Tagged Questions

Secure Shell (SSH) is a protocol primarily for encrypted shell connections.

learn more… | top users | synonyms (2)

0
votes
0answers
31 views

CentOS 6.5 Bridged Networking Fails

I have a CentOS 6.5 Server that I wish to host VPS on, as well as installing SolusVM, to do this I need to bridge the network adapters for the Server and the VM's ( so the VM's can connect to the ...
0
votes
2answers
56 views

SSH tunnel (port forwarding) slow down a lot my mysql queries

I'm currently testing some configurations with vagrant (virtual box) to connect 2 servers (VM currently) together throw an SSH tunnel. The goal being to securely connect my web app to the database. ...
0
votes
1answer
30 views

Making a server “read only” except for me (what the inbound/outbound rules mean)

I have an ec2 instance. It will start a webserver, and my public ip is myip. I ssh into my machine. What should incoming and outgoing rules? Why? I want only my ip to be able to change things on the ...
0
votes
1answer
40 views

Cisco PIX Firewall Version 6.3(5)

I am unable to ssh to any servers. I've exhausted every possible thing except the corporate firewall. Its an old cisco pix firewall. [model] Cisco PIX 501 I'm trying to figure out 1) how to ...
0
votes
0answers
9 views

how to match ssh Host for resolved name

I have things like this in my .ssh/config: Host *.example.com ForwardX11 yes and this works fine with I invoke "ssh myfoo.example.com". I would like it if it worked as well when I invoke "ssh ...
-1
votes
1answer
31 views

How to auto login a .ssh server from a .ssh2 server?

I have a server A which ssh-keygen produce a .ssh2 direcotry and id_dsa_2048_a* files and a server B which ssh-keygen produce a .ssh directory and id_rsa* files and a server C like B How can auto ...
0
votes
2answers
49 views

server side cd on sftp client connect

Is there a way with sftp to have it configured server-side to run a cd command when a client connects? I have my users thrown in to chroot, the folder has to be root:root chowned and cannot be ...
0
votes
0answers
15 views

winsshd restrict windows admin from managing the server

I'm installing winsshd server on client computers, and i want to give them an administrator account. but i also want to make sure they don't mess with the winsshd server configuration, which can be ...
-7
votes
1answer
53 views

Is the ssh key name a part of the authentication? [closed]

The ssh public keys in authorized_hosts have three parts - a type, the key and a name. For example, an rsa key might look like: ssh-rsa ...
21
votes
2answers
649 views

Is it possible to have sshd accept passwords only on certain ports?

I know it's possible to have sshd listen on multiple ports by using multiple Port directives. Is it possible to independently adjust the settings per port, however? In particular, is it possible to ...
0
votes
1answer
26 views

SSH forwarding by username [duplicate]

I want to make available a pool of dev machines to a pool of developers, where each developer should only access its own dev machine. Dev machines are on a private network, behind a NAT, whereas ...
-1
votes
1answer
38 views

restrict access to ssh by hostname with iptables

I want to allow connecting via ssh only for a certain domain sub.example.com. How can I do this via iptables?
3
votes
0answers
67 views

Random SSH entries in Auth.log out of date order

Running an Ubuntu Trusty 14.04.1 LTS server at Rackspace but recently after running updates for bash, then with the reboots for the xen host vulnerability, I have the following weird issue. Some ...
0
votes
0answers
23 views

Remote server lost login information during puppet deploy

Let me discuss some background on how this situation came to be first. Skip the first paragraph if you're not interested in the details. I am in a committee in my study community that manages said ...
0
votes
0answers
37 views

SSH “operation timed out” on ec2 instance

I have performed the following steps: Clicked on existing instance > Actions > Launch more like this Kept all the settings the exact same aside from selecting a different instance type (same key ...
0
votes
2answers
39 views

ssh-keyscan stderr comment on success

I am running a shell script to add fingerprints to known_hosts. Code is like this: status=$(ssh-keyscan -T 5 $remotehost >> ~/.ssh/known_hosts 2>&1) if [[ $? != 0 ]]; then echo -n ...
0
votes
0answers
141 views

SSH server in a FreeNAS jail is not accessible from the local network

I Have a FreeNAS (not sure which version - the one that uses FreeBSD 9.2) setup with a jail that I use for running various tasks. The jail has SSH service enabled in rc.conf, and I can also see the ...
0
votes
1answer
41 views

Is there a way to check is a machine is accessible from its public ip?

