Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.

learn more… | top users | synonyms (2)

2
votes
3answers
7k views

“Corrupted MAC on input. Packet Corrupt” on file transfer over SSH, SCP, and FTP on Linux Server

help on this would be great. Specs: LAMP server Linux OS - Debian 5.0.1 4x Intel(R) Xeon(TM) CPU 2.80GHz Important Packages: openssl - SSL security iptables - firewall to block all requests ...
8
votes
1answer
4k views

Using Upstart to Manage AutoSSH Reverse Tunnel

I'm using upstart to manage a reverse SSH tunnel via autossh. When I do a "sudo start tunnel" the connection comes up just fine; however the command is not being automatically run when the networking ...
8
votes
6answers
522 views

Why shouldn't root be allowed to login via ssh?

why should root access be disabled for ssh? I always hear that's for security reasons. But I don't get it. What's different to login as non-root and then sudo su -? What's the preferred way to handle ...
5
votes
3answers
3k views

Docs for OpenSSH CA-based certificate based authentication

OpenSSH 5.4 added a new method for certificate authentication (changes). * Add support for certificate authentication of users and hosts using a new, minimal OpenSSH certificate format (not X.509)...
4
votes
1answer
2k views

autossh failed recreating a tunnel due to different timing

I have problems with autossh in case short network interrupts (up to 60s). This happens daily due to a network disconnect by my ISP in the morning. Even with usage of autossh the ssh tunnel stays ...
3
votes
3answers
2k views

Can a malicious user bypass a ssh authorized_keys forced command?

Using Linux and Openssh: A user can connect using ssh to a server on which his key is in the authorized_keys list. His public key is preceded by command="command..." which forces execution of a ...
3
votes
1answer
3k views

Anonymizing OpenVPN Allow SSH Access to Internal Server

I'm using an anonymizing VPN, but want SSH access to internal computer. How do I access my internal computer through SSH? When I do ssh 98.123.45.6, the connection times out. IP address from cable ...
2
votes
3answers
204 views

Copy a file from remote to local

I am trying to copy a file from 10.10.10.99:/home/shantanu/ to the localhost. The only problem is that I need to tunnel the connection through 10.10.10.98 Something like this does not work.... ssh ...
2
votes
1answer
21k views

How to shutdown a virtual machine on ESXi5 over an ssh terminal session?

How can I shutdown a virtual machine when I am on the commandline of an ESXi5 host over ssh? Sidenote: To enable scripts on other machines to login to the ESXi without password, add the public ...
0
votes
2answers
1k views

Can I limit my SSH Tunneling Speed?

So, I'm kind of making sshusers for ssh tunneling to surf some content which is blocked by my country. But, I don't want somebody to slow down others internet speed , therefore I want to limit the ...
16
votes
1answer
792 views

can't type lower cased e in amazon ec2 (Amazon Linux)

After a few days of operation on my new ec2 build, the following happens: I log into SSH, everything is fine, I do my coding I return the next day, and log into SSH I cannot type a lower cased e ...
7
votes
3answers
605 views

SSH via 3rd Machine

Local Computer (Fedora) --SSH--> Server1 --SSH--> Server2 In some environments I work in, we have to use "jump boxes" where you ssh to one server in order to get to another server. Is ...
6
votes
4answers
7k views

ssh_exchange_identification: Connection closed by remote host

Firstly, I know that this question has been asked a million times, and I have read everything I can find and still cannot fix the problem. i am encountering this issue when ssh'ing in from my mac to ...
5
votes
2answers
1k views

How to limit reverse SSH tunelling ports?

We have a public server which accepts SSH connections from multiple clients behind firewalls. Each of these clients create a Reverse SSH tunnel by using the ssh -R command from their web servers at ...
5
votes
4answers
2k views

Prevent SSH connection lost after logging into VPN on server machine

I encountered an issue that I can't deal with. When I'm logged onto an VPS over SSH and try to estabilish VPN connection on that VPS, the SSH connection between VPS and my machine get lost. I assume ...
4
votes
3answers
5k views

Yum install php-pecl-memcached - No package found (Have epel-release-6-8.noarch.rpm)

