Questions tagged [ssh]
Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.
8,962
questions
8
votes
1
answer
20k
views
Connect to remote MySQL using proxy
I'm trying to connect to a remote MySQL server (with TCP access limited to a specific IP) using port forwarding via SSH, but still haven't figured out how to do it.
Here's what I intend to do:
Local[...
6
votes
4
answers
2k
views
Giving SSH access to a user, and security issues
Okay, so I have a VPS and I made an account for a friend so he can host his own domains (using the reseller features in DirectAdmin). He's asking for SSH access, and I know that this is probably a bad ...
17
votes
3
answers
23k
views
Rsync over ssh with root access on both sides
I have one older ubuntu server, and one newer debian server and I am migrating data from the old one to the new one. I want to use rsync to transfer data across to make final migration easier and ...
0
votes
2
answers
910
views
SSH into remote server using Public-private keys
I have recently setup ssh on two linux machines (lets call them server-a, client-b). I have generated two ssh auth files on client-b machine using ssh key gen and can see both public and private files ...
2
votes
2
answers
1k
views
Can I port forward to an established reverse ssh tunnel
I have three computers, A, B and C. A has initiated a reverse ssh tunnel to B.
ssh -nTNx -p 443 -R 22222:localhost:22 [user]@[server]
If I log in to B, I can use 'ssh -p 22222 localhost' and I get ...
1
vote
3
answers
1k
views
Remove identifying information from SSH
When I do an nmap -sV 127.0.0.1 -p 22 of my system I get the following information:
SF-Port22-TCP:V=4.62%I=7%D=11/9%Time=4916402C%P=i686-pc-linux-gnu%r(NULL,2
SF:7,"SSH-2.0-OpenSSH_5.1p1\x20Debian-...
1
vote
2
answers
753
views
Forwarding ports with ssh on Linux
I have a database server, let's call it:
dbserver
I have a web server with access to my dbserver, let's call it:
webserver
I have a development machine that I'd like to use to access a database on ...
1
vote
1
answer
4k
views
Can I use the same machine as a client and server for SSH?
For development tests, I need to setup an SFTP server. So I want to know if it's possible to use the same machine as the client and the server. I tried and I keep getting this error:
> Permission ...
2
votes
2
answers
2k
views
ssh -x : howto get clipboard?
I'm connected to a server via ssh -x and my only way to get text out of the system is the x clipboard (unless i want to take thousends of screenshots and OCR over it).
I can not execute any programs ...
84
votes
8
answers
155k
views
Is it possible to use rsync over sftp (without an ssh shell)?
Rsync over ssh, works great every time.
However, trying to rsync to a host which allows only sftp logins, but not ssh logins, provides the following error:
rsync -av /source ssh user@remotehost:/...
1
vote
2
answers
5k
views
sftp chroot access via SSH
I have this setup in sshd_config:
AllowUsers test1 test2
Match group sftpgroup
ChrootDirectory /var/www
X11Forwarding no
AllowTcpForwarding no
ForceCommand ...
0
votes
1
answer
612
views
X11Forwarding on MacOSX (Leopard/Snow Leopard)
I have some remote boxes, which are a bunch of Mac Mini's. I access them now through SSH, and it fits my needs to do the maintenance. In the past, I used X11Forwarding with Linux boxes, when I was ...
9
votes
4
answers
57k
views
How do I restart ssh or sshd on Ubuntu?
I want to restart ssh or sshd but I get this error:
qqqq@Matrix-Server:/$ sudo /etc/init.d/ssh stop
sudo: /etc/init.d/ssh: command not found
qqqq@Matrix-Server:/$
Do I need to install ssh or sshd or ...
2
votes
1
answer
597
views
Forward one RDP port on one machine to multiple external users at the same time
We have a windows server 2003 machine with rdp service listening on the standard port 3389.
For security reasons this port is not opened on the router, but we have freesshd service running and a ...
1
vote
3
answers
10k
views
can you run a shell command via nohup at later time?
I'd like to run a script at 6pm on a remote server but don't want to wait around to trigger it. I don't want to use cron since it's a one time deal.
Can I do something like "nohup myscript &" ...
2
votes
3
answers
2k
views
How to run a script in Ubuntu via SSH as superuser?
