Questions tagged [ssh]
Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.
8,970
questions
0
votes
2
answers
224
views
ssh connection to Debian machine hangs when updating firewall rules
I am running a script which updates firewall rules on a Debian machine via SSH as well as other actions. However, after the script runs, my connection just hangs. I am able to close the terminal and ...
- 351
2
votes
1
answer
7k
views
How to access FTP or SFTP in Webmin?
I have a linux server running webmin that I cannot connect to with FTP/SFTP.
Usually I can connect to any server, eventually. But not this one.
I can login and create any kind of user, do anything. ...
- 21
4
votes
2
answers
3k
views
SSH authentication between my VPS and Bitbucket fail
I'm trying to setup SSH authentication between my VPS and Bitbucket for configure later automatic deployment via Capistrano (for web projects) and Capifony (for Symfony2 projects) so I follow this ...
- 720
1
vote
4
answers
176
views
Is it risky to disable SSH passwords? [closed]
This is a very basic question, do bear with me.. I'm setting up a VPS and it seems as though disabling SSH users from logging in with a password is recommended for security.
If I authorize the SSH ...
- 171
3
votes
1
answer
758
views
Grant temporary access to Ubuntu 14.04 EC2 machines
My company intends to hire an external contractor for some dev-ops jobs on our EC2 servers. We use Ubuntu accessed using a .pem certificate file.
For obvious reasons, I do not want to share my .pem ...
- 13.6k
-1
votes
1
answer
5k
views
Can't access EC2 Instance through SSH After iptable Flush
Before i was able to connect to my EC2 instance, then after i flush the IPTABLE, i can't access it anymore, every time i try to connect, it get TIME OUT.
Error i receive:
FAIL: TIMEOUT
[SSH] FAIL: ...
- 1
36
votes
5
answers
88k
views
SSH remote port forwarding failed
Follow-Up: It looks like the rapid series of disconnects coinciding with a few months of running each server is probably coincidental and just served to reveal the actual problem. The reason it failed ...
- 757
1
vote
1
answer
4k
views
Pam is unable to make users home directory
I have an ubuntu 12.04 LTS server that is tied to Active Directory. This is a git server running gitlab. Rather than using gitolite it uses the gitlab shell
In the logs I notice that every time the '...
- 1,745
0
votes
1
answer
8k
views
SSH problems - server unexpectedly closed network connection
Since yesterday I have problems connecting to my server using SSH/SFTP. I can only connect after a restart of my server. When I try to make a connection after a couple of minutes, I can no longer make ...
- 101
5
votes
2
answers
4k
views
Public-Key -or- Password & Google Authenticator for SSH Login
I found an article (http://www.howtogeek.com/121650/how-to-secure-ssh-with-google-authenticators-two-factor-authentication/) that explains how to configure OpenSSH to ask for a Google Authenticator ...
- 165
27
votes
5
answers
90k
views
How to stop/prevent SSH bruteforce [closed]
I'm very new to network administration, so please regard that I'm not that experienced yet.
I have a Ubuntu root server with plesk panel.
Yesterday my friends and I noticed that the quality of ...
user219534
1
vote
1
answer
1k
views
Upgrading openssh-server on XenServer 6.2
I have XenServer 6.2 which only has version:
OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008
I tried to upgrade it using:
yum -y reinstall opnssh-server
or
yum -y install opnssh-server
But ...
0
votes
1
answer
86
views
No output from remote Debian server
When I login to my Debian server over SSH, it "freezes": in interactive mode, I don't get the prompt, if I say ssh server 'ls', nothing happens. I can, hovewer, use Bash built-ins, for example ssh ...
- 387
6
votes
1
answer
2k
views
Different "RequiredAuthentications2" for sshd and sftp subsystem
we're currently using a 2factor authentication on our SSH servers, so we have "RequiredAuthentications2 publickey,keyboard-interactive" in our sshd_config (publickey for the key, keyboard-interactive ...
- 61
2
votes
1
answer
10k
views
freeSSHd SCP Linux to Windows Fails with "exec request failed on channel 0"
Windows has freeSSHd installed. Logging in with ssh from Ubuntu 14.04 LTS via SSH using Windows Login credentials works fine. Logging in with SFTP also works fine.
This test is being run from a ...
- 173
3
votes
2
answers
15k
views
Tunneling SFTP to another computer
Run OpenSuse 13.1 and I have access to a server via SFTP:
Question: Can a friend tunnel from another computer to mine so that he can use my SFTP client on my machine? Is this possible?
In other ...
- 159
0
votes
1
answer
450
views
No remote access to VPS container based on OpenVZ
Is there any chance to start ssh server when sysinit is turned to DEFAULT_RUNLEVEL=1?
