Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.

learn more… | top users | synonyms (2)

3
votes
0answers
89 views

SSH - 1s hang at “Entering interactive session” (Not DNS; possibly SELinux related)

I'm having an issue on CentOS 6.7 where SSH logins are 1s more than any non-6.7 machines on this network (e.g. 7.2, 5.11). Running debugging on the client side showed the hang at "Entering interactive ...
-2
votes
1answer
28 views

Prevent users from going upward from their home directories [closed]

I guess this questions has been asked a few times, but my needs are very specific, so I'll take my chance in asking. I have three users, which each have a folder in /var/share, soft linked to there ...
2
votes
2answers
37 views

Setup an ssh account that can only be used for a socks5 proxy

I have an arch linux machine behind a firewall. I can open a port forwarding for the ssh port. I would like to create a user that can be used only for a socks proxy. ssh -N -D 5000 user@server -p9000 ...
0
votes
1answer
66 views

why fail2ban does not ban? (ubuntu, ssh)

I installed a fresh Ubuntu machine. Then I changed the ssh port which is no more 22 but 22111: Then I have installed fail2ban: apt-get install fail2ban -y cp /etc/fail2ban/jail.conf ...
-1
votes
3answers
37 views

How to revert SSH changes back to default after changing port from default?

Got myself into a sticky situation. I've got a bare metal server in a DC which is reasonably far in distance from me. In any case, a few day ago I changed the SSH port from default to 6298 and now I ...
1
vote
1answer
26 views

pam and google athenticator

I am getting these errors: e Jan 15 15:05:00 APPLES sshd[32305]: User root from not allowed because not listed in AllowUsers Jan 15 15:05:00 APPLES sshd[32305]: ...
3
votes
2answers
32 views

SSH authorized_keys command option: multiple commands?

The authorized_keys has a command="..." option that restricts a key to a single command. Is there a way to restrict a key to multiple commands? E.g. by having a regex there, or by editing some other ...
0
votes
1answer
36 views

how to run multiple commands (nested control statements) on remote machines with sudo?

My bash code is: 1 #!/bash/sh 2 set -e 3 USER="admin" 4 HOST="1.2.3.4" 5 PASSWORD="$(cat password.txt)" 6 7 sshpass -p"$PASSWORD" ssh -t $USER@$HOST "/usr/bin/sudo bash -c 'sudo ls ...
0
votes
1answer
31 views

SSH LocalForward Through Middle Machine

My setup looks like this: +--------+ +----------+ +-----------+ | Laptop | <---> | Middle | <--> | Server | +--------+ +----------+ +-----------+ And the ...
0
votes
2answers
30 views

How can I see IP addresses attempting to connect to my Amazon EC2?

I have an EC2 instance that is setup as an SFTP server using OpenSSH. It only allows connections on whitelisted IPs via TCP Port 22 (limited via an EC2 Security Group). I constantly have customers try ...
0
votes
1answer
73 views

Updating OpenSSH on Amazon Linux - Amazon repository out of date

I read today that there's a significant vulnerability in OpenSSH, which is fixed by the latest version, 7.1p2. According to this story your private key is vulnerable to disclosure. I'm using the ...
28
votes
5answers
3k views

Why run SSH on a different port

I am currently learning about installing Kippo SSH. From the tutorial, it said that I should reconfigure SSH port from 22 to a different port (which in this case 3389). So now whenever I try to SSH ...
0
votes
1answer
24 views

Gitlab omnibus fails to add ssh key

tldr: there is no /home/git directory where .ssh/authorized_keys should be. Is this the expected with Omnibus installs? System is Debian 8.2 I'm trying to set up ssh keys for my gitlab user. I can ...
-1
votes
2answers
60 views

Must I bind haproxy to port 22 to load balance ssh/sftp

I need to use haproxy to load-balance SFTP connections but currently i cannot bind it to port 22 (cutomer constraint). Can i bind to port xxx and listen on port 22 to achieve this or must I bind to ...
1
vote
1answer
26 views

How to change/disable SSH message on connect? [duplicate]

I have a Linux server with SSH service on it. If I performing a TCP connection to it (e.g. telnet %ip% %port%), it sends me a version line, like SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.3. It is not a ...
0
votes
0answers
28 views

How to setup a background ssh tunnel which could quit automatically with terminal/session? [migrated]

What I want is like following: I could setup a ssh tunnel at background on a Linux machine(Actually, I'd like to setup it in my .bashrc) I could run process using this tunnel as any user on this ...
2
votes
0answers
14 views

