Secure Shell (SSH) is a protocol primarily for encrypted shell connections.

learn more… | top users | synonyms (2)

0
votes
1answer
30 views

SSH attacks, how do their usernames end up in auth.log? (pw auth disabled)

So this computer is reachable on port 22 (from everywhere). Since messages indicating failed login attempts (usernames like root, cgi, bash, production...) have been flooding /var/log/auth.log, I have ...
9
votes
4answers
3k views

Do I Need to Replace Keys for OpenSSH in Response to Heartbleed?

I've already updated my servers with the patches. Do I need to regenerate any private keys with respect to OpenSSH? I know that I have to regenerate any SSL certificates. EDIT: I didn't word this ...
1
vote
0answers
18 views

TUN/TAP VPN no internet connection

I have set up a tun/tap vpn to a VPS. For this, I created a 10/24 network and gave the server the IP 10.0.0.100 and my client got 10.0.0.200. I can now successfully ping the server / access my mail ...
0
votes
1answer
19 views

Automatically send public key to github account

I want to automatically add public key from newly created machine to github account (so it could checkout organization projects). Is there any simple way to do that? Machine OS is Debian Wheezy.
2
votes
2answers
31 views

ssh dissable login, but allow copy-id

I have a user that's only used for a proxy, so no one can login. #passwd file entry proxyuser:x:996:99::/home/proxyuser:/bin/false but, I'd like to enable ssh-copy-id to that user How do I do ...
1
vote
1answer
134 views

Understand wireshark capture for ssh key exchange

I need to understand SSH key exchange, I have tried to read RFC document but it seems very difficult to understand so I have captured packets using wireshark ,I found various packets for ssh ...
1
vote
1answer
38 views

How to programatically find default ssh key?

In most of my experience, by default, ssh will look in ~/.ssh/id_rsa(.pub) for the default key pair. Ocassionally I try to write scripts to take advantage of this default key location, but I end up ...
-1
votes
0answers
26 views

ssh to a new user in ubuntu [migrated]

I created an user in ubuntu and now I want to do ssh with that user. I'm able to do ssh but I'm not getting in the shell: myUserName@myMachineName:path$ I just get: $ And I don't see the path ...
0
votes
0answers
14 views

Can't use ssh in a VM Centos [duplicate]

When I tried to connect my Ubuntu 13.10 to my VM Centos 6.5 using ssh appear the message "Connection refused" or "No route to host" even than I change the port, noting change. See here I need to use ...
0
votes
3answers
81 views

Have I just been under attack?

I have set up my Debian server on HP ProLiant 360 G4 yesterday. I started off with minimum services, running only SSH and Apache, all on standard ports with default configurations. About an hour ago, ...
0
votes
2answers
41 views

Environment variables are unavailable when running scripts over ssh

Suppose I have two hosts: A and B with users a and b. B is Windows machine with Cygwin installed, if this matters. B is configured to be accessed from A through SSH without password (it contains A's ...
-4
votes
2answers
60 views

Don't work ssh in a VM Centos [closed]

When I tried to connect my Ubuntu 13.10 to my VM Centos 6.5 using ssh appear the message "Connection refused" or "No route to host" even than I change the port, noting change. I need to use SSH, ...
0
votes
1answer
37 views

Saving SSL password for SVN in Ubuntu

I have tried to set up my SVN that way, that it saves my passwords, but for some reason it won't work. I am using a SSL certificate, for which I need to provide a password every time. I have tried ...
20
votes
1answer
620 views

Why does sshd(openssh) create two processes per connection?

before login: $ ps -elf | grep sshd 5 S root 26135 1 0 80 0 - 13115 ? 17:26 ? 00:00:00 /usr/sbin/sshd 0 S test 26480 21337 0 80 0 - 4154 - 18:41 pts/27 ...
1
vote
0answers
31 views

Slow first login to a AD-joined Samba box

I have joined my first Debian box to an Active Directory (2008 R2). It works, I can log in with AD credentials, browse Samba shares. There is just a problem with the time it takes for someone to log ...
0
votes
0answers
38 views

Creating SFTP Users chrootdirectory /var/www

I am trying to create a new sftp user in Ubuntu 12.04.4 and am running into some trouble. After creating the first sftp user, I document the commands for later user and then delete the user and try ...
0
votes
0answers
26 views

CentOS - can't disable password authentication [duplicate]