I believed I've downloaded and updated the EPEL rpm but I can't install php-pecl-memcached.. I'm very new to this, any help is appreciated. #rpm -Uvh epel-release-6-8.noarch.rpm warning: epel-release-...
4
votes
3answers
4k views

ssh_exchange_identification: Connection closed by remote host

I failed in ssh connection to a server. Here is the output of connection $ ssh -v [server] OpenSSH_5.1p1 Debian-3ubuntu1, OpenSSL 0.9.8g 19 Oct 2007 debug1: Reading configuration data /home/tim/.ssh/...
3
votes
1answer
201 views

Limited SSH access for log retrieval

I want to have limited access to a Linux server to be able to grab a certain set of logs. Ideally, I would like to be able to run rsync locally to grab the logs from the server and for security ...
3
votes
2answers
224 views

ipTables: How to improve the current set-up?

It took a lot of time and digging to get my ipTables working fairly well. Current status: 'Works' w/ a noticeable, reproducible (almost unacceptable) delay on SSH connections. This delay goes away as ...
3
votes
2answers
2k views

rsync with script supplied password

I need to have a script periodically rsync files from a remote host via ssh. The account which the script runs under does not have home directory on the remote host, so I'm not able to store my ...
3
votes
3answers
2k views

Changing Timezone, Centos Apache server

I'm trying to change my server's timezone. I was following this tutorial but I can't get it to change to Pacific Standard Time. ln -sf /usr/share/zoneinfo/EST localtime Will work, but ln -sf /...
2
votes
2answers
347 views

Proxy SSH to hide endpoints [duplicate]

Has anyone done SSH proxying that is transparent to the user, but the end host they are routed to is determined by any of the following: username, identity key, DNS hostname. I guess DNS hostname ...
2
votes
5answers
3k views

How to log commands/logins in linux?

I'm feeling that some people are using the root, how i can log all commands and connections times including ips made to the server (ssh) from all users? history command is not enough
1
vote
1answer
597 views

Cannot connect to ec2 instance

I've created a new ec2 instance based on the php cloudformatino image ami-6fc2f61b and attached my existing key to it. Security group allows ssh and http. Yet, I'm unable to connect: $ ssh -v -i /...
1
vote
1answer
257 views

SSH directly “through” another server [duplicate]

Possible Duplicate: How to configure a shortcut for an SSH connection through a SSH tunnel Multiple networks I can connect to have the following set up. There is a single node that can be ...
1
vote
2answers
1k views

Why does my SSH passphrase work with `plink` and not `ssh`?

I've configured my router to accept a public key SSH session with a passphrase. They key pair was generated using the PuTTY tools on windows. I can open the session from both Windows and Linux ...
1
vote
5answers
2k views

ssh access without password

I know that it is possible to ssh to another server without a password if authentication keys are set on both the servers. But I will like to know if it is possible to allow users from any IP (known/...
0
votes
2answers
370 views

Can I overwrite a setting within sshd_config with a duplicate setting

I am implementing a basic deploy script and for sshd_config the only change that I need to make is PermitRootLogin yes to PermitRootLogin without-password. I have read through the docs and they make ...
0
votes
2answers
1k views

SSHD real-ip behind haproxy

I'm trying to setup an ssh over https connection using haproxy. I'm currently looking for a way for SSHD to get the source ip from haproxy, similar to reading X-Forwarded-For or X-Real-IP headers. ...
13
votes
3answers
810 views

SSH session never closes when executing “apt-get install”

Problem When running apt-get install in an non-interactive SSH session, the session never closes. Example: ssh user@target "sudo apt-get -y install my_package" The my_package does get installed ...
9
votes
12answers
21k views

ssh session idle timeout

The Solaris machine we do most of our development on has an annoying habit of timing out SSH sessions. Doesn't matter whether the client is my Ubuntu desktop, my Solaris desktop or my Windows desktop (...
4
votes
1answer
1k views

Intermittent ssh_exchange_identification: Connection closed by remote host

We encountered an issue where a series of git requests over ssh would sometimes fail with ssh_exchange_identification: Connection closed by remote host There are many examples on SE/SF of structural ...
4
votes
3answers
2k views

set up a chrooted SFTP login with OpenSSH

How might I create an SFTP login for an untrusted user in which he can only access the files in his own home directory and not run any commands? The online tutorial OpenSSH SFTP chroot() with ...
4
votes
1answer
7k views

sshd warning, “POSSIBLE BREAK-IN ATTEMPT!” for failed reverse DNS

Whenever I SSH somewhere I get something like this in the logs: sshd[16734]: reverse mapping checking getaddrinfo for 1.2.3.4.crummyisp.net [1.2.3.4] failed - POSSIBLE BREAK-IN ATTEMPT! And it ...
4
votes
1answer
243 views

