Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.

learn more… | top users | synonyms (2)

0
votes
0answers
54 views

Why would a server's RSA fingerprint change every few seconds?

In the past I've been able to connect to my server via SFTP with no problems, but suddenly yesterday it warned me that the fingerprint for the RSA key sent by the remote host had changed. I've ...
-3
votes
1answer
64 views

Connecting AWS from Windows. Error: Using username “ec2-user”. Server refused our key

I am connecting AWS EC2 using Putty from Windows 8, I followed all steps mentioned on this page of conversion of .pem to .ppk and have loaded .ppk in Putty. Putty Configurations: Host Address: ...
1
vote
2answers
106 views

Can't complete SSH connection after successfully exchanging keys to Ubuntu from some networks

After flying from one country to another, I now can't ssh to several of my Digital Ocean Ubuntu servers. However, I can still log in via console and ssh from one box to another (they are all in the ...
2
votes
1answer
62 views

Can I SSH into a Raspberry Pi over the internet and edit files? [closed]

I have a Raspberry Pi 2 set up as a web server running apache. I have SSH setup so that I can connect to it on the LAN. I'd like to connect to the Pi remotely so that I can either directly edit the ...
0
votes
0answers
107 views

AWS SSH Session getting closed by Server intermittently

I have connected to the AWS EC2 Ubuntu instance using putty on Windows 7(ppk authentication). Most of the time I'm getting this message on putty: Network error: Software caused connection abort. But ...
2
votes
0answers
80 views

LDAP Not working for SSH connections on ubuntu 12.04

Connecting from the client to the server: $ ssh -vvv user@10.0.50.170 OpenSSH_6.2p2, OSSLShim 0.9.8r 8 Dec 2011 debug1: Reading configuration data /etc/ssh_config debug1: /etc/ssh_config line 20: ...
0
votes
1answer
62 views

SSH - ChrootDirectory not working

I am trying to chroot a "test" user (group sftp) to /home/test. I've added the following lines at the end of my sshd_config: Subsystem sftp internal-sftp Match User test ChrootDirectory ...
2
votes
2answers
92 views

Can't SSH, but can TeamViewer [closed]

I would like to SSH into a computer behind a firewall that blocks SSH connections (incoming and outgoing). Amusingly, I can still access the computer using the remote-desktop software TeamViewer. I ...
0
votes
1answer
42 views

SSH login hangs for several minutes

SSH login will hang on Entering interactive session for several minutes. debug3: muxserver_listen: mux listener channel 0 fd 4 debug1: channel 1: new [client-session] debug3: ssh_session2_open: ...
0
votes
1answer
107 views

Is it possible to access Kibana (Elasticsearch) via ssh tunnel?

I am trying to acces kibana from a remote machine through an SSH tunnel: $ ssh -f user@elastichost -L 5601:elastichost:5601 -N My remote browser just timesout waiting for a response. Is there a ...
3
votes
1answer
189 views

AuthorizedKeysFile line commented out but still seems to work

I'm setting up a server on Linode and following their Securing Your Server guide. They recommend setting up ssh key pair authentication. I have already uploaded my public key to server and the key ...
6
votes
2answers
555 views

Using ssh key pair authentication and disabling ssh password authentication - what happens if private key lost?

I'm configuring my first server on Linode and going through their set up tutorials. In their Securing Your Server tutorial, it recommends using ssh key pair authentication and disabling password ...
2
votes
2answers
324 views

Check the fingerprint for the ECDSA key sent by the remote host [closed]

I have got the well-known warning message when trying to ssh into a server: $ ssh whateverhost @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION HAS ...
-1
votes
1answer
74 views

Does “ESTABLISHED” state in netstat command for the sshd program mean they actually have access?

I have this person(or bot) from an IP in Chile which has an "ESTABLISHED" connection to SSHD as root on my server. I'm trying to understand what netstat's outputs really mean, the manual doesn't ...
1
vote
1answer
51 views

ssh proxy using -W host:port [duplicate]

I'm trying to use intermediate machine to connect to a remote host but I'm doing something wrong and not sure what. I have added to my intermediate box /etc/ssh/sshd_config following lines: Match ...
2
votes
0answers
55 views

SFTP logging configuration fails with an error (OpenSSH 5.1)

Adding following line to sshd_config Subsystem sftp /usr/libexec/openssh/sftp-server -f LOCAL5 -l INFO When i start sshd service it fails with error "garbage at the end of line : -f" My openssh ...
-1
votes
1answer
103 views

Need help configuring Ansible for the first time [closed]

Summary: I'm trying to install Ansible on an Ubuntu 14.x server. I'm trying to follow these steps: http://docs.ansible.com/intro_installation.html I have a problem with this command when I issued it ...
-1
votes
1answer
38 views

What is the bind address used for when forwarding a port via SSH?

