Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.

learn more… | top users | synonyms (2)

3
votes
0answers
58 views

How to get OpenSSH to use OCSP for revocation

As the title says, is there any (free) library, patch, etc. that allows OpenSSH to be configured to check x.509 certificate revocation via OCSP (online certificate status protocol)? If so, can you ...
3
votes
0answers
1k views

SSH_ORIGINAL_COMMAND variable not getting set

I am working with two servers, both of which run FreeBSD 8.4-RELEASE-p1 and OpenSSH_6.1p1. Both servers' ssh_config files, located in /etc/ssh, are identical. Both servers are configured to allow ...
3
votes
0answers
572 views

OpenSSH server accepts public key then immediately closes the connection without any error message

I am trying to connect to an SSH server I was able to connect to in the past but using different OpenSSH client versions. Starting from a Cygwin OpenSSH_6.6.1, OpenSSL 1.0.1g 7 Apr 2014 client, going ...
2
votes
0answers
17 views

Use username + password to authentifikate to svn via ssh

I have a Debian server running SVN version 1.8. Now I want to give secure access to the users via ssh, but without creating all the users as users on the system. So here is basically a solution. But ...
2
votes
0answers
91 views

Using Windows NPS for Cisco router aaa authentication - is this safe?

I setup RADIUS authentication on a Cisco router and pointed it to a Windows NPS. Now I can ssh into the router my with AD account YAY. But now that I got it working I'm going over the settings to ...
2
votes
0answers
137 views

sshd accepting pub key authentication only for root

I have a peculiar problem with a headless linux box. It's a very high level "embedded" system supposed to handle NAS + mail + ftp + svn + a lot of other server stuff. I received it preinstalled and I ...
2
votes
0answers
392 views

rsync termiates after a while unexpectedly

I run a rsync command with nohup in ssh session, but after a while it returns this error: rsync error: received SIGINT, SIGTERM, or SIGHUP (code 20) at rsync.c(549) [generator=3.0.9] rsync error: ...
2
votes
0answers
70 views

Specifying multiple SSH signed certificates for one Identity file

I am looking to implement signed certificates for SSH authentication. I have followed the steps here and am now trying to figure out how I am going to implement it on my systems. As an example, we ...
2
votes
0answers
437 views

ssh to ILO on a DL380 gives key_verify failed for server_host_key

When I try to do connect to the ILO 4 of a DL380 I get the following error: ssh -vvv ilo@me2_ilo OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 debug1: Reading configuration data ...
2
votes
0answers
248 views

sshd running at 100%

I'm running an Ubuntu/WordPress server on Amazon EC2 which is experiencing problems every 24-48 hours: I get a CPU alarm from EC2, log into the server, and discover sshd is running at 99.9% CPU. This ...
2
votes
0answers
137 views

How do I obtain the ssh public key from my VSphere ESXi 5.1 host hypervisor residing in vcenter with puppet-enterprise cloudprovisioner

I am using the learn puppet 3.1 vm and trying to connect to a host hypervisor. I followed the instructions to create a .fog file under root which includes a yaml hash, and I read that the yaml hash ...
2
votes
0answers
466 views

Configure SSH while using UCARP for failover

I have SSH installed, and UCARP configured to fail over a virtual IP when one of the two boxes goes down. The problem that I'm having is when a VM is running, and the ucarp interface is active ...
2
votes
0answers
220 views

configure OpenSSH to prefer public key auth, fall back to empty password auth

I would like to configure OpenSSH 6.2p2 for a service account (we'll call it "serviceacct") with an empty password which does the following: First try public key authentication; if it succeeds then ...
2
votes
0answers
865 views

Gitlab - Cannot: create new project, list team members, add SSH keys or clone / push

I have just installed Gitlab on my Centos 6.4. At first glance everything seems to be working fine but for some reason, I have the following issues...: Add a new project : (Similar issues when ...
2
votes
0answers
141 views

Unable to force passphraseless ssh authentication while port forwarding

I'm completely at a loss as to what is preventing my local machine from authenticating the connection that is being forwarded from the remote server. I've read a ton of the posts on here regarding ...
2
votes
0answers
229 views

KVM on Ubuntu: Port forwarding to a guest VM

I installed kvm and set several guests on a server using vmbuilder. Here is the following configuration : server host1 (xxx.xxx.xxx.xxx) -> guest vm1 (192.168.0.3) ...
2
votes
0answers
353 views

