Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.

learn more… | top users | synonyms (2)

-2
votes
1answer
39 views

SSH — allow login with public key only / disable login with password [duplicate]

I am quite new to server administration and I am not doing it very often. Today I wanted to secure my server, especially the ssh server. Is it possible to configure ssh so that only users can login if ...
0
votes
1answer
90 views

I can't block port 22 to a specific IP (windows server 2008R2)

I'm using Bitvise SSH server and recently get a connection attempt every minute from one IP number. Bitvise terminates the connection immediately, but it's been going on every minute for days and I ...
1
vote
0answers
70 views

Debug slow lan (ssh, nfs) file transfer

I've got two linux boxes attached to a gigabit switch. They both have gigabit NICs, cables are cat7. Testing the network with iperf shows a fast connection but transferring files with rsync, scp, or ...
1
vote
2answers
46 views

Does known_hosts support comments?

I find the ~/.ssh/known_hosts file a bit hard to read. It'd help if I could add comments to it so I thought I should ask if that's possible.
-2
votes
1answer
37 views

Is it possible to “sudo su” using ssh in bash? [duplicate]

#!/bin/bash USERNAME=ksmith HOSTS="linux1" YUPDATE="sudo yum -y update" FIXDATE="sudo -u echo -e 'ZONE="America/New_York"\nUTC=true' > /etc/sysconfig/clock" for HOSTNAME in ${HOSTS} ; do ssh -tt ...
1
vote
1answer
171 views

hpn-ssh on Debian 8 (Jessie)

I'm refering this this project: https://www.psc.edu/index.php/hpn-ssh I'm running Debian 8, with OpenSSH_6.7p1 Debian-5+deb8u1, OpenSSL 1.0.1k 8 Jan 2015 and hpn-ssh doesn't have a patch for this ...
0
votes
2answers
64 views

Tunnelling through an IP alias

I have a server machine with a dedicated IP and several IP aliases. It has a single network interface and on it there are multiple IPs "attached". So let's say IP1 is the main ip but I also have IP2 ...
1
vote
2answers
190 views

How to use Ansible to manage remote lxc containers?

How can I use Ansible to execute tasks on lxc containers on a remote server? We use Ansible to deploy our code on several servers (physical and virtual machines). Until now, every instance had a ...
0
votes
0answers
32 views

kerberos authentication to linux from windows

We have mostly unix/linux server in our data center. We access them from our workstations running windows using putty. All the workstations are part of an AD domain but the servers are not. Kerberos ...
0
votes
1answer
33 views

What is right way to tmux with fabric django?

1.I am doing this on local machine tmux new -s amazon then I ssh in to the server into tmux window shh user@amazon then I detach it ctrl b-d Into fabfile.py I am doing like this local("tmux ...
0
votes
1answer
39 views

Can VPN authentication be used for SSH?

Can VPN authentication details be re-used for SSH access? Context: I'm looking into the feasability of having SSO to authenticate with a VPN and then be able to log into a server via SSH without ...
0
votes
0answers
77 views

Why is my private key accepted on SSH only after I login on the target machine?

I have an interesting situation which I'm not even sure where to begin to investigate from. I have a Ubuntu 12.04 server with SSH locked down to PK-auth. When I reboot my server, and try to SSH into ...
1
vote
0answers
44 views

How to copy ssh keys on a new VM

Hello guys (and girls) I'm having the following situation: -new CentOS6 VM (created within a Hyper-v failover cluster), joined Windows AD via script I need to bootstrap this new VM in chef server ...
0
votes
1answer
164 views

Ansible: Permission denied (publickey, password)

I'm not able to connect to a host in Ansible. This is the error: 192.168.1.12 | UNREACHABLE! => { "changed": false, "msg": "ERROR! SSH encountered an unknown error during the ...
3
votes
0answers
124 views

SSH - 1s hang at “Entering interactive session” (Not DNS; possibly SELinux related)

I'm having an issue on CentOS 6.7 where SSH logins are 1s more than any non-6.7 machines on this network (e.g. 7.2, 5.11). Running debugging on the client side showed the hang at "Entering interactive ...
2
votes
2answers
64 views

Setup an ssh account that can only be used for a socks5 proxy

I have an arch linux machine behind a firewall. I can open a port forwarding for the ssh port. I would like to create a user that can be used only for a socks proxy. ssh -N -D 5000 user@server -p9000 ...
0
votes
1answer
89 views

why fail2ban does not ban? (ubuntu, ssh)

I installed a fresh Ubuntu machine. Then I changed the ssh port which is no more 22 but 22111: Then I have installed fail2ban: apt-get install fail2ban -y cp /etc/fail2ban/jail.conf ...
-1
votes
3answers
47 views

How to revert SSH changes back to default after changing port from default?