My purpose is to find out if a machine (here known as C1) is accessible from its public ip. A few details: C1 private ip: 192.168.0.14 . C1 belongs to LAN 192.168.0.0-255 netmask 255.255.255.0 ...
0
votes
2answers
91 views

/etc/hosts.deny doesn't take effect everytime

First of all, my sshd has got libwrap.so in it, here is the checking result: root@FS9000:~# ldd sshd | grep libwrap libwrap.so.0 => /usr/lib/libwrap.so.0 (0x000000555e3fa000) When I configured ...
0
votes
1answer
56 views

SSH Failed password login - log password

today I checked the log of my sshd and I have discovered tons of lines like :Oct 12 Oct 12 12:31:34 my_user sshd[15324]: Failed password for invalid user admin from 104.194.25.135 port 2683 ssh2 ...
0
votes
4answers
53 views

Sending commands simultaneously to several Amazon EC2 instances

I'm using Windows to connect via SSH to my Amazon EC2 machines. Is there a tool like Cluster SSH for Windows? My goal is that I can connect via SSH to several EC2 machines and send each machine the ...
-2
votes
1answer
51 views

Download your files from your dedicated server to synology [closed]

I'm trying to write a program/script to download files from my dedicated server (CPanel) to my Local synology. Ideally, I would like to sync it, but for now I'd rather just download. I found this ...
-3
votes
1answer
27 views

Secure SSH access [duplicate]

I am making a website and I am using a droplet made in digital ocean as my dev server. (No stg or prd yet) The problem is that I am using Dynamic IP and if I blocked access on port 22 to my current ...
0
votes
1answer
94 views

SSHD on Cygwin: can't connect as “root” from a Linux box

I'm trying to connect a Linux (CentOS 6.5 x64) server and another server, a Windows Server 2008 R2 running Cygwin, and transfer files daily via SSHD from Linux to Windows, and I will use public keys ...
1
vote
5answers
174 views

Automate and create SSH keys for large number(Nearly 9000) of servers for almost 30 users

Is there a way to automate to create SSH keys for large number(Nearly 9000) of servers for almost 30 users
0
votes
1answer
34 views

Openvpn and ssh which port can be accessed

Scenario: point to point openvpn between two machines (this implies that computerA and computerB have both public ip) If I nmap computerA (nmap -PO 192.168.0.10) the output shows that there are 22 ...
0
votes
1answer
56 views

SVN Post Commit Issue (Calling Bash)

All, I would like to invoke a bash script (to do some rsync magic) towards the end of my post-commit hook. Here is what my post commit hook looks like: #!/bin/bash REPOS="$1" REV="$2" ...
0
votes
1answer
40 views

Sync Code Between EC2's [Rsync/SSH]

I have a variety of EC2 boxes inside an ELB, one of which is used for SVN exclusively. I currently have a script that gets called as part of the post-commit hook which is meant to sync files between ...
0
votes
2answers
49 views

While loop does not return control

The following shell script works only for first server and does not loop to the next. I tried 0< before the ssh command but it still does not return to the shell script once connected. #!/bin/sh ...
0
votes
1answer
76 views

Getting the passphrase to ssh-keygen

I have a new private key that I'm bringing to a docker container as part of a bash script. After copying the private key to /root/.ssh/id_rsa I wanted to regenerate the public with: ssh-keygen -yf ...
1
vote
3answers
82 views

rsync using keygen login in bash script

So I have set up a password-less ssh login for a server. I can run rsync from the command line, and it works beautifully, and doesn't ask me for a password: rsync -avz -e ssh myDir ...
-1
votes
1answer
47 views

How to pass the SSH_AUTH_SOCK through sudo (Permission denied (publickey).) [duplicate]

I have a Ubuntu server with the users: ubuntu and user I connect to each of the users using ssh -A (to pass my local machine keys to SSH). From any of the users I can connect to the SSH server of ...
1
vote
1answer
115 views

Amazon ec2 Ubuntu no ssh after update and reboot

I have Ubuntu 14.04 server (LAMP), running on Amazon ec2. On my client machine I run Putty with imported SSH key. Session is saved, so there is no changes always. I had no errors during connection and ...
0
votes
1answer
112 views

