passwordless ssh login. But I want to give directory specific ssh access. For example: My home directory(server home) has two folders user1 ...
0
votes
1answer
20 views

Rsync to remote server with mounted NFS USB [closed]

I am trying to rsync one file from server X to server Y. In the server Y, there is a mounted dir /mnt/myDir, where I am trying to sync that file. The goal is also to keep the full path of the file. I ...
0
votes
1answer
25 views

linux + get standart output from remote machine

is it possible to get the standard output from remote machine - 100 or 1 , After ruining the script /tmp/script.bash ? ssh $remote_machine /tmp/script.bash echo $? ( from remote machine script - ...
1
vote
1answer
54 views

DH GEX group out of range

I'm having a sudden issue SSHing into my server: ssh -v --@-- OpenSSH_7.2p2 Ubuntu-4ubuntu1, OpenSSL 1.0.2g-fips 1 Mar 2016 debug1: Reading configuration data /home/paul/.ssh/config debug1: Reading ...
0
votes
1answer
63 views

Cannot sftp using a password [closed]

I have setup my server to allow sftp using a password however I'm getting Authentication failed. even though I'm using the correct password. Here is my sshd_config # Package generated configuration ...
0
votes
0answers
13 views

Restrict access to Linux via PAM with configured SSO

i have SLES 12 in Active Directory Domain. Single Sign On for SSH is configured. I want to allow access to server only to some AD groups via PAM (not only for SSH Service, ftp, etc.). I tried to add ...
0
votes
1answer
39 views

Run FNDLOAD command on unix server from windows using Jsch

I'm trying to run an FNDLOAD command using Jsch after connecting to my unix server through ssh. But the command is giving me the following error bash: FNDLOAD: command not found Also if I try to ...
0
votes
1answer
22 views

remote script execution from local script linux doesn't stop for remote script prompts

script abc.sh is on machine M1 and xyz.sh is on machine M2 script abc.sh: #!/bin/bash ssh -l user1 host.com ./xyz.sh -b1 arg1 -b2 arg2 script xyz has certain user prompts like pwd etc When I ...
0
votes
0answers
17 views

Why is my sshd looking for a wrong kvno in keytab?

My FreeBSD box is using Heimdal Kerberos-implementation. It is registered with the corporate AD, its msDS-KeyVersionNumber-attribute is set to 2, and its keytab has the following entries: FILE:/etc/...
2
votes
2answers
41 views

What are the disadvantages when using two-factor authentication on SSH like Authy-SSH?

I'm considering to setup Two Factor Authentication on my SSH accounts (OpenSSH, Ubuntu). I was looking into Authy-SSH but I'm wondering what the possible disadvantages are? Also, can I lock myself ...
0
votes
0answers
97 views

Install Bash + openSSH on Windows Server 2012

I had to create a Virtual Machine with Windows Server 2012. Now I want to connect to it via OpenSSH and Bash, installing OpenSSH is successful, however when I connect to the server via ssh ...
0
votes
0answers
7 views

Is it possible to change ownership of root directory for NFS mountpoint? [duplicate]

I have an NFS share and OpenSSH server. What I'm trying to achieve is to jail SSH users in the mountpoint for the share. The problem is that OpenSSH server requires all directories within a path of ...
0
votes
0answers
27 views

kerberos - active directory domain trust - SSO only working for linux machines

I have an Active Directory Server (2008r2) and a MIT Kerberos Server. Between the realms "AD.EXAMPLE.COM" and "INTERN.EXAMPLE.COM" is a two-way transitive trust, set up on the windows-side with the ...
0
votes
1answer
64 views

SSH: hangs after “connection established”

I have an AWS EC2 instance to which I can't connect through one of Ubuntu servers. However, I can connect to the AWS instance through any machine(with and without private SSH key), but Ubuntu server ...
1
vote
0answers
18 views

xdebug remote centos host from mac

I have a server running CentOS7, PHP7.0.7 with php-fpm, and SELinux. I am trying to debug a PHP script running on that server. And I have a Mac machine that runs PHPstorm where I intend to do the ...
-1
votes
3answers
113 views

Bad ssh config on remote server. Cannot login in

I accidently changed ssh_config instead of sshd_config on a remote debian machine. Whenever i try to loging, i get /etc/ssh/ssh_config: line 55: Bad configuration option: permitrootlogin /...
1
vote
1answer
30 views

How to limit access from host to docker container

I am new to docker. I setup a container which run a web application at port 3333. it works well. By default we could access container bash from host without password. I share the host machine with ...
0
votes
0answers
35 views

Home Directory Permissions - Google Cloud Compute

I've setup a Linux (Centos) instance on Google Cloud Compute, I've also setup SSH as described here - https://cloud.google.com/compute/docs/instances/connecting-to-instance. I and can now connect ...
0
votes
1answer
58 views

Stop and prevent brute force attacks on Ubuntu 14.04

I've currently 3 servers with SSH service being attacked by brute force. The attack is from multiple sources or one who's changing his IP with each attempt performed. I need help to stop current ...
1
vote
1answer
37 views

Why is module os_keypair not returning private_key?