So I have a script that needs to be executed remotely as root. This isn't a problem with most Linux distros since they have a root account. But since Ubuntu does not, executing anything as root ...
6
votes
4
answers
8k
views
ssh port forwarding freezes after 10 simultaneous connections
I am using port forwarding to utilize proxy server which is on remote machine.
Remote machine hostname is remotemachine. Proxy is listening on 8118 port. I am translating this port to local port 5223....
5
votes
2
answers
11k
views
Linux Teamviewer functionality, but for ssh only
I need to access some Linux server behind NAT (no ports forwarded), so I need to have something like "phone home" like Teamviewer has. There is no GUI, but somebody can log in through SSH and dictate ...
1
vote
2
answers
744
views
Glassfish installation error: cannot open display
When trying to extract the Glassfish jar file with
java -Xmx256m -jar glassfish-installer-v2.1-b60e-linux.jar
i get following error:
(.:31766): Gtk-WARNING **: cannot open display:
and extraction ...
2
votes
4
answers
37k
views
howto copy files on esxi datastore using scp?
how to copy files on esxi4 datastore (fs=vmfs) over network using console (SSH)?
giving up older question:have seen on vmware forums that its not possible
have a USB drive NTFS attached to ESXi4 host....
4
votes
2
answers
7k
views
Cygwin, ssh, and git on Windows Server 2008
I'm trying to setup a git repository on an existing Windows 2008 (R2) server. I have successfully installed Cygwin & added git and ssh to the packages, and everything works perfectly (thanks to ...
5
votes
2
answers
10k
views
How to prevent ssh git push to set file ownership?
I have a remote bare Git repository on an Ubuntu server, where the files are owned by the user my_project and the group my_project, with permissions set accordingly. All commiters are themself in the ...
4
votes
2
answers
4k
views
duplicity fail: not promping for password: "Running 'sftp user@host' failed"
I have two linode VPS accounts and I want to back up one onto the other (the reasons are mainly for fun and to practice server administration.)
the short version
Duplicity isn't even asking for my ...
2
votes
3
answers
4k
views
Disabling all commands over SSH
Suppose use can ssh to the server and can execure FTP and connect to other sources, download a virus and execute it.
Is it possible to force user to execute only some known commands?
1
vote
2
answers
253
views
Can it be harmful to have execution permission for home directory
I want to know the risks and dangers of this situation where a hacker have access to my SSH server with a user account that has only access to home directory and can read,write and execute commands. ...
2
votes
4
answers
229
views
let ssh account only access specific directories
If you have an ssh account and a hacker can get his hands on your account then the hacker can almost do anything on your server. Is it possible to limit a ssh account to access only on some specific ...
343
votes
27
answers
560k
views
Can I automatically add a new host to known_hosts?
Here's my situation: I'm setting up a test harness that will, from a central client, launch a number of virtual machine instances and then execute commands on them via ssh. The virtual machines will ...
2
votes
6
answers
852
views
When connecting to a unix box, how does it know you have SSH setup on your desktop?
When you use something like putty to connect to a linux box, and you setup your SSH keys etc.
When connecting, how does it tell the server that you want to connect using your SSH keys?
Is SSH ...
1
vote
3
answers
2k
views
probems using ssh from cron
I am attempting to automate a script that executes commands on remote machines via ssh. I have public key authentication setup between the machines using ssh-agent. The script runs fine when executed ...
2
votes
1
answer
135
views
SSH authentication working unless ran from script?
I have set up my server to allow key/pair authentication by following instructions similar to what is found in this post.
As far as I can tell that is working correctly. If I do the following, for ...
21
votes
3
answers
48k
views
Connect through SSH and type in password automatically, without using a public key
A server allows SSH connections, but not using public key authentication. It's not within my power to change this at the moment (due to technical difficulties, not organizational) but I will get on it ...
1
vote
2
answers
326
views
Postgresql Data Aggregation over WAN Securely
Need some advice on how to proceed with this situation: My current scenario is that I have several postgresql (50+) boxes deployed throughout various locations and data centers and a beefy postgresql ...
2
votes
1
answer
10k
views
CopSSH SFTP -- limit users access to their home directory only
Let me preface this by saying I've read and followed these instructions at the FAQ many times: http://www.itefix.no/i2/node/37
It does not do what the title claims... It allows every user access to ...