I have Linux Mint on my local machine and CentOS release 6.5 (Final) on VirtualBox, and I'm trying to set up public key authentication via ssh-keygen -t dsa. The problem is that when after all I type ...
0
votes
2answers
41 views

How to enable KeepAlive in putty command line

currently i am using putty like this from the command line: putty.exe -ssh user@192.11.11.11 -pw mypassword how do i enable KeepAlive so that the connection doesnt die if i leave the terminal ...
1
vote
1answer
31 views

Using a reverse tunnel to access a firewall-ed web server serving HTTPS

I have a device ("A) on my network that only serves content via HTTPS, it's not accessible as its behind my router/firewall. I have another machine ("B"), elsewhere on the internet (fake IP of ...
0
votes
0answers
19 views

rdiff-backup --remote-schema does not take input

I'm trying to set up rdiff-backup between my windows host machine and my remote linux machine. I'm using Windows 8.1. SSH and rdiff-backup is indeed within the PATH environment variablle... With the ...
0
votes
0answers
38 views

Can't use SSH anymore after installing denyhosts [migrated]

so I'm in a very tricky situation. I've installed denyhosts on my debian machine and suddenly I can't use SSH anymore. Hopefully I could still login through webmin, but with root, so I had to login ...
1
vote
2answers
42 views

Forwarding X11 with one hop without X-server installed

problem I want to run X-applications remotely on a machine C from my client A. The only way to connect to this machine is by using machine B (firewall) as a hop: A --> B --> C So far, simple ssh ...
0
votes
1answer
33 views

Convert EC2 ssh .pem key to Azure X.509 certificate?

Normally I use a pem file to login into my ec2 instance via ssh -i key.pem Now, in Azure, their requirement during instance creation is UPLOAD AN SSH KEY OR PROVIDE A PASSWORD FOR AUTHENTICATION ...
0
votes
0answers
36 views

Run pam_exec after home directory creation CentOS 6

How can I make a pam_exec script in /etc/pam.d/sshd run after the home directory has been created? I am on CentOS 6.5 and use network accounts via PBIS / Likewise-Open. Right now, if a new user ...
-1
votes
1answer
49 views

SSH through another machine at work to an external server [duplicate]

I'm fairly sure this will have been asked before, I have found similar questions but I do not fully understand how to apply them to my situation. So, sorry for asking again. We have a number of ...
-1
votes
3answers
137 views

AIX openSSH allow anyuser any IP (default) but restrict a particular user to an IP

Can't seem to come up with the correct Match for this one sshd should allow anyone from anywhere i.e. the usual/default config, but I want to restrict a user to a IP For example bob should only be ...
0
votes
1answer
14 views

Choosing the post-build server based on variable value

I have two server as a target machines: dev and production. They're both connected to the Jenkins by "Publish over SSH" plugin. And now I want to choose which one is being used for a target. But in ...
1
vote
1answer
25 views

Change openssh default PATH

I am trying to execute a command from ssh directly and I need to change the PATH of the directories. > ssh myserver 'echo $PATH' myuser@myserver's password: /usr/local/bin:/bin:/usr/bin I am ...
2
votes
1answer
239 views

What could cause *every* command in RHEL to be executed by root?

Recently I was asked to look at a system for a "friend" that left me completely stumped. Their original problem stated to me: They have a RHEL 5.10, gnome desktop fairly typical install They are ...
1
vote
1answer
28 views

bad ownership or modes for chroot directory component

I created the user MY_USER. Set his home dir to /var/www/RESTRICTED_DIR, which is the path he should be restricted to. Then I edited sshd_config and set: Match user MY_USER ChrootDirectory ...
0
votes
0answers
16 views

Command to add permissions to user under ESXi 4.1 via console

So I don't have to give them the password for the root account, wich is shared with other services, I need to add administrator rules to another user in several (30+) ESXi 4.1.0 servers. Creating the ...
0
votes
0answers
23 views

SSH Local forwarding thru multiple hosts [duplicate]

If I want to use local forwarding to tunnel thru host1 to host2, it's as easy as saying: ssh -L 2222:host2.com:22 host1.com But, suppose I want to tunnel thru host1, to host2, and then to host3? ...
2
votes
1answer
37 views

fail2ban with PermitRootLogin without-password?

I tried to choose a title that cover the topic: Why should I use fail2ban (or similar programs) if I've my PermitRootLogin set to without-password? A very trusted and experienced sysadmin that I ...
12
votes
4answers
760 views

Publishing id_rsa.pub for easier setup of new environments?

