Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.

learn more… | top users | synonyms (2)

1
vote
1answer
55 views

Why won't my SSH keys forward properly?

I'm trying to ssh from my machine to another machine and from there to a third machine. When I do it manually, it works like this: localhost$ scp ~/.ssh/id_rsa myuser@myhost.something.something.com:. ...
7
votes
2answers
72 views

Same RSA key on multiple PCs

Can I use my RSA private key on multiple computers i.e. my desktop and laptop. Or do I have to create a unique key for each computer I own, and add their respective public keys to necessary servers/...
1
vote
1answer
60 views

How can I get Azure to use an SSH key when doing a node.js deploy via git?

I'm deploying a node.js app to Azure Web Services using git from my local machine via: git push azure master One of our npm packages is a private repo hosted on BitBucket. Without Azure having an SSH ...
0
votes
0answers
50 views

RDP over SSH for Windows 8/10 to use Jump Host

is anybody aware of a way to tunnel the Windows RDP client over SSH on Windows 8/10 to access the servers in the separate network? The scenario mostly is: SSH -> SSH gateway Jump Host -> Hosting ...
-1
votes
1answer
70 views

Grant SFTP permission and limit Ubuntu user to only one directory [duplicate]

I'm trying to let create a user with SFTP permissions to only one directory (that is not his home directory). When he connects through a SFTP client I want him to land on this directory and I don't ...
2
votes
3answers
119 views

Converting SSH command to a PuTTY command

I am trying to translate the SSH command: ssh -N -L 1521:server1.com:1521 username@server2.com into PuTTY. -N: Do not execute a remote command. This is useful for just forwarding ports (protocol ...
1
vote
1answer
108 views

SSH fails on CoreOS when substituting etcd cloud-config variables

I have a minimal cloud-config that works without problems on DigitalOcean. I added some hardening for SSH, which requires restarting sshd.socket to become effective: units: - name: sshd.socket ...
0
votes
0answers
56 views

ssh ForwardAgent, “Could not open a connection to your authentication agent.”

I have ForwardAgent yes for a few hosts. One of them started failing recently and I can't find the reason. when I ssh to all hosts and execute ssh-add -l i can see one key just fine. If i ssh to ...
1
vote
1answer
71 views

Iptables : forwarding SSH traffic according destination IP

I have 2 servers : One that receives connections from outside my LAN and another (inside the LAN) that I aim to access from outside via ssh. There are prerequisites : I can't access to my SSH services ...
3
votes
3answers
130 views

Is it possible to login onto a remote machine with a misconfigured sshd configuration file?

So basically I was stupid enough to write possibly incorrect options on my sshd configuration file. Instead of restarting the service and check whether the new configuration works, I rebooted the ...
0
votes
0answers
114 views

LDAP user authentication access denied

Currently, I am configuring LDAP client for user authentication on the server. Only SSH key authentication is allowed (Password authentication is not allowed). My SSH configurtion (/etc/ssh/...
0
votes
0answers
27 views

Copy .pub keys to Gitolite Server, university environment

I am a new Technical Officer for a South African university, and being a bit green, I'm not sure if this is the perfect place for this. Please let me know if it is not. The problem I have a Gitolite ...
1
vote
0answers
89 views

Warning: Remote host identification has changed (SSH)

Most likely someone did a server update last night, because when I try to do a rsync (from win 7) I get the message (short version): WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! It is possible ...
0
votes
0answers
62 views

SSH connection Timeout using CHEF

When I run the following code in PowerShell: chef-repo> knife bootstrap windows winrm 172.25.174.27 -x Admin -P 'Microsoft@1234567' -N 'target1' I get an error: ERROR: Net::SSH::...
0
votes
0answers
36 views

VMware: Cannot access VMware Using Client, but can with other methods

VMware Esxi 6.0 I am on the VMware Desktop Client The VM is of Windows Server 2008. I would log in using IP address 192.196.1.19. using root and password. Day 1-3 worked fine. Day 4 doesn't work. ...
1
vote
1answer
41 views

Attempting to setup ssh authentication on linux - Grants access all the time

I am currently attempting to secure one of my linux box. I would like the device to grant access to only those systems that have the ssh private keys. In order to accomplish that here is what I did (...
0
votes
0answers
101 views

