Questions tagged [ssh]
Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.
8,974
questions
0
votes
0
answers
23
views
pam.d with MFA skips public-key authentication
i have a pam.d configuration with MFA authentication on a test server.
I noticed that the IP addresses that are in file access-without-MFA.conf mentioned,
can login without password and without ...
- 101
0
votes
1
answer
46
views
How to disable Network Interface for SSH?
In my linux machine, I have 10 network interfaces available like eth0, eth0.67, eth0.70, eth0.97 etc,.
When i run the command nc 160.48.249.170 22 to check, i get like below:
root@icon:~# nc 160.48....
- 103
-1
votes
1
answer
27
views
When doing SSH through an intermediary server what are the differences between Local Port-forwarding and Jump Host?
To SSH to Server-B through an intermediary (Server-A), what are the differences between the following two approaches and which one is better?
Local port-forwarding
ssh -L 2222:server-b:22 root@server-...
- 1
0
votes
0
answers
23
views
Network error:kex_exchange_identification: read: Software caused connection abort banner exchange (SSH)
I met this issue while trying to clone a repo in a gitlab private server, so I added verbosity and tried to connect to it first here is the output
$ ssh -i test -T -vvvv [email protected]
...
0
votes
2
answers
31
views
SSH to EC2 times out, but other instances in the same security group are reachable
Something really weird happened to one of my EC2 istances.
So I have a security group and a bunch of instances associated with that group. I can SSH into all of those intances.
I created a new ...
- 101
0
votes
0
answers
21
views
Avoiding Google Authenticator reauthentication for existing SSH sessions on EC2 [closed]
I configured Google Authenticator for 2FA on my Almalinux 9 EC2 instance to secure SSH access. However, I'm prompted for the Google Authenticator code every time I open a new SSH session, even when a ...
-1
votes
0
answers
14
views
How can I set up an access point but still be connected to the internet? [closed]
I need to use a laptop with Ubuntu 22.04 LTS as an access point, to connect an Ethernet-only device to the Internet, and to be able to ssh into it from the network.
The laptop does not have WiFi ...
0
votes
1
answer
36
views
Dynamic port forwarding using tsh ssh -D cripples nmap functionality
I am having some issues when trying to use a teleport node as a sort of proxy to scan resources inside networks behind that said proxy node.
My setup looks like this:
I have a node inside my Teleport ...
0
votes
1
answer
101
views
SSH login fails with "Permission denied" error after upgrading Debian from Bullseye to Bookworm
I am unable to SSH into my Debian server after upgrading from Bullseye to Bookworm. I have tried various troubleshooting steps, but the issue persists.
Error message:
Last login: Wed Apr 10 13:42:16 ...
- 101
0
votes
0
answers
28
views
I'm getting on gitbash a warning WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! for github [migrated]
When I try to clone a git repository in gitbash on Windows I get following error:
$ ssh -T [email protected]
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST ...
- 101
0
votes
0
answers
40
views
"client_loop: send disconnect: Broken pipe" error when trying to log as root with public key authentication
I want to log in as root user using publickey authentication to my OpenSSH server configured that way:
Include /etc/ssh/sshd_config.d/*.conf
KbdInteractiveAuthentication no
UsePAM yes
PermitRootLogin ...
- 83
-1
votes
0
answers
11
views
Unable to Access VM via SSH and Serial Console for Moodle Site
Description:
I am experiencing an issue where I cannot access my virtual machine (VM) named "ubycuos-moodle" via SSH or the Google Cloud Platform (GCP) Serial Console. This VM hosts a ...
0
votes
0
answers
15
views
How can I configure SSH on my laptop to use a Control Master on a remote gateway?
I have a server, let's call it server, which requires a 2FA authentication every time. So, I can set up ssh multiplexing to reduce the number of required authentication.
However, I usually carry my ...
- 101
0
votes
1
answer
88
views
SSHD: no matching host key type found. Their offer: [email protected]
In short, I have a pipeline in GitLab CI that runs on an alpine:latest image. In the pipeline I run to install ssh:
apk update && apk upgrade && apk add --update openssh
And then I ...
- 101
1
vote
0
answers
99
views
Is there a way to disable all internet access while having ssh open on a docker container
The end goal is very simple. Open up SSH port 22, but disable internet: I can ssh into the docker container, but I can't do anything that requires an internet connection (download packages, curls ...
- 11
0
votes
0
answers
43
views
SSH tunel on Linux
I am creating an SSH tunnel with this command:
ssh -L 0.0.0.0:9944:localhost:9922 localhost -N -p 8844
It works great, no problems. But, for some reason, when I execute this command above in my ...
- 316
0
votes
1
answer
51
views
FreeBSD user has no permission on .ssh directory
I have a problem on FreeBSD 14.0 - the ~/.ssh/ directory is owned by me, but I can not access it as myself:
$ ls -al .ssh
ls: .: Permission denied
ls: ..: Permission denied
ls: authorized_keys: ...