Phing SSH connection to Amazon EC2 fails to authenticate

I'm trying to connect to Amazon EC2 with phing. This is my script. <ssh username="ec2-user" pubkeyfile="C:\Users\asd\Downloads\aws-nr1.public" ...
2
votes
0answers
327 views

linode cloud server, symfony and phar

Okay, So I've recently got a linode cloud server running Ubuntu 12.04. I got it configured with the default symfony2.0 installation, but I've got a project that runs on the Symfony2.1 installation.. ...
2
votes
0answers
528 views

SSH reverse tunnel for Windows RDP

Microsoft RDP seems to behave strangely when forwarded via ssh reverse (-R) tunnel. Some products can handle it without a problem (i.e. tunnelier) some fail (libssh2, putty). When connected, the ...
2
votes
0answers
502 views

SSH on Windows 7/Cygwin periodically fails to resolve hostname

Whenever I run ssh inside of cygwin on Windows 7 I get the error: ssh: Could not resolve hostname ... Non-recoverable failure in name resolution lost connection If I try the same command ...
2
votes
0answers
691 views

RTP Streaming with VLC and remote control

I'd like to set up a remotely controlled (through SSH) streaming server with VideoLAN VLC. I managed start the RTP stream through SSH with the command: cvlc v4l2:///dev/video0 --sout ...
2
votes
0answers
404 views

RDP or SSH connection trough Windows 2008 server VPN hang after a while

I have been experiencing a very strange issue with our VPN setup on Windows Server 2008. That server is running as a Xen Virtual Machine. We use it for two purposes, permit our mobile workers to ...
2
votes
0answers
1k views

SSH to an ubuntu machine using avahi

I have an ubuntu box that I connect to using avahi. Connecting to that box works fine for all services (I regularly use AFP, SSH and SMB on it) but I've noticed that whenever I connect to it from a ...
1
vote
0answers
12 views

Ubuntu 14.04 - rsync corrupting SSH configs/keys?

I have two Ubuntu 14.04 servers S1 (user root) and S2 (user dataman). S1 is responsible for handling file uploads and transferring backups to S2. On S1 I am using PubKey authentication to S2 for ...
1
vote
0answers
18 views

Two allowed paths in rsync command in authorized_keys

I have a question about rsync restriction in authorized_keys command. I need to copy files via rsync from one server to another without prompting password. There is no problem, but I need to specify ...
1
vote
0answers
19 views

Connecting to EC2 via SSH within Vagrant

I manage a service that has two major components to it: A single product server which runs on EC2 A number of staging environments which runs within Vagrant The staging environment connects to the ...
1
vote
0answers
59 views

CentOS 6.5 ssh ChrootDirectory not working

I have been trying to configure my CentOS 6.5 minimal 64 bit machine to allow SFTP users to connect and get jailed to specific folders. I can sftp in using the unix commmand: "sftp user@localhost" and ...
1
vote
0answers
37 views

Debian does not start any service at boot

I've got a VPS server running on Debian Wheezy and I monitor it with Zabbix. Yesterday, the server was unreachable, I could ping it but there was no ports open (using nmap). So I contacted the ...
1
vote
0answers
53 views

sshd croaks daily with “invalid open call: O_CREAT without mode”

One of my servers has daily issues. When I log in via SSH or SFTP, I get the error below. When restoring it via a remote console, I need to purge and reinstall openssh-server. This is not enough, I ...
1
vote
0answers
108 views

Access to equally defined VM in different VLANs

I have a working libvirt cluster and in order to perform some paralellization I have duplicated it. At the moment my scenario looks like this: two clusters whose VM definitions are exactly the same, ...
1
vote
0answers
43 views

Weird proxy behaviour

I recently installed a computer in a network that is behind a proxy, I configured a reverse ssh tunnel to connect to it, and tunneled the ssh connection with corkscrew to connect to a server, this ...
1
vote
0answers
29 views

Domain randomly becomes unresolved

Recently, I've been having some issues with a domain name. I set up my domain to point to my server, but every now and then, when attempting to ssh in, I get the error: ssh: Could not resolve ...
1
vote
0answers
48 views

Is rbash secure if user login and ssh passwords are disabled?