Allow SSH only on one of a servers IP addresses

I have a server with several IP addresses that hosts sites on each IP address. I have one ip address that does not have a site associated with it. I want to allow SSH login only to the one IP address ...
4
votes
2answers
3k views

rsync via multiple ssh connections with a key

I need to do a rsync from a target server with a server in the middle and I have the same public key on both the target and middle server. I want to use that key so I don't have to do password ...
4
votes
1answer
671 views

Random SSH entries in Auth.log out of date order [duplicate]

Running an Ubuntu Trusty 14.04.1 LTS server at Rackspace but recently after running updates for bash, then with the reboots for the xen host vulnerability, I have the following weird issue. Some ...
3
votes
3answers
27k views

Gitlab not working with SSH Keys

I am having issues with Gitlab. I used the following guide to install and configure Gitlab https://github.com/gitlabhq/gitlab-recipes/blob/master/install/centos/README.md. The installation seemed to ...
3
votes
2answers
1k views

Getting hostname of the computer connected to the ssh session

As part of our deployment script for one of our apps I'm trying to log the date, time, and other relevant information for the deployment. The way we have it set up, developers use a generic "app" ...
3
votes
1answer
1k views

Increasing permissiveness/permissions for umask + openssh + chrooted SFTP server using internal-sftp

The suggestion found at these links works for me: How to setup ssh's umask for all type of connections http://ubuntuforums.org/showthread.php?t=1107974#5 Summary: Use PAM to inject the umask, ...
3
votes
5answers
6k views

Limiting Failed SSH Logins

I would like to limit failure retries on my Fedora machine to 5. I think I can accomplish it with PAM. But was unable to to do this. I have referred to this article to do this http://www.puschitz....
3
votes
1answer
2k views

10 second SSH delay prior to successful login [duplicate]

Possible Duplicate: ssh delay when connecting I have a Scientific Linux virtual guest running out of Virtualbox 4.0.4 on an Ubuntu 11.04 machine. When I SSH from the host to the guest, there'...
2
votes
2answers
19k views

SSH configuration, publickeys, Permission denied (publickey,password). error

My task: login from Mac OS Snow Leopard client to Ubuntu 10.10 server without password. Commands: client$ mkdir ~/.ssh client$ chmod 700 ~/.ssh client$ ssh-keygen -q -f ~/.ssh/id_rsa -t rsa Enter ...
2
votes
3answers
4k views

How to fix “Could not open a connection to your authentication agent.” error when trying to add ssh-key?

I'm using Ubuntu server 10.04. ssh-add /foo/cert.pem gave the following output: Could not open a connection to your authentication agent. These are my running processes: ps -aux | grep ssh ...
2
votes
3answers
3k views

Why is SSHD hanging at “Server accepts key”

I've been ssh'ing to this box without problem for a year using public-key authentication. No changes have been made to the client or server's ssh config. Now, ssh connections never complete or fail, ...
2
votes
2answers
64 views

Why aren't failed attempts using ssh keys only logged?

I am running on a RHEL 6 operating system. I can see failed login attempt (password failures) in my /var/log/secure file. However, I don't see attempts to ssh to the server when the key is not ...
1
vote
0answers
561 views

ssh reverse tunnel port forwarding connection fails

I am able to do a reverse port forwarding through the PUTTY GUI with settings similar to below. Once I apply this setting, I am able to run to the server box and run wget http://localhost:8080 <-- ...
1
vote
2answers
183 views

Adding new users

I have an FTP server that is running Fedora Core release 6 (Zod) the problem is I need to create new users and I have root access saved in WinSCP, so I can run useradd or adduser via the fake ...
1
vote
5answers
7k views

Can't login using ssh as root

I am trying to virtualize an old linux server, and the PtoV software requires a password login as root via ssh. However, the root login is being prevented with a "Permission Denied" error on the ...
1
vote
1answer
362 views

SSH locale wrong

I have a debian server with locales set to hu_HU.UTF-8, and if i log in trough console it works perfectly in hungarian. It also worked with ssh logins until i disabled PAM in the sshd config. Since ...