- 173
0
votes
0
answers
49
views
SecureCRT Does not Even Offer to Import Host Key
I am troubleshooting an SSH connection between a Windows client running SecureCRT v8.1.4 and an Oracle Linux 9 server running OpenSSH v8.7. The client connects but then drops the connection ...
- 51
0
votes
0
answers
48
views
Ansible: Failed to connect to the host via ssh; unknown key
I encountered an issue while connecting SSH host on Ansible. The error message is:
UNREACHABLE! => {
"changed": false,
"msg": "Failed to connect to the host via ssh: ...
- 1
0
votes
0
answers
31
views
Unable to Connect via Port Knocking on Specific Port
I am trying to set up port knocking on my server to enhance security. I've configured my firewall rules to use port knocking, where I have to connect to specific ports in a specific sequence before ...
1
vote
1
answer
60
views
Even if SSH is set up, it always asks for the password when logging into the server
I have an Ubuntu server. I use ssh to access it. It worked fine at first. When user@IP is given along with SSH key, it will log into the server without asking for password. But recently, even with SSH,...
0
votes
1
answer
133
views
Debian 12 Bookworm running OpenSSH_9.2 only allows rsa-sha2-512, rsa-sha2-256 and ssh-rsa server host key algorithms
On a Debian 12 Bookworm (running OpenSSH_9.2), which was recently upgraded from Debian 11, only the rsa-sha2-512, rsa-sha2-256 server host key algorithms are available by default. Setting ...
- 21
0
votes
1
answer
64
views
ssh prompts for password despite gcr-ssh-agent
I'm trying to set up GNOME-Keyring such that when it is unlocked after login, it will also allow me to use my SSH key, which is encrypted.
This is a Debian 12 system. The key in question is an ed25519 ...
- 131
0
votes
0
answers
54
views
Cannot setup ssh(dropbear) key login
Dropbear config is /etc/config/dropbear:
config dropbear
option Port '22'
option Interface 'lan'
option RootPasswordAuth 'off'
option PasswordAuth 'on'
I've paste my public ssh key ...
-1
votes
1
answer
88
views
How can I get SSH to work?
My pc is running Lubuntu 20.04.
I am trying to ssh to a raspberry pi 4 running Ubuntu Server 22.04.
I have followed the setup instructions but see the following:
ssh -v [email protected]
OpenSSH_8....
- 99
2
votes
0
answers
135
views
STIG'd RedHat 8 kills tmux session upon SSH timeout
I am working on a Red Hat Enterprise Linux (RHEL) 8 machine with the DISA STIG applied via OpenSCAP. The STIG requires that users be automatically dropped into a tmux session, that tmux session locks ...
0
votes
1
answer
38
views
Why are remote connections to my ssh tunnel refused but local connections are accepted?
Hello I have set up an ssh tunnel as follows:
/usr/bin/ssh -vvv -o ServerAliveInterval=10 -o ServerAliveCountMax=3 -R 15000:127.0.0.1: 15000 -N mylinode.domain.com
...
debug1: Offering public key: /...
- 183
0
votes
1
answer
89
views
How to get the IP address of the host that i have ssh'ed into?
I have ssh'ed into a linux host with
ssh username@ip.
Once logged on, how do I get the IP address of the host?
commands such as host name -I or ifconfig are returning an IP address that are different ...
2
votes
2
answers
114
views
Linux server: apt-get update "Could not get lock" error
I have a Google Cloud machine. Every few days, I SSH into the VM and run a handful of commands. Over the past few days, whenever I run sudo apt-get update, I get the following errors:
E: Could not get ...
google-compute-engine
0
votes
0
answers
80
views
execute ssh with command su and keep log in
I have a server where I have 2 users, one for ssh access and the other one for command execution, I want to create a command that use ssh, the su command and I want to keep the session alive, I try ...
- 101
0
votes
0
answers
59
views
Strange issue with firewalld and ssh on Almalinux 9
I have this strange issue with firewalld and ssh on my fresh AlmaLinux 9 installation.
I changed the ssh port to a non-default port(9322), restarted the sshd daemon. Firewalld is running in it's ...
- 1
0
votes
1
answer
19
views
Understand SSH AgentForwarding per Host specification
Disclaimer: originally I asked this question on StackOverflow and it was legitimately marked off-topic and think it fits better here. In the meantime I found the problem (see intermediate solution ...
- 103
0
votes
1
answer
124
views
SSH through squid proxy running on the same server
I am currently connecting to my server over ssh. I also have a squid proxy running on the same server, and I would like to be able to connect to ssh through the proxy, presumably with ssh taking place ...
user1079961
0
votes
0
answers
70
views
AWS EC2 Ubuntu 22.04 LTS session timeout not working (ClientAliveInterval, ClientAliveCountMax)
I installed an AWS EC2 instance using Ubuntu:
ubuntu@ip-aaa-bbb-ccc-ddd:~$ lsb_release -ds
Ubuntu 22.04.3 LTS
I was using the following simple tutorials to set the ClientAliveInterval and ...