LXC SSH too slow in CentOS7

I have a newly created centos7. I installed the LXC and create a configuration: lxc.network.type = veth lxc.network.link = lxcbr0 lxc.network.hwaddr = fe:84:8b:f1:76:8e lxc.network.flags = up lxc....
2
votes
0answers
40 views

AutoSSH occasionally running into: “channel 2: open failed: administratively prohibited: open failed” until tunnel is restarted

I'm running an autossh script using upstart for ssh tunneling / port forwarding to my postgresql database. It that looks like this: # Remote server role: database-master # Remote hostname: srv-08....
0
votes
1answer
116 views

Passing SSH flags to Icinga2 by_ssh plugin

I'm following this guide to use by_ssh on icinga2 instead of NRPE: https://wiki.icinga.org/display/howtos/Using+SSH+as+remote+client+for+Icinga2 The problem I have this that when executing a nagios ...
0
votes
1answer
42 views

Automatically increase OpenShift SSH timeout

When I SSH into my gear on OpenShift the default SSH timeout is 300 seconds, which I find too short. I can run either of the following commands in the terminal to fix this: export TMOUT=30000 unset ...
0
votes
0answers
37 views

Using LDAP attribute to get Home Directory for SFTP connection in RedHat 7.0.3

We need to outsource the authentification on a SFTP server to use an existing LDAP. the connection to this server will be done by (user/password) via LDAP, and the home directory of the user must be ...
1
vote
1answer
72 views

ssh and git pull from remote server

I'm trying to ssh from server 1 to server 2 and do a git pull from server 1 to server 2. So on server 1, I run the following command: ssh root@server2 'cd /root/.example; git pull origin master' ...
1
vote
1answer
56 views

PAM authentication - Write error: broken pipe

In order to allow the 2FA in my domain, I setup a LinOTP server to manage the map between tokens and users (from LDAP) in my realm. So, I configured the PAM stack to integrate this authentication ...
-1
votes
1answer
113 views

How is the AuthorizedKeysCommand used in SSH?

I want to use the AuthorizedKeysCommand as a test on my server. Steps: 1. Added the line AuthorizedKeysCommand /etc/ssh/myScript.sh to the end of the file. 2. Created a script myScript.sh in the /etc/...
0
votes
0answers
98 views

Windows: Run GUI Automation via SSH/Powershell

I have a Windows Server 2008 installed an on Amazon EC2 instance. After connecting to it through RDP, I installed Bitvise SSH Server and set up key auth with my local computer (OSX). My aim is to SSH ...
2
votes
1answer
40 views

Enforcing SSH key length - linux

How can I enforce SSH key length? Though anything above 2048-bits is fine (from various discussions I have read on this forum and others), how do I ensure that all users ssh-ing in to my servers have ...
0
votes
2answers
61 views

How to ssh to my Ubuntu from outside the local network?

Suppose that a Linux server A is in a local network with IP 192.168.0.90, and I have another Linux server B outside this local network, with IP 203.107.90.80. I want to get access to server A via ssh ...
0
votes
1answer
19 views

Nonsystem authentication for unprivileged sftpd

I am creating a test system that needs to be able to briefly act as a sftp server on a nonprivalaged port. The test system runs as a normal user. So I'm thinking as running sshd with the sftp ...
0
votes
1answer
96 views

SSH via DNS permission denied, but it works via IP (Debian 8.3)

I have a server behind a router, and I have forwarded port 22 (TCP/UDP). I can SSH to the IP (ssh user@xxx.xxx.xxx.xxx) but not to the DNS (ssh user@mysite.com). I'm getting: Permission denied (...
0
votes
0answers
92 views

How to consolidate snapshots in ssh command line for esxi 5.5?

Is there is a way to execute consolidation disks for snapshots in SSH console for Esxi 5.5 without to have to delete all snapshots and don't have to use vSphere client ?
1
vote
1answer
44 views

Local credentials used when radius server is available sshd pam_radius

I have pam_radius setup and it works (centos6, pam_radius: 1.4.0-2.el6), i can authenticate via the radius server using ssh. What i am trying to accomplish is that when the radius server is ...
0
votes
0answers
42 views

Ubuntu 14.04 SSH from Third Party, No Error Cause

I have two instances of Ubuntu 14.04 running. I am utilizing a third party service that accesses the instance(s) via ssh using its own generated key pair, of which it provides me the public key. I ...
0
votes
0answers
80 views

SSH login using Active Directory credentials

I am having trouble logging into a Linux system via SSH using my Active Directory credentials. the system is bound to AD, and all of the required packages are installed and configured, but I cannot ...
2
votes
1answer
44 views

Do any OpenSSH 6.7 `preauth` error log entries warrant specific human attention?