I have a brief understanding of port forwarding via SSH. So let's say I have a VNC server up and running at port 5901. I pick up my laptop, go to work, then I want to connect to my server, but I want ...
2
votes
1answer
37 views

SSH authentication based on existing OpenVPN tunnel

I have a single CentOS server, and several Windows clients that should connect to it, from remote. I've successfully setup OpenVPN (with Public Keys), with which the clients connect to the server; and ...
2
votes
2answers
184 views

OpenSSH two factor authentication combined with Kerberos / public key

I'm trying to implement two-factor authentication for OpenSSH. The environment is Centos 7 (kernel: 3.10.0-229.1.2.el7.x86_64) with OpenSSH_6.6.1p1, OpenSSL 1.0.1e-fips 11 Feb 2013. We have Active ...
2
votes
1answer
88 views

Selinux semanage delete or modify chain

I use on all my server port 24 for SSH. After change port i got error because Selinux block server SSHD restart 4 08:08:02 kvm452 sshd[18297]: error: Bind to port 24 on 0.0.0.0 failed: Permission ...
0
votes
1answer
65 views

Is there anyway to do ssh on a VM with a local IP address?

Scenario :I am using KVM as a hypervisor and Ubuntu as guest and host OS. There are many VMs on a PM and I am assigning IP addresses to those VMs using NAT. To create VMs I am using a baseimage. So ...
0
votes
1answer
67 views

Why SSH allows me to create multiple local tunnels on same port?

As you can see I get error message when I try to create another tunnel listening on local port that is already used but the tunnel is created. Can I force ssh to not create tunnel on given port when ...
1
vote
1answer
49 views

SSH connection slow over some networks [closed]

Can anyone tell me why sometimes when I connect by SSH to a linux server network (in my case), where the network connection from my remote location is of poor quality, why it is often unusable but it ...
3
votes
1answer
157 views

Why would a ssh connection fail to connect with whole proper setups?

Using Ubuntu Server 14.04 I got ssh server running on port 2222 (they asked it like that at building). I already got whole setups reviewed and nothing seems to be ok. This is what's set up: At ...
0
votes
0answers
186 views

(KVM) virt-manager stuck in password prompt after open VM

so i installed a fresh ubuntu server 14.04 with KVM, i'm connecting with my other ubuntu machine using virt-manager. so after i had permissions problem creating a new VM, i uncomment user="root" and ...
2
votes
1answer
66 views

Set Initial Remote Working Directory in SFTP

I am running Amazon Linux AMI (Red Hat derivative), and am creating a new SFTP server using OpenSSH. I would like for the SFTP user to be restricted to a directory, and to be able to write to the ...
0
votes
1answer
43 views

Automatically forwarding from Bastion to next server?

We at work use Bastion in our VPC to connect to several private servers, I have set up aliases (ssh host aliases) to speed up the process of bouncing to the next server, but this is a slow process and ...
0
votes
0answers
135 views

Mounting NFS server through SSH reverse tunnel

Here is my setup: Office computer in a network, with no way to access from outside, (OC) embedded computer in the field (FC) Server in the office, containing data to which the field computer needs ...
0
votes
0answers
32 views

SSH tunnel seems to be bound to multiple IPs

I am using a SSH tunnel to a remote machine using plink.exe in Putty on Windows 8. I am also running a web application using the same port. So to avoid any port conflicts I have bound the tunnel to ...
2
votes
1answer
54 views

SSHD applying different PAM rules for localhost connections

I am attempting to implement Yubikey auth via SSH. I've edited my /etc/pam.d/sshd file as follows, and it seems to work while connecting locally (ssh user@localhost): #%PAM-1.0 auth required ...
1
vote
0answers
36 views

VPN Connection Failed When Using SSH [closed]

I want to connect to my server in my office over VPN which has a SSH server installed. But when I connect to the VPN and then try to SSH to my server, the vpn connection closed suddenly. What is the ...
0
votes
0answers
33 views

Pulling Read restricted files from a remote system with rsync and sudo

A remote system generates statistics files every 5 minutes and places them in a certain directory. At any given time there are 1000+ files in that directory. Every 5 minutes I want to copy the ...
0
votes
1answer
118 views

