Questions tagged [ssh]

Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.

Filter by
Sorted by
Tagged with
0
votes
0answers
9 views

Mysqldump helm chart is unable to upload via ssh. Failing at key authentication ssh

I am trying to use mysqldump helm chart and upload the dump via ssh to a remote server. This was working in my dev environment(ssh upload destination was ubuntu16.04) but trhe same is not working for ...
2
votes
2answers
24 views

Override ansible default ssh_user

99% of the time that I use ansible, I use the ansible_ssh_user specified in my hosts file. The other 1% of the time this user doesn't exist, and I need to use the default user to create it. How can I ...
0
votes
1answer
31 views

Change the input number of fail2ban rules for iptables

I would like to change the Input number of the fail2ban rule in iptables to not be on the top (no.1) just to be added after all other rules. (after removing the rule it gets back every time). Image:
-1
votes
0answers
13 views

Multiple projects Shared Directory - Remote Server Management on Ubuntu

How to set up multiple project-wise Shared Directory via GUI panel on Ubuntu on currently running the server? Want to manage, create delete, delegate permissions of User, group and SSH Access with ...
0
votes
2answers
54 views

do not let me enter the server with the private key

I launch my command from cmd: start putty -load 192.168.1.200 -i C:\Users\Administrador\Desktop\id_rsa.ppk" it goes out to me to enter private password in putty: Using username "root". ...
0
votes
0answers
18 views

SSH login takes me to same machine where i am trying to login [on hold]

I am unable to login to master server from slave. It does not throw any error but connects to slave after giving root password.
0
votes
1answer
22 views

Kerberos: Wrong principal / realm for ssh-server login on a server in a subdomain

I currently try so setup the kerberos auth on a server living in a sub domain "sub.example.com". The KDC manages EXAMPLE.COM together with a dns server which manages 'example.com'. Due to ...
0
votes
1answer
67 views

How to access Cloud Compute instance Google as a service through SSH?

I'm trying to access a Compute instance through SSH in my bitbucket-pipeline, but for some reason, anything I try to do doesn't work, so I'm obviously missing something. I created a service account in ...
0
votes
2answers
40 views

Permission denied (publickey) in gitlab self hosted server

I want to setup a ssh connection to my gitlab server. gitlab spec Install via docker-compose : # ---------------------- # # gitlab # # ---------------------- # gitlab: image: ...
1
vote
1answer
28 views

duplicity backup fails: “Private key file is encrypted”

I am trying to upload my first duplicity backup to a remote server and it fails. It is the first time I am using the tool and it did not work before. duplicity /home/me/Documents/ scp://me@<ip-...
1
vote
1answer
24 views

Can OpenSSH automatically disconnect session at end of cert-based key's valid period?

I'm aware of the ability to logout inactive SSH sessions after a period of time but leaving something like "top" open works around that. This question is more in the context of forceful disconnects ...
1
vote
1answer
52 views

Open autossh port for public access

I want to access a Raspberry Pi Zero W on the local network via NAT traversal. I was following this tutorial (in Chinese), but am having the issue described below. The idea is to forward the SSH port ...
0
votes
0answers
12 views

Third party host key verification

I'm sitting here with a small dilemma. I was recently about to connect to my production environment bastion to access the live database. As I was about to connect, I received a message that the host ...
0
votes
0answers
17 views

Echo result only displays IPs from “ADDRESS” (Mikrotik)

I have PHP script that displays the results of commands from Mikrotik as below: if ($ ssh = ssh2_connect ('10 .10.10.5 ', 22)) { if (ssh2_auth_password ($ ssh, 'USERNAME', 'PASSWORD')) { $ ...
0
votes
1answer
33 views

Chaining SSH tunnels for forwarding HTTPS?

I have a firewall, Host A, that is accessible over the internet. It performs NAT for the hosts behind it. Behind this firewall, there is Host B, which is accessible via SSH from the firewall device. ...
0
votes
1answer
40 views

Transparent ssh tunneling

I have an SSH tunnel defined in /etc/ssh/ssh_config. It contains: LocalForward 0.0.0.0:8000 some-service:80 LocalForward 0.0.0.0:8001 some-other-service:80 I would still like to be able to access ...
0
votes
0answers
14 views

SSH-Config - expanding hostname in User

I'm trying to improve my ssh-config in order to connect to a specific non-standard application. My infrastructure is built behind a bastion. This specific black-box bastion works by getting the ...
1
vote
2answers
59 views

Using a multi-hop ssh tunnel to reach a database

We have some remoteservers which are only accessible through a jumphost. On this remoteservers run vms which host the databases i want to reach locally. Each box is a linux system. I have only su ...
0
votes
1answer
24 views

SFTP blacklist commands on Centos 6?