8
votes
3
answers
5k
views
Configure SSH to allow port forwarding but no commands for particular key?
So I've added a public key to authorized_keys. How can I limit it so that it may forward ports but it may not have a shell?
12
votes
5
answers
732
views
How public should a public key be allowed to become?
I have a script that I use to setup new slices on slicehost and one of the steps is to add my public key to the authorized_keys file. At the moment I scp a key manually, but ideally I would have the ...
0
votes
2
answers
1k
views
pecl-ssh2-0.11 Freebsd Compile error after upgrading to php 5.3.2
Hi I've been looking for answers for this all day and can find nothing to solve my issue.
I also came across a question about this port on serverfault that I just answered and will hopefully help ...
3
votes
2
answers
2k
views
Exposing a WebServer behind a firewall without Port Forwarding
We are deploying web applications in java using tomcat on client machines across the country.
Once they are installed, we want to allow a remote access to these web applications through a central ...
3
votes
1
answer
2k
views
ssh authentication nfs
I would like to do ssh from machine "ub0" to another machine "ub1" without using passwords.
I setup using nfs on "ub0" but still I am asked to insert a password.
Here is my scenario:
machine ub0 ...
1
vote
0
answers
415
views
ssh through a bastion machine works on someone else's desktop but not my own
I have to ssh into a bastion (jump) server in order to get to the final server.
On the jump server, my .ssh/config says:
Host *
ForwardAgent yes
My co-worker uses PuTTy and Pageant. When I use a ...
6
votes
6
answers
20k
views
(svn+ssh) getting bash to load my PATH over SSH
This problem comes up with me trying to make svnserve (Subversion server) available on a server through SSH. I compiled SVN and installed it in $HOME/bin. Local access to it (not through SSH) works ...
220
votes
9
answers
1.0m
views
How to check sshd log?
I have Ubuntu 9.10 installed with sshd and I can successfully connect to it using login and password. I have configured an RSA key login and now have "Server refused our key" as expected. Ok, now I ...
15
votes
6
answers
23k
views
How can I automatically change terminal colors when I ssh a server?
I'm frequently logging into different servers from my os x terminal window.
I'd like to assign a color scheme for different hosts so that my terminal windows are easier to tell apart. Can this be ...
213
votes
1
answer
220k
views
SSH use only my password, Ignore my ssh key, don't prompt me for a passphrase
This is a question regarding the OpenSSH client on Linux, MacOSX and FreeBSD.
Normally, I log into systems using my SSH key.
Occasionally, I want my SSH client to ignore my SSH key and use a ...
4
votes
1
answer
2k
views
How do I connect to MySQL when it's setting behind 2 layers of ssh?
I have a MySQL server sitting behind a bastion server that I wish to connect to from my local machine.
Ideally I want to port-forward the MySQL port (3316 in this case) to a local port on my machine.
...
3
votes
4
answers
4k
views
ssh port forwarding / security risk
I want to access a web application running on a web server behind my office firewall from an external machine.
We have a bastion host running sshd that is accessible from the Internet.
I want to ...
3
votes
3
answers
5k
views
Most common account names used in ssh brute force attacks
Does anyone maintain lists of the most frequently guessed account names that are used by attackers brute-forcing ssh?
For your amusement, from my main server's logs over the last month (43 313 failed ...
5
votes
3
answers
2k
views
Invalidating unused ssh keys
I am using one ssh account for all my Subversion users. They send me their public keys and I put them in .ssh/authorized_key of the svn account, then they can check out the code from Subversion using ...
2
votes
2
answers
1k
views
Two way SSH authentication
I have installed ASL and it recommends me that I implement a two way SSH authentication. I have some questions about it.
I understand the general idea that you need to login with both a key and a ...
1
vote
3
answers
384
views
Urgent SSH Local Port Redirection
I have a shell account but the admin has restricted ssh access to the server. The server is listening on 0.0.0.0:22 but the firewall blocks any incoming attempts to this port. He says he is doing ...
2
votes
4
answers
13k
views
What is the longest password for SSH?
What is the longest (how much characters) for SSH password?
I like strong and long password but dont know the character limit.
Thanks.