I have no remote access at the moment to my VPS server (based on OpenVZ container), but I can edit files and ...
- 11
0
votes
1
answer
850
views
How do I grant privilege for a user to SSH into a Solaris machine?
I'm not sure how to do this. Documentation is not clear at all. I can get root privilege/be root so that's not a problem, I just don't know what to do.
I'm thinking it's either modifying the ...
- 101
88
votes
5
answers
97k
views
What is the benefit of not allocating a terminal in ssh?
Every once in a while I will do something like
ssh user@host sudo thing
and I am reminded that ssh doesn't allocate a pseudo-tty by default. Why doesn't it? What benefits would I be losing if I ...
- 2,083
2
votes
1
answer
5k
views
Autossh ask for password when running with sudo (or from upstart)
I have an upstart job /etc/init/tunnel.conf:
description "SSH Tunnel"
start on (net-device-up IFACE=eth0)
stop on runlevel[016]
respawn
exec autossh -nNT -o ServerAliveInterval=15 -R 12345:...
- 123
0
votes
1
answer
2k
views
change user after ssh and execute multiple commands
I have a simple shell script to login as a normal user, and this normal user has a shell ready to switch into a user that has sudo privileges. However, I can't get it to work:
sshpass -p PASS ssh -t -...
3
votes
2
answers
4k
views
Execute command over SSH while logging live output
I'm trying to log the output of a remote ssh command.
I'm current using
ssh USER@IP | tee -a ~/random.log
and then run the command I need to run on the remote server which then logs to random.log.
...
- 33
0
votes
1
answer
78
views
What is the best way to create remote tunnel?
I have 3 Linux servers:
- 10.0.0.0/24 - (10.0.0.10) Linux server inside my LAN.
- 20.0.0.0/24 - (20.0.0.10) Linux server with HTTP Apache server
- 50.50.50.50/32 - Server on Amazon AWS which see both ...
- 183
5
votes
2
answers
8k
views
ssh-agent needs to start each time on my server
I have used this bitbucket tutorial for providing ssh access to the git repo:
https://confluence.atlassian.com/pages/viewpage.action?pageId=270827678
But now each time I want to use the git it says I ...
- 165
0
votes
0
answers
171
views
SSH chroot solution for Mutt
We have an environment tailored for our users to log in via ssh and instead of gaining access directly to a shell, users have a script in place of a shell. The script simply launches Mutt on the user'...
- 11
2
votes
0
answers
796
views
Trusty Tahr 14.04 update disables SSH
Ive recently been updating some servers on AWS from Ubuntu 12.04 LTS to 14.04.
For some updates the SSH Daemon does not appear to start correctly after the final reboot. Although all other service ...
- 61
0
votes
1
answer
1k
views
After reboot, direct SSH & HTTP time out, can only SSH from another server
Everything was working fine with server2 until I had to reboot.
Since reboot, I cannot SSH into the machine directly, and, http is not working...MOST of the time.
Every once in a while, randomly, I ...
- 191
1
vote
1
answer
858
views
Log onto Windows AD Domain via SSH using private key
I would like to log into a windows domain from a linux box using a private key in place of username/password. I am using FreeSSH on the windows box and have no problems using keys for local accounts. ...
- 173
1
vote
1
answer
2k
views
SSH dont pick up changes in config file (Ubuntu 14.04)
I made a simple change to the SSHd config, but it never get picked up by the SSH Daemon.
/etc/init.d/ssh restart
no error is reported, any idea what it may be, or where i can look?
- 191
2
votes
4
answers
1k
views
Can't set SSH port to something other than 22
When I try to set my SSH port to something other than 22 (editing /etc/sysconfig/iptables and /etc/ssh/sshd_config) I end up locked out of my server and having to boot into rescue mode to rectify the ...
- 1,138
0
votes
2
answers
813
views
SSH config (~/.ssh/config) - advanced configuration
UPDATE: Just to confirm more about my setup in case it wasn't clear:
No private keys are ever shared anywhere.
(1) Human programmers using Mac each have one SSH key (in ~/.ssh/id_rsa) that they use ...
- 167
6
votes
2
answers
15k
views
OpenSSH and PAM authentication using a public key
I'm looking for a way to authenticate users using a public key which is stored in a db (MongoDB). Similar questions usually resulted with a suggestion to installed a patched version of OpenSSH (https:/...
- 307
0
votes
1
answer
347
views
Best method for SVN over reverse SSH
What's the best way to do a svn commit over reverse ssh?
Typically when using svn we access it over svn+ssh, but I have an instance where the box making the modifications can't ssh into the svn ...