Modify fail2ban failregex to match failed public key authentications via ssh

fail2ban doesn't recognize failed public key ssh logins and I assume that this can be solved by modifying the failregex of /etc/fail2ban/filter.d/sshd.config to match the following line: <date> ...
0
votes
0answers
98 views

failed ssh logins DOS: pam_systemd Failed to connect to system bus

After a couple of weeks of script kiddies attempting to login via SSH to my CentOS 7 box on EC2, it eventually stops responding on that port (and to http on port 80), and I have to reboot it. The ...
1
vote
2answers
130 views

/etc/init.d/ssh restart does not reload the configuration

I've added a chroot configuration to my /etc/ssh/sshd_config. I reload the configuration file using /etc/init.d/ssh reload, then try to connect using an SFTP client, but nothing changes, the user is ...
0
votes
1answer
77 views

Ubuntu SSH connections don't close

We have a connection to one of our servers from an external party. This party logs in using sftp and uploads some files. The sessions are not closed by that party and they don't know how to get that ...
0
votes
1answer
31 views

IPTables not working as expected for ssh control

I have the following rules, which for testing is all that I have: iptables -F iptables -A INPUT -p tcp --dport 22 -j DROP iptables -A OUTPUT -p tcp --sport 22 -j DROP iptables -A INPUT -i em1 ...
0
votes
1answer
1k views

OpenSSH in Windows Server 2012 R2 [closed]

I'm trying to create a complete FTP server on Win 2012 r2 using IIS FTP (for FTP and FTPS protocol) and OpenSSH for SFTP protocol. I'm searching for several documentations but I'm discovering ...
-1
votes
2answers
149 views

Chroot user to an existing folder witch parent owner isn´t root [closed]

We have moodle installed on our company and due to big SCORM packages + slow conection + proxy, I usually upload them with SFTP with my root user. Now, I want to give users a way to upload files by ...
0
votes
2answers
464 views

SQLSTATE[HY000] [1045] Access denied for user 'admin'@'localhost' (using password: YES) [closed]

I've changed the password for admin user of mysql in phpmyadmin and now I can't access neither my Plesk panel and neither mysql via ssh. The error it triggers is: SQLSTATE[HY000] [1045] Access denied ...
0
votes
1answer
93 views

SSH works only on the standard port

I can connect to my remote server only if I use the standard 22 port. When I change the Port (to 40004 for e.g.) in /etc/ssh/sshd_config I get an error: ssh: connect to host 123.45.67.890 port 40004: ...
1
vote
1answer
73 views

AWS Ubuntu 14 - Can't SSH After Reboot

Had an issue where an instance became unresponsive and was forced into a reboot. After the reboot I could ping the server but could not SSH into the server. Ultimately I created a new instance and ...
0
votes
0answers
29 views

connect server via ssh using ldap account anywhere

I'm new in using openldap I'm using centOS7 to be my openldap server my question is, can I login server via ssh using ldap account without any client settings? something like when I done setting ...
0
votes
0answers
75 views

SFTP chroot jail not working

Trying to follow this tutorial but for Arch Linux. /etc/ssh/sshd_config: # override default of no subsystems #Subsystem sftp /usr/lib/ssh/sftp-server Subsystem sftp internal-sftp ...
3
votes
2answers
105 views

Is it possible to ssh or rsync into a system whose file-system has remounted itself read-only?

I need to login to a system that went into a read-only state. I can ping it just fine but I can't ssh in anymore. Is there some special command line flag/parameter I can pass ssh that lets me login ...
1
vote
0answers
41 views

Ubuntu 14.04 - rsync corrupting SSH configs/keys?

I have two Ubuntu 14.04 servers S1 (user root) and S2 (user dataman). S1 is responsible for handling file uploads and transferring backups to S2. On S1 I am using PubKey authentication to S2 for ...
0
votes
0answers
74 views

Fabric: Using ssh_config settings on env.gateway

I have a relatively standard AWS setup, that looks like this: [ App server ] \ [ App server ] -- [ Dev gateway ] [ App server ] / Where the servers are only accessible over 22 from the gateway's ...
1
vote
1answer
102 views

fail2ban says banned, but can still log in

Running fail2ban 0.8.14 on CentOS 6.5 with Python 2.6.6, fail2ban puts my IP in the banned list, but doesn't actually prevent me from logging in. Here's an example of a failed ban in ...
1
vote
1answer
37 views

Using Unison / rsync over SSH to synchronize sites where full file system access is required yet root login is disabled

Assume two sites A and B with file server at either end. The contents of /storage should be synchronized between the sites, preserving ownership and permissions. There's no all encompassing group that ...