Windows directories keeps getting unmounted on two identical Red Hat servers

Was refered here by the kind people at stack overflow. We have a pretty severe problem at my research center. I have, together with IT, set up an infrastructure like this: Users use their laptops at ...
0
votes
1answer
15 views

SSH Connection reset on IPv6

When attempting to SSH from an IPv6-enabled host to an IPv6-enabled host, I get: $ ssh remotehost.example.com ssh_exchange_identification: read: Connection reset by peer When I add the -4 option, ...
0
votes
0answers
25 views

ssh command without tty hangs

I'm trying to execute a simple ssh remote command from my local machine to an AWS instance, by running: ssh -i /my/key.pem ec2-user@<myhost> 'ls -l' When I do this, the command returns with ...
0
votes
0answers
12 views

Git for Windows somehow ignores ssh config

I am creating a remote git repository server, though, there appears to be problem with cloning from Windows (Git for Windows - MINGW) which I am trying to debug. I have created the user on the ...
-1
votes
0answers
22 views

/usr/bin/xauth: timeout in locking authority file ~/.Xauthority

I've checked the permission on my ~ and ~/.Xauthority file. They seems to be OK. I ran the xauth command under strace and I got the following $ strace xauth execve("/usr/bin/xauth", ["xauth"], [/* 53 ...
2
votes
1answer
44 views

Best practice for storing password for ssh

I have an Ubuntu server that runs certain scripts and should ssh into windows server to execute data. I am developing using python and using paramiko for ssh. Currently, the windows login ssh ...
1
vote
1answer
14 views

How can I set -X (X11Forwarding) in my ~/.ssh/config file for a specific host?

So if I'm VPN'ing in from home, I want all of those connections to have -X specified. I already have the keys copied and an entry in ~/.config with the ip and userid so all I have to do is go: ssh wk ...
0
votes
1answer
11 views

Different shell for SSH login on specific machines

I have Active Directory users with no local accounts, so they cannot use chsh. They can login to multiple different types of server and most of the time /bin/bash is the correct shell, or at least for ...
0
votes
0answers
24 views

how to execute bash script with args in parallel on all the remote server if the remote server in the from of pair

Please read carefully problem first and then give solution................... we are having 3 files in directory myscript.sh (the myscript.sh file contain many function and starts/stop to ...
0
votes
0answers
77 views

SFTP Chroot Jail preventing SSH: This service allows sftp connections only

I set up a SFTP Chroot Jail succesfully, but would like to give my users access over SSH, in addition to SFTP. If I attempt to SSH in with the testuser, after providing the password, putty closes. ...
0
votes
0answers
6 views

No menu for VNC view [migrated]

Problem: I have a VPS on linode that installed ubuntu 14.04. In the Real VNC viewer on my local machine, I see a screen like this. The problem is, although I can navigate the file system in this ...
-1
votes
0answers
4 views

Conemu ssh results in “Pseudo-terminal will not be allocated because stdin is not a terminal” [migrated]

I'm using a Conemu task to ssh into my server. In order to have 256 color for my motd generator (https://github.com/willemdh/generate_motd) support I have put the cygwin-connector conemu-cyg-64.exe in ...
0
votes
0answers
23 views

memcached is not starting

I am trying to start Memcached through SSH. I know that it was installed correctly as it was working yesterday. I am doing "sudo service memcached status" I get " * memcached is not running" Then I ...
0
votes
0answers
18 views

how to get public key from certificate on azure automation [duplicate]

I need to get SSH public key from the certificate which is store on azure portal and I have created workflow on azure automation and import the certificate to azure portal. Once we get the SSH public ...
-3
votes
2answers
34 views

how parallel ssh execute bash scripts with mutiple positional parameter [closed]

Actually I want to execute my script in parallel on all the remote ssh host. so generally I am executing my script like.... <./myscript.sh arg1 arg2 arg3> and its executing but i want to same ...
0
votes
2answers
32 views

Access ssh of server with dell drac installed

I've got a new dell r610 with a DRAC 6 express installed. I've never colocated before nor have I owned a server so pre-apologies for the lack of knowledge. I'm trying to access my server via SSH on ...
2
votes
3answers
207 views

bashrc not loaded in /bin/bash shell

When I ssh into a server (4.3.3-2-ARCH), my .bashrc is not loaded (however, I can load it manually by sourcing it). I don't have any other files in my home folder, like .profile. The shell is also ...
0
votes
1answer
15 views

How to use PuttyGen.exe when moving key(s) from old machine to a new machine?