Got myself into a sticky situation. I've got a bare metal server in a DC which is reasonably far in distance from me. In any case, a few day ago I changed the SSH port from default to 6298 and now I ...
1
vote
1answer
39 views

pam and google athenticator

I am getting these errors: e Jan 15 15:05:00 APPLES sshd[32305]: User root from not allowed because not listed in AllowUsers Jan 15 15:05:00 APPLES sshd[32305]: ...
3
votes
2answers
97 views

SSH authorized_keys command option: multiple commands?

The authorized_keys has a command="..." option that restricts a key to a single command. Is there a way to restrict a key to multiple commands? E.g. by having a regex there, or by editing some other ...
0
votes
1answer
63 views

how to run multiple commands (nested control statements) on remote machines with sudo?

My bash code is: 1 #!/bash/sh 2 set -e 3 USER="admin" 4 HOST="1.2.3.4" 5 PASSWORD="$(cat password.txt)" 6 7 sshpass -p"$PASSWORD" ssh -t $USER@$HOST "/usr/bin/sudo bash -c 'sudo ls ...
0
votes
1answer
58 views

SSH LocalForward Through Middle Machine

My setup looks like this: +--------+ +----------+ +-----------+ | Laptop | <---> | Middle | <--> | Server | +--------+ +----------+ +-----------+ And the ...
0
votes
2answers
48 views

How can I see IP addresses attempting to connect to my Amazon EC2?

I have an EC2 instance that is setup as an SFTP server using OpenSSH. It only allows connections on whitelisted IPs via TCP Port 22 (limited via an EC2 Security Group). I constantly have customers try ...
0
votes
1answer
146 views

Updating OpenSSH on Amazon Linux - Amazon repository out of date

I read today that there's a significant vulnerability in OpenSSH, which is fixed by the latest version, 7.1p2. According to this story your private key is vulnerable to disclosure. I'm using the ...
28
votes
5answers
3k views

Why run SSH on a different port

I am currently learning about installing Kippo SSH. From the tutorial, it said that I should reconfigure SSH port from 22 to a different port (which in this case 3389). So now whenever I try to SSH ...
0
votes
1answer
90 views

Gitlab omnibus fails to add ssh key

tldr: there is no /home/git directory where .ssh/authorized_keys should be. Is this the expected with Omnibus installs? System is Debian 8.2 I'm trying to set up ssh keys for my gitlab user. I can ...
-1
votes
2answers
184 views

Must I bind haproxy to port 22 to load balance ssh/sftp

I need to use haproxy to load-balance SFTP connections but currently i cannot bind it to port 22 (cutomer constraint). Can i bind to port xxx and listen on port 22 to achieve this or must I bind to ...
1
vote
1answer
36 views

How to change/disable SSH message on connect? [duplicate]

I have a Linux server with SSH service on it. If I performing a TCP connection to it (e.g. telnet %ip% %port%), it sends me a version line, like SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.3. It is not a ...
2
votes
0answers
15 views

Windows directories keeps getting unmounted on two identical Red Hat servers

Was refered here by the kind people at stack overflow. We have a pretty severe problem at my research center. I have, together with IT, set up an infrastructure like this: Users use their laptops at ...
0
votes
1answer
22 views

SSH Connection reset on IPv6

When attempting to SSH from an IPv6-enabled host to an IPv6-enabled host, I get: $ ssh remotehost.example.com ssh_exchange_identification: read: Connection reset by peer When I add the -4 option, ...
0
votes
0answers
29 views

ssh command without tty hangs

I'm trying to execute a simple ssh remote command from my local machine to an AWS instance, by running: ssh -i /my/key.pem ec2-user@<myhost> 'ls -l' When I do this, the command returns with ...
0
votes
0answers
27 views

Git for Windows somehow ignores ssh config

I am creating a remote git repository server, though, there appears to be problem with cloning from Windows (Git for Windows - MINGW) which I am trying to debug. I have created the user on the ...
3
votes
1answer
63 views

Best practice for storing password for ssh

I have an Ubuntu server that runs certain scripts and should ssh into windows server to execute data. I am developing using python and using paramiko for ssh. Currently, the windows login ssh ...
1
vote
1answer
17 views

How can I set -X (X11Forwarding) in my ~/.ssh/config file for a specific host?