A Linux (specifically Debian Jessie) server that needs to be exposed to the Internet is spitting out various OpenSSH 6.7 preauth errors in the logs. For example, I'm getting (timestamps elided for ...
0
votes
0answers
29 views

SSH Server Connection over VPN

I connect my VPS over SSH terminal via ssh keys stored in my computer, password login is disabled. But sometimes I need to surf web behind VPN service which changes public IP for my home computer. ...
2
votes
2answers
395 views

Non standard ssh port: should I edit /etc/services?

On a *nix system, when configuring ssh to listen on non standard port, should I also edit /etc/services to reflect that. I would think it should be done, so tools that use it (such as ufw) will ...
1
vote
1answer
50 views

How to prevent sftp users from viewing some directories (inside their chroot directory)

The sftp users of my server are chrooted together in a specific directory. They all belong to the group sftponly. The rights are ok, including a special right to prevent users from overwriting others'...
0
votes
0answers
60 views

No longer able to connect by SSH

I'm using Google cloud with a couple of instances deployed. I was trying to resolve an issue with the MySQL database on the server and I couldn't get MySQL to start so I resorted to restarting the ...
2
votes
2answers
75 views

Command prompt taking too long to appear after ssh connection

I have a server that is acting really weird and hopefully you will help me find out what is happening. Here are the facts: The server has 2 users: root and myuser The server accepts only ssh ...
2
votes
1answer
102 views

HAProxy: Detect SSL connection contents and then decide to forward it or not

I would like to have a front end with HAProxy on port 443. This front end acts in the following way: It decrypts the contents of the connection and checks: 1- If the encrypted contents of the ...
0
votes
2answers
56 views

useradd --disabled-password can't ssh using authorized keys

I might've done this wrong. I created a user with : sudo adduser --disabled-password userX And I've added a public key to /home/userX/.ssh/authorized_keys. But when I ssh into the account I get the ...
0
votes
0answers
24 views

How to use VPN (openvpn) from ssh remote server?

I'd like to launch openvpn on my remote server connected via ssh, I mean, I want to make this kind of setup: local--<ssh>--remote--<vpn>--internet However, when I launch openvpn on the ...
0
votes
0answers
18 views

Adding mfa verification code to ssh command?

Im trying automate the login process using shell script. I got MFA + pub key authentication working. However Im stuck at how to pass verfication code as a parameter to ssh command. I tried go ...
-1
votes
1answer
46 views

Debian SSH disabled password logins but can still login [duplicate]

I have setup a debian install on a VPS and have successfully implemented key based logins to increase security. Now I am trying to disable password based logins entirely using the guide found at ...
1
vote
1answer
154 views

Why does this “netstat -tln” output show entries for “0.0.0.0:22” and “127.0.0.1:3306” [closed]

When I run the command netstat -tln I see the following output: Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 ...
0
votes
0answers
119 views

Did not receive identification string from <ip>

I'm deploying an application using the Net::SSH gem from Ruby, and periodically (I'd say every 1 in 3 attempts) I get this error: ...net-ssh-3.0.2/lib/net/ssh/transport/server_version.rb:53:... : ...
0
votes
1answer
52 views

remote SSH command works but not when used in bash script

I am trying to stop tomcat on a remote server using a bash script. Here is the function: function stop_remote_tomcat () { CURRENT_SERVER=$1 CURRENT_USER=$2 CURRENT_PEM_FILE=$3 ...
0
votes
3answers
41 views

Password recovery on CentOS with SSH keys

I can login to my sudo account on CentOS 5.11 VPS (through the ssh keys) , but I have to reset root password and sudo user passwords (any of these two). Is it possible and how?
1
vote
0answers
19 views

Garbled SSH packets, garbled HTML packets, but not in all situations

I am having a very strange problem with lost headers on packets when trying to contact a guest VM. I have bare metal running CentOS 7 and VirtualBox v.5.0.14. I then have a guest running Ubuntu 15.10 ...
-6
votes
2answers
48 views

Should I use SSL on SSH [closed]

I am trying to setup a web server in Linux (Debian). I have modified the IP tables to provide access only SSH and HTTP/S. Also SSH port has been changed to non-standard one. Apart from these steps, ...