Setting up Sudo in CentOS-7

In CentOS 6.5, i would do the following to setup sudo for users - useradd -G wheel -c "John Smith" jsmith visudo uncomment this line - %wheel ALL=(ALL) ALL usermod -G wheel -a jsmith restart ...
2
votes
1answer
59 views

Gracefully logout all connected ssh users on reboot

When I reboot my Linux server (BusyBox Linux) all ongoing ssh client connections run into a stucked state until a timeout on client side occurs. There is no message sent to the ssh client to produce a ...
1
vote
1answer
61 views

Fabric used to work with ssh-keys, but not anymore

I have my ssh key set up correctly and I can ssh into the remote machine without password. However, my fabric deploy script which could authenticate automatically until a couple of hours ago, started ...
2
votes
3answers
72 views

Solaris 11 sshd brute force protection. DenyHosts equivalent for Solaris 11

I'm getting regular attempts to brute force ssh on a x86 solaris 11.1 server. On linux I use DenyHosts to block connections after a number of incorrect login attempts. Is there a similar package for ...
0
votes
2answers
50 views

ssh into virtual machine (or direct VM console access)

I am trying to launch multiple VMs and need to have a direct console access (whether through ssh etc.) So, far I can launch multiple VMs using virsh/KVM tools. How I do it is that I just have one ...
1
vote
2answers
27 views

Background indexing MongoDB on server

I have a collection on a server containing ~23 million documents. I need to index this collection and obviously this will take a long time. If I run this indexing operation with background: true ...
0
votes
0answers
26 views

Securely restrict access to a private Debian repository *without* giving shell access

Is there any way to securely give access to a Debian repository, without also giving shell access? I do not want passwords passed in clear text, so the ftp and http transports are not adequate. My ...
1
vote
1answer
55 views

How to allow non root user to access libvirt remotely on Centos 6 [closed]

Default configuration and documentation (sic!) requires root access to remote host. How to enable user access? Remote management with SSH
0
votes
1answer
17 views

How can I pass PrintLastLog option to one ssh run only (without changing the ssh_config)

I would like to disable the PrintLastLog option for only one run of the ssh command. I tried to pass it using the -o option: ssh -q -o PrintLastLog=no localhost but I get: command-line: line 0: ...
3
votes
1answer
170 views

How to remotely list a directory in the configured user's home directory

I notice that when doing one-liners via ssh into a Linux server, the value of ~ remains the value of the local user's home directory, not the remote user's home directory. Witness local user ...
0
votes
1answer
191 views

centos 6.5 ssh rsa key fails

Alright I have read many many articles and followed a few different tutorials and I can not get my RSA key to work on my centos servers. The servers are running centos 6.5 with FreePBX on them and I ...
0
votes
0answers
42 views

Don't allow password authentication via SSH

I'm working on a little project, and I found that a user can access my linux device using ssh if they have a valid username and password. It looks like such: import paramiko ssh = ...
0
votes
1answer
44 views

esxi 5.5.0 - what can make trusted keys file read-only?

I have an esxi host where I want to login via ssh. Unlike at the other esxi host I have, I can't edit /etc/ssh/keys-root/authorized_keys there: even though it has mode 644, it is not writable. I ...
1
vote
2answers
69 views

Closing the terminal with an open SSH session

I closed the terminal while still being logged in to a remote server during an SSH session (I didn't exit before closing the terminal). Could this damage the server? What consequences could there ...
3
votes
0answers
32 views

How to get OpenSSH to use OCSP for revocation

As the title says, is there any (free) library, patch, etc. that allows OpenSSH to be configured to check x.509 certificate revocation via OCSP (online certificate status protocol)? If so, can you ...
0
votes
1answer
61 views

How to properly remove an old ssh key [duplicate]

I have a script that dynamically creates Amazon EC2 instances and adds their ssh key to my ~/.ssh/known_hosts. However, whenever I need to refresh the instance by terminating and recreating it, I get ...
0
votes
0answers
45 views

Connectivity issues (slow response) to a remote VM via SSH

I am on a linux machine trying to Ssh into a remote Centos 6.4 server via VPN. The server often gets disconnected and response too is slow. I see the messages on the terminal once in a while: ...