So if I'm VPN'ing in from home, I want all of those connections to have -X specified. I already have the keys copied and an entry in ~/.config with the ip and userid so all I have to do is go: ssh wk ...
0
votes
1answer
13 views

Different shell for SSH login on specific machines

I have Active Directory users with no local accounts, so they cannot use chsh. They can login to multiple different types of server and most of the time /bin/bash is the correct shell, or at least for ...
0
votes
0answers
31 views

how to execute bash script with args in parallel on all the remote server if the remote server in the from of pair

Please read carefully problem first and then give solution................... we are having 3 files in directory myscript.sh (the myscript.sh file contain many function and starts/stop to ...
0
votes
0answers
310 views

SFTP Chroot Jail preventing SSH: This service allows sftp connections only

I set up a SFTP Chroot Jail succesfully, but would like to give my users access over SSH, in addition to SFTP. If I attempt to SSH in with the testuser, after providing the password, putty closes. ...
0
votes
0answers
27 views

memcached is not starting

I am trying to start Memcached through SSH. I know that it was installed correctly as it was working yesterday. I am doing "sudo service memcached status" I get " * memcached is not running" Then I ...
-3
votes
2answers
39 views

how parallel ssh execute bash scripts with mutiple positional parameter [closed]

Actually I want to execute my script in parallel on all the remote ssh host. so generally I am executing my script like.... <./myscript.sh arg1 arg2 arg3> and its executing but i want to same ...
0
votes
2answers
39 views

Access ssh of server with dell drac installed

I've got a new dell r610 with a DRAC 6 express installed. I've never colocated before nor have I owned a server so pre-apologies for the lack of knowledge. I'm trying to access my server via SSH on ...
3
votes
3answers
273 views

bashrc not loaded in /bin/bash shell

When I ssh into a server (4.3.3-2-ARCH), my .bashrc is not loaded (however, I can load it manually by sourcing it). I don't have any other files in my home folder, like .profile. The shell is also ...
0
votes
1answer
22 views

How to use PuttyGen.exe when moving key(s) from old machine to a new machine?

I've only generated the public/private key pair in PuttyGen.exe once. This was the first time I've ever used this tool. Rather than having the folks hosting the server that I'm connecting to, who ...
0
votes
1answer
120 views

systemd: Failed to make us a subreaper: Invalid argument. SSH

Since upgrading to Debian 8 (Jessie) which brought in systemd I'm getting the title of this post in my syslog errors. Remote ssh login begins 10:33:51 pap1 systemd[1]: Starting user-0.slice. ...
-1
votes
1answer
54 views

SSH connection refused, probably server firewall, how to solve? [duplicate]

I'm trying to connect to my server via SSH. I get the (well-known) error: ssh: connect to host 12.345.678.910 port 2222: Connection refused So I first thought the problem was with my modem, but ...
0
votes
0answers
30 views

Forced password change but then hangs forever

We have a Debian 7 server wich disallows SSH root login. Server administration is done by connecting with another account, say user "A", that allows afterwards to switch to root with "su" command. ...
1
vote
0answers
58 views

How to do I create linux VM with ssh public on azure automation

Right now, I am creating Linux VM without public key on azure automation. My aim is to create linux VM with ssh public key on azure automation. How to get ssh public key from "accets" on azure ...
0
votes
1answer
38 views

SSH hardening with chef test-kitchen. How to tell test-kitchen how to connect?

I wrote a chef cookbook and it runs fine with test-kitchen. Now I want to harden ssh access to the production nodes by writing a recipe that overwrites /etc/ssh/sshd_config. Among other things, it ...
0
votes
2answers
57 views

firewalld: if I change the ssh service port, is it enough to allow the new port number, or should I add a new service?

I changed the ssh port to an arbitrary number, and noticed firewalld no longer allowed ssh login. I assume the port 22 is hardcoded in the ssh service definition for firewalld. Is it enough if I ...
-3
votes
1answer
31 views

Not able to ssh into server after mounting users home on other ebs volume [closed]

I have a server which has a low storage problem. What i want is to mount the user ec2-user's home directory that is /home/ec2-user to another attached storage drive which is available at /dev/xvdk and ...
1
vote
1answer
22 views

vsftpd server allows different permissions than ssh

I setup a vsftpd server on Debian 8.2, and haven't changed anything in the config file except for local_root=/. When I try to upload a file using Filezilla to a directory I have group write ...