I've got a server that I want to use as an SSH gateway for remote and local port forwarding. I don't want arbitrary commands to be able to be executed on it, only my scripts. I keep reading about how ...
1
vote
0answers
77 views

SSH Negotiation Failing To some sites

I use SSH extensively to administer a number of systems. Everything was working perfectly until a short while ago when I discovered I could not SSH into some servers (but others work perfectly). I ...
1
vote
0answers
291 views

Login as domain user fails in Linux

Using pbis, joined a Linux (Ubuntu 14.04) node to the domain successfully. # /opt/pbis/bin/get-status LSA Server Status: Compiled daemon version: 8.2.1.2979 Packaged product version: 8.2.2979.68390 ...
1
vote
0answers
179 views

OpenVAS 7 failing to SSH into a test server

My local machine is hosting a Kali VM. I am trying to run local security tests using the VM's OpenVAS 7 on a server running Ubuntu 12.04.5. When I run SSH Authorization Test I get the following ...
1
vote
0answers
91 views

Nginx error on installing vestacp

I am trying to install vestacp on fresh dedicated server running ubuntu14.04 with nginx installed, however i have tried to remove this using... sudo apt-get remove nginx sudo apt-get purge nginx ...
1
vote
0answers
129 views

Managing Linux server from PowerShell using built-in credentials

I am the admin of a small Linux cluster running Ubuntu Server 14.04 and my workstation is Windows 10 Technical Preview (yes, a bold move to use it in production). There is an excellent free scriptable ...
1
vote
0answers
292 views

Unable to use rsnapshot to sync non-owned files but able to do it with plain rsync command

I am trying to use rsnapshot to sync remote file to my own computer. However, I have some trouble when I need to access files which are not owned by user who is SSH-ing to the remote machine. My ...
1
vote
0answers
147 views

GSSAPITrustDns option missing from OpenSSH-6.7

I need to use the GSSAPITrustDns option to connect to a round robin service using Kerberos authentication. This works correctly using OpenSSH 5.3 and 6.6.1p1 on a selection of machines. I have an Arch ...
1
vote
0answers
34 views

Centralize way to prevent interactive logins

I have an Ubuntu server that is used for two primary purposes for my students: To hold on to files that students need to temporarily upload for my assessment (ie: I give them an input image, and ...
1
vote
0answers
514 views

Zabbix 2.2 SSH/FTP performance monitoring

I have a few systems I need to monitor which are out of my control. Ideally I needed a simple ping RTT test to see the status of the link. These systems do not respond to my ping requests so I need to ...
1
vote
0answers
53 views

Automatically add rules to iptables when an user logs in or logs out with ssh?

I'm looking for a solution to automatically add couple of rules to iptables when an user logs in and remove those rules when it logs out. I'd like to get somehow get the ip address of the user from ...
1
vote
0answers
289 views

SSH without invoking shell

I've managed to mess up some shared libraries on my system, and now my shell cannot be run, thus locking me out of the system. Both ssh, sftp, and scp, as configured on the remote system, seem to rely ...
1
vote
0answers
741 views

Match Group restriction in sshd_config does not work

I have got two groups in sshd_config: AllowGroups sftpusers sshusers And I have two groups below subsystem sftp /usr/lib/openssh/sftp-server: Match Group sftpusers,!sshusers ...
1
vote
0answers
118 views

Allow a user to access a single Git repository

Consider a server that hosts several Git repositories: $ ls -l /opt/git/ drwxrwxr-x 7 ubuntu root 4096 Jan 2 2014 george.git drwxrwxr-x 7 ubuntu root 4096 Dec 29 2013 john.git drwxrwsr-x 7 ...
1
vote
0answers
152 views

Investigate strange message from syslog@stock

I've noticed that when I'm logged into my server I sometimes get spammed a message from syslog@stock. On this server I am running a website built with Laravel and a Teamspeak 3 server running with ...
1
vote
0answers
428 views

Multiple Reverse SSH Tunnels using Single Port

I am able to accept reverse SSH connections from multiple remote systems on a single server using a port for each connection: Remote A: ssh -fN -R5000:localhost:22 user@server-ip -p22 Remote B: ssh ...
1
vote
0answers
503 views

How do I install a bitnami LAMP module by SSH command line?

This is a pretty straightforward question that I cannot seem to find an answer for. I already have a running Bitnami LAMP stack on an Amazon EC2 instance. Where do put the installer ...
1
vote
0answers
311 views

Elastic beanstalk access private git repo

I am trying to currently add an ssh key to my elastic beanstalk instances using .ebextensions commands. The keys I have stored are in my application code and I try to copy them to the root .ssh ...