- 101
0
votes
0
answers
50
views
Can't run startup script on Debian VM in Google Cloud - SSH and Serial Console Access Issues
I've been struggling for days with a SSH access problem on my Compute Engine VM (Debian GNU/Linux 10), with an error in the sshd_config file leading to the inability to restart the SSH service:
2024-...
0
votes
0
answers
12
views
When using the GCP OS Login TRUE, is it possible to access SSH from outside through Putty or VSCODE? How?
As I understood that, If I enable the GCP OS Login for the project, the normal behavior to SSH using public keys in metadata will cease to work.
I am curious about the SSH connection method using an ...
-1
votes
1
answer
41
views
SAP external command using lftp over sftp
I need to connect to the EDI server and pick up the data via sftp. This is an unusual ftp server. This is a special server that erases files after reading. We dismissed the initial idea of mounting ...
- 21
0
votes
0
answers
34
views
Unreasonably slow SSH tunnel - but just in the opposite direction
While setting up rsync to a remote computer, I realized that syncing from my laptop the remote was fast, but the opposite was slow.
After some debugging and iperf3, I figured that this only happens ...
0
votes
1
answer
63
views
Ssh hang after execute some command
I run some command through ssh: ssh root@remote "SOME_COMMAND", but the ssh does not return after command done. It just hang there.
The client side ssh log:
debug3: receive packet: type 98
...
- 1
1
vote
1
answer
105
views
OpenSSH server limit local forwarding to only unix sockets
Problem: Limit SSH -L forwarding only to unix sockets
SSH server S is a shared server inside a private network used by several users.
Use-case: for each user I create a local unix socket to use to ...
- 3,436
0
votes
1
answer
232
views
Cannot ssh into my vps ipv6 ip : Network is unreachable
The dashboard of my hosting company regxa provides me with a root password and ipv6 address to my CentOS server, no ipv4
I have tried using both putty and ssh cmd in my linux machine to connect to the ...
0
votes
0
answers
97
views
git-lfs is giving me a "locking API" error when I try to push to the server
I am trying to enable git lfs on my server but it's not working.
The server is already hosting git repositories which is working fine.
The server is runnign Debian bookworm.
What I did on the server:
$...
- 101
0
votes
1
answer
40
views
No SSH access to EC2 instance launched by ASG, while I can access an otherwise identical instance
I'm trying to SSH to an EC2 instance that's part of an ASG associated with an ECS service. To help narrow down the problem, I created new instance from the same launch template. I've carefully ...
- 11
0
votes
0
answers
122
views
Running ssh-add in bash with both the key and passphrase as arguments
I am trying to run ssh-add by bash script on Alma9 server with restrictions.
The RSA key 4096 is on an SMB share so the file has broken permissions and the key is protected by a passphrase.
As the ...
- 131
0
votes
0
answers
325
views
Host Key Exhange failing on AWS Transfer Family SFTP
I have a customer who is unable to connect to an SFTP Server (AWS Transfer Family SFTP).
The error I am getting in my logs is:
ERRORS KEX_FAILURE Message="no matching host key type found" ...
- 101
1
vote
0
answers
57
views
Host Keys updated unexpectedly
This morning autossh failed to connect to a server. I looked at the logs and saw that seemingly the server's fingerprint has changed and thus, the connection could not be established.
I then logged in ...
- 11
0
votes
0
answers
180
views
Disabling Password Login for Root User via PAM on Ubuntu Server
I have a Ubuntu Server (Ubuntu 22.04.3 LTS (GNU/Linux 5.15.0-1049-oracle aarch64) specfically), Where I am hosting a few projects, I am somewhat novice in the sysadmin space, but know some basics for ...
- 101
1
vote
0
answers
24
views
Dynamically Update Ips of AWS Autoscaling instances in Jenkins SSH Global configuration
We have few autoscaling groups in AWS and new instances are created frequently. We are using a declarative Jenkins pipeline to publish the build artifacts to those server using publish over ssh plugin ...
- 11
0
votes
0
answers
121
views
SSH sessions using keys extremely slow
From some days I'm having trouble accessing an instance with ssh key.
This server is an Ubuntu instance where it is installed gitlab and only access via ssh key is enabled.
Checking sshd logs I see:
...
- 1
0
votes
3
answers
155
views
Terminal emulator - make remote ssh sessions persistent
The classic story goes:
I have a terminal emulator with multiple tabs/screens.
In each tab, I start an SSH session to a remote server. I start possibly long-running interactive jobs in those sessions. ...
- 101