I am deploying to Rackspace Cloud with the OpenStack ansible module. I am facing an issue with the SSH keypair creation. It creates the public key, and installs it on the host. However I can see that ...
0
votes
1answer
22 views

Can I establish an SSH tunnel to elasticbeanstalk instance?

It is possible to SSH to elasticbeanstalk with eb ssh <instance>, but it doesn't seem to be possible to create a tunnel with this executable. How can I do it, if at all?
-1
votes
1answer
18 views

rsync to remote ssh or to local iscsi

I'm curious of anyone knows a link to or can elaborate upon this design question: I have a server that I would like to make a backup copy of data from. I have a second server that is iscsi-enabled. ...
0
votes
0answers
12 views

OpenSSH won't resolve %temp% environment variable in commands and batch files

I installed OpenSSH on my Windows Server 2012 R2 system. So far everything works except for resolving the %temp% environment variable: In my PuTTy SSH client I can resolve %systemroot% but not %...
0
votes
1answer
59 views

SSH connection is slow and buggy when connected by IPv6

I noticed that my SSH session is not usable (random connection errors, hugh delay, etc.) when I'm connected by IPv6. I'm not connecting to my server by IPv4/IPv6 addresses directly. I use my domain ...
1
vote
0answers
25 views

PAM+LDAP no longer working after SLES 10.4->11.4 Upgrade

authentication via LDAP has ceased functioning after we upgraded to SLES 11.4 via recommended method (boot from DVD). Unfortunately with SLES I cannot give you any meaningful log output since neither ...
0
votes
1answer
41 views

Server allows logging in without supplying a password and no ssh keys were exchanged, what could be the reason?

I'm trying to secure an outbound server with Google 2FA solution. For the time being, I'm first configuring everything on a local Vagrant machine and once everything works as intended I'll run it as ...
0
votes
0answers
16 views

X11 Forwarding using Attachmate Reflection

I've been using Putty for my SSH connections. I've been able to use XMing and X11 forwarding without a problem. I have to switch to Attachmate Reflection for work. I connect to the same machine and ...
1
vote
0answers
23 views

libnss-ldapd and Onelogin vLDAP

I'm trying to get Onelogin's new vLDAP service working with libnss-ldapd on an Ubuntu server (14.04). It looks like vLDAP uses authenticated bind per user. I've tried lots of different configurations ...
0
votes
1answer
26 views

How can I use port tunneling to connect to a private database instance through a network bastion?

I have a network bastion which is publicly accessible at example.compute-1.amazonaws.com and a private postgres database instance at postgres.example.us-east-1.rds.amazonaws.com:5432 I can ssh into ...
0
votes
1answer
24 views

Forward incoming SSH connection if user = git?

I have a CentOS 7 minimal with Firewalld installed and it serves as the firewall / router for the company. Inside the network, we have a git server, let's name it: gitlab-server. I wish to make it ...
0
votes
3answers
156 views

Passwordless root SSH on CentOS 6 with public key

I am trying to create a "passwordless" setup so that the remote server is more secure without password + I can automate the login process. I have created a new ssh key with ssh-keygen, and copied the ...
1
vote
1answer
32 views

How to configure pam sshd to allow different rules on different users/groups?

I'm configuring google two-factor authentication on an outbound server in the company I work for. Here are the relevant configurations: /etc/ssh/sshd_config: ubuntu@stage-itai-1:~$ egrep -v '^#' /...
0
votes
1answer
35 views

Remote host identification has changed

I'm trying to connect serverpilot manually on a cloud server at OVH (unbuntu 16) via the terminal on my mac (ssh root@vpsXXX.ovh.net) The operation failed once and now that I'm trying to re-setup it ...
0
votes
0answers
44 views

Why can't curl retrieve the SSH host key (key: <none>)

I've been using curl (by means of git-ftp) for a while, and passing only username and an sftp URL. Authentication would always work implicitely through publickey. Suddenly curl will not connect ...