I've only generated the public/private key pair in PuttyGen.exe once. This was the first time I've ever used this tool. Rather than having the folks hosting the server that I'm connecting to, who ...
0
votes
1answer
44 views

systemd: Failed to make us a subreaper: Invalid argument. SSH

Since upgrading to Debian 8 (Jessie) which brought in systemd I'm getting the title of this post in my syslog errors. Remote ssh login begins 10:33:51 pap1 systemd[1]: Starting user-0.slice. ...
-1
votes
1answer
47 views

SSH connection refused, probably server firewall, how to solve? [duplicate]

I'm trying to connect to my server via SSH. I get the (well-known) error: ssh: connect to host 12.345.678.910 port 2222: Connection refused So I first thought the problem was with my modem, but ...
0
votes
0answers
24 views

Forced password change but then hangs forever

We have a Debian 7 server wich disallows SSH root login. Server administration is done by connecting with another account, say user "A", that allows afterwards to switch to root with "su" command. ...
1
vote
0answers
43 views

How to do I create linux VM with ssh public on azure automation

Right now, I am creating Linux VM without public key on azure automation. My aim is to create linux VM with ssh public key on azure automation. How to get ssh public key from "accets" on azure ...
0
votes
1answer
25 views

SSH hardening with chef test-kitchen. How to tell test-kitchen how to connect?

I wrote a chef cookbook and it runs fine with test-kitchen. Now I want to harden ssh access to the production nodes by writing a recipe that overwrites /etc/ssh/sshd_config. Among other things, it ...
0
votes
2answers
40 views

firewalld: if I change the ssh service port, is it enough to allow the new port number, or should I add a new service?

I changed the ssh port to an arbitrary number, and noticed firewalld no longer allowed ssh login. I assume the port 22 is hardcoded in the ssh service definition for firewalld. Is it enough if I ...
-3
votes
1answer
29 views

Not able to ssh into server after mounting users home on other ebs volume [closed]

I have a server which has a low storage problem. What i want is to mount the user ec2-user's home directory that is /home/ec2-user to another attached storage drive which is available at /dev/xvdk and ...
1
vote
1answer
17 views

vsftpd server allows different permissions than ssh

I setup a vsftpd server on Debian 8.2, and haven't changed anything in the config file except for local_root=/. When I try to upload a file using Filezilla to a directory I have group write ...
-1
votes
1answer
46 views

I've installed and enabled ufw firewall, and I cannot connect to my server [closed]

I've installed ufw firewall on my little server, with ssh and web services. But, when enabled, the ssh connection lost, and I could neither connect to the hosted web via web browser. What has ...
3
votes
2answers
111 views

Cannot ssh to remote system after enabling IPSec

I have created two VMs on top of base OS and have enabled IPSec between the two VMs. Now the problem is as soon as IPsec starts and SA is established between the two VMs, I am not able to ping or ssh ...
1
vote
0answers
31 views

Apache using all cpu and cause OOM killer

I have an Xen-VPS CentOS 6.5 64 Bit with 2GB memory and 4 GB Ram, I have application with php, in my application lot of pages need to image which generated by php_imagick extension, here is apache ...
1
vote
1answer
106 views

OpenVpn and SSH listen

i have OpenVpn connection from my home at my developement Server, the ip of my Developement server in OpenVpn is 10.0.8.2, i can see in netstat two interfaces, eth0 and tun0. now i want connect from ...
-3
votes
1answer
62 views

sftp not working, but ssh is working [closed]

I have a nat rule in my firewall to allow port 22 traffic through pfsense. I am able to SSH into my server but sftp through filezilla is getting timed out and not connecting. I tried with the local ...
-4
votes
2answers
30 views

what is wrong with this rsync command? [closed]

Is this syntax wrong for rsync command? The target server is using port 2222 as ssh port but I can't define it right in the rsync command. rsync -dr /home/88/public_html/download/ali -e ssh ssh -p ...
2
votes
0answers
41 views

EC2 SSH Login Temporarily Hangs on “Entering Interactive Session”

I've been researching this for hours now, can't figure out why this is happening. Originally marked it as internet but checked my speeds (37 down, 10 up). I went from California to Oregon, and since ...
2
votes
1answer
30 views

SSH, Kerberos, AD: how / where to config /etc/pam.d/password-auth?

I have a CentOS 6 machine here and want to give SSH access for users from another forest, which is trusted. I got a temporary workaround, which is: 1) change content in /etc/pam.d/vncserver to auth ...