- 141
8
votes
3
answers
20k
views
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
I have two servers A and B. A and B can ssh into each other and other servers but cannot ssh into server C. All servers can ssh into A and B (including server C)
The request hangs up at the following:
...
- 81
0
votes
1
answer
942
views
Ssh host key verification
I have a Server behind a Port-forwarding Firewall.
Server <---> Firewall <------> NAT Port 222
|
-----------> VPN
I can ssh per key into it from the ...
- 857
3
votes
1
answer
4k
views
openssh sftp chroot: two levels of access
I would like to achieve the following with OpenSSH's internal-sftp, chroot and Match directive:
Users belonging to group sftpuser should have read and write access to /srv/sftp/{username} (or similar,...
- 346
16
votes
1
answer
19k
views
rsync: getcwd(): No such file or directory (2)
I want to sync Server1 and Server2's logs to LogServer.
For Server1:
rsync -avz -e 'ssh -p 2188' user@server1:/usr/local/servers/logs/* /usr/local/logs/
This one works, but for Server2:
rsync -avz ...
- 1,695
3
votes
3
answers
19k
views
gitlab ssh access connection refused
I'm trying to access gitlab with my account in SSH with public key authentication. I have uploaded my public key and here is my SSH configuration:
content of /home/$my_user/.ssh/config
Host gitlab
...
- 2,403
0
votes
1
answer
10k
views
SSH "Server refused our key" for all users except root user [closed]
I followed this tutorial and key authentication worked great for root.
but when I created user xxx
and added different key in authorized_keys and tried to login using putty where error was shown " ...
- 157
-2
votes
1
answer
4k
views
Can't ssh to CNAME'd hostname
Why can't I ssh using the hostname specified in my CNAME record? I can ssh in just fine when I use the hostname it points to. It's been more than 72 hours.
I've got a domain "mydomain.com", and it ...
- 241
0
votes
1
answer
986
views
SSH not working when called by automated script
SUMMARY: My script which includes ssh runs fine from the command line but the ssh part does not work when the script is called by an an automated daemon (apcupsd).
DETAIL: I've got an ESXi server and ...
- 71
13
votes
3
answers
6k
views
What is the current need for ssh dsa host keys?
When I started dealing with *nix servers, openssh servers came with dsa as well as rsa host keys, with openssh clients preferring the rsa key. These days openssh servers have dsa, rsa as well as ecdsa ...
- 6,986
0
votes
1
answer
1k
views
SSHD to retrieve forwarded client IP
This is my use case:
I have a bunch of hosts behind load-balancers and clients SSH through the load-balancer. The LB internally creates a new connection so the connection with the end-host has the LB`...
- 187
3
votes
6
answers
26k
views
ssh and Offending key for IP in /root/.ssh/known_hosts
Why or why am I getting this error on server A trying to connect to server B?????
ssh [email protected]
Warning: the ECDSA host key for 'zk.111.sf.development.cloudera.fu.com'...
- 336
-2
votes
1
answer
406
views
SSH config PasswordAuthentication is not taking effect
I have configured ssh on Debian 7 x64 server with public key in ~/.ssh/authorized_keys
My goal is to disable password authorization via ssh and leave only RSA authorization.
Right now both ways are ...
- 99
0
votes
0
answers
149
views
Strange port-by-port connection on SSH git user
I'm facing very strange logs in my /var/log/auth.log. Every single second I can read one or more lines like this:
Accepted publickey for git from MY_OWN_IP port 51885 ssh2: RSA db:fc:1c:e2:7f:dc:b1:...
- 121
0
votes
1
answer
1k
views
Temporarily disable SSH for all users except one and print a banner
I am planing to upgrade a server that have some SSH and rsync(over ssh) users. During this time that I am upgrading the server I don't want anyone else to login to the server.
Is there a way for me ...
- 143
0
votes
0
answers
81
views
SSH log file contains only binary data?
I'm practicing with some web application vulnerabilities in my test environemnt, and one of the things I am trying to use the SSH log file with a LFI vulnerability. However, I'm noticing that even ...
0
votes
2
answers
399
views
CentOS Linux: One server inaccessible via SSH, while others are
There is a server that cannot be connected to via SSH (port 22). Please consider these three servers all running CentOS 5.x:
Specifications
server1 - SELinux enforcing
server2 - SELinux permissive
...
- 55
1
vote
1
answer
2k
views
Is it possible to create ssh socks server with authentication required?
I was looking at this question while I was trying to find a good socks server for linux that would be easy to configure.
The following command works fine:
ssh -f -N -D 0.0.0.0:1080 localhost
I was ...
- 1,540