To make setting up passwordless SSH easier on new machines and environments, is there any reason why the id_rsa.pub file (just the public half of the key pair) could not be published somewhere on the ...
1
vote
0answers
24 views

Passwordless public key is not working

this is my fist help ask here despite being a daily reader in order to learn. I am working on a Unix environment (both Solaris and Aix servers) and my public key suddenly stopped working after ...
0
votes
0answers
20 views

SSH Tunnel, id_rsa seems to fail

I'm creating a SSH tunnel that tunnels thru 3 hosts, first to a host1, then to a jump server, then to host2. I create the tunnel like this: ssh -t -A -l myusername host1.com -L 2222:localhost:2222 ...
1
vote
0answers
20 views

LXC and proxying port 22 (ssh)

I have installed LXC on my Ubuntu 12.04 server and have created a couple of containers. I have only 1 external IP address, thus I am using nginx on my host machine to proxy HTTP requests from certain ...
8
votes
3answers
428 views

Quickly SSH into another box over SSH [duplicate]

I need to upload and compile stuff on a remote machine that is only reachable inside a specific network that I can access over SSH. So for example I perform the following steps: me@mymachine$ ssh ...
-1
votes
1answer
39 views

Is it possible to have multiple users on FreeDOS? For remote terminal use

Is there a way to support multiple users on FreeDos? I'm asking because I have an old application in clipper that runs on MS-DOS and I'd like to make it available over my LAN so that users could ...
0
votes
0answers
29 views

How to solve problematic cpu load due to encryption when using SFTP on a VM

my company is trying offer a sftp service for a big amount of customers. The serving machine will be on a VM and tests have shown that, with an increasing amount of simultaneous users, the cpu becomes ...
-1
votes
1answer
39 views

establish passwordless login without asking the user [duplicate]

On Linux when using dsa keys I establish passwordless login with the command ssh-copy-id -i .ssh/id_dsa.pub user@target.host This prompts the user for user's password on target.host. My script ...
-1
votes
1answer
57 views

How to add Public IP to Cent OS [closed]

I am trying to configure a Public(Static) IP in Cent OS 6.4. For this, I made a copy of eth0(added local IP, so that I can connect the system to Internet) and named it to eth0:0(added Public IP, so ...
0
votes
1answer
40 views

Linux Active Directory Authentication without domain name?

Is there a way of authentication Linux users to Windows Active Directory without using the server domain name. Currently the syntax that I use to log in is this ssh Domain\user@ipaddress all I want ...
2
votes
1answer
41 views

sshd not responding to port forwarded connection request

I'm setting up port forwarding on a SonicWall NSA 220 router, for port 22. It appears that the router is forwarding TCP packets as it should. However, Wireshark running on the server shows that my ...
2
votes
2answers
160 views

SSH issues: Read from socket failed: Connection reset by peer

I compiled OpenSSH_6.6p1 on one of our server. I am able login via SSH to the upgraded server. But I am not able to connect to other servers running OpenSSH_6.6p1 or OpenSSH_5.8 from this. While ...
0
votes
0answers
18 views

Automatically reconnect ssh session for tailing remote file

I need a solution that basically tails a log file from a remote box... Works on Mac Restores itself whenever I have internet. (I frequently close and open the lid of my macbook) It could be a ...
4
votes
1answer
46 views

SSH How do I ignore IdentityFile not found errors?

I currently have this in my .ssh/config file: Host * AskPassGUI no IdentityFile ~/.ssh/%r@%h IdentityFile ~/.ssh/%h IdentityFile ~/.ssh/id_dsa When I ssh into a host that I don't have a key file ...
-1
votes
1answer
27 views

Force ssh to ignore id_rsa permissions

I have a very specific requirement that requires a private key to be used by multiple users. I know how bad this is. The problem is that if the identity file's permission is to permissive (444 in my ...
0
votes
1answer
91 views

How to free the (unused) memory?

Being a newbie in working with amazon ec2, I am trying to make my application work. I've connecting a few times by ssh, I've been running and stopping the server, sometimes the connection was lost, ...
0
votes
0answers
34 views

sshd installation broken. Repair with only file system access

I broke the sshd installation on a remote host and now ssh doesn't startup. I can mount the file system on the host through a rescue system. The rescue system is debian based and the host system is ...