I've set up a new account to SFTP only by giving shell of /bin/false, and made member of stfp_only group. I then edited my /etc/ssh/sshd_config as outlined in numerous guides I've been reading like so ...
0
votes
1answer
29 views

Access Denied to server linux SSH

I can't access the server using ssh user@IP with the right password i get access denied even though the sshd config is set correctly i restarted it reloaded nothing worked. I generated an rsa key over ...
0
votes
1answer
36 views

Several short consecutive SSH connections

Imagine performing a short repetitive process, which ends by doing a short lived SSH connection to some server (e.g. transferring a newly generated file via SFTP). This means that there will be a lot ...
2
votes
1answer
41 views

Is it safe to use SSH for periodic command execution on remote Server regarding usage of entropy?

I'm planning to set up periodic checks for system health on a multiple remote systems. To achieve this I've set up key-based authentication to execute scripts on remote side without interaction i.e.: ...
1
vote
1answer
53 views

Drop packets with iptables for ssh login by user root

Is it possible to have iptables DROP any packets with user "root" so that the SSH daemon doesn't even have to waste cycles denying the login attempt? I already deny root login attempts in my ...
2
votes
2answers
44 views

SELinux won't let me run sshd under port 443

I'm running Redhat 7.7. I am trying to let the ssh-service accept connections on both Port 22 and Port 443. I have allready opened the firewalld with sudo firewall-cmd --add-port=443/tcp --permanent ...
0
votes
0answers
16 views

Unable to ssh into box - is this a hardware fault or lack of resources? [closed]

I'm unable to ssh into a box. I can, however, get a Web console (I guess like a KVM console). What I see is Elasticsearch running wild creating a load average of around 3.5. Is it possible that this ...
-1
votes
1answer
51 views

Does it makes sense to permit only root to use ssh? [closed]

i have a question about some "security": What would happen in the worst case if the root has the permission to use the ssh tunel? Maybe it its better to use sudo instead of an root account? As a "...
0
votes
1answer
47 views

setup Gitea SSH with nginx & openssh-server

I've just setup my first local Gitea server and everything works fine except SSH. Normal SSH works fine but not when I try to interact with Gitea. The shown URL is ssh://git@gitea.xxx.local:123/user/...
0
votes
1answer
91 views

Reverse SSH Connection

this question is not directly about reverse tunnels or port forwarding, but the answer might be in there.. The situation: I have a couple of workstations that I want to control using SSH. However, ...
1
vote
1answer
62 views

Is there a way to do SSH password-less login when the server only allows keyboard-interactive authentication?

Suppose I've got a server foo.com which only allows keyboard-interactive authentication, and that I can't change this. This means I can do, sshpass -p PASSWORD ssh foo.com but I can't create public/...
0
votes
0answers
15 views

SSH host key has changed after VM switched node, can't login

I have a server in a cloud service that has been running smoothly. I've only ever connected via SSH. Yesterday, they had a node malfunction and moved all VM:s to another node/other nodes. After the ...
0
votes
1answer
38 views

Linux sftp — how to add new user to access exist directory with write permission?

I have built a website and I can access and edit the website'files on server via the root user. The current file and directory structures are not changeable. Now I am hiring a webpage designer to help ...
0
votes
0answers
17 views

Mannage remote kubernetes cluster via the SSH

I have setted up k3os installation. And trying now to figure out how top manage it. Current solution is to invoke kubectl on the target os, which is not go. Is it somehow possible to call local ...
0
votes
0answers
28 views

SSH authentication failed and sshd reports setuid error: not such device or address after Cygwin update

I just updated Cygwin for git on server. And after restarting the sshd service. No accounts can ever logon anymore. Both domain user and local user are not able to logon ssh... ssh server1 -v gives .....
1
vote
0answers
30 views

AutoSSH not connecting to remote server, but SSH works fine

Trying to use autossh to create a tunnel on my remote server that I can use. I can create the tunnel with normal SSH but trying to use autossh keeps failing. I want to setup it up with autossh ...
0
votes
0answers
24 views

2-Factor Authentication Using Puppet

I applied 2 factor authentication using google-authenticator by applying a puppet manifest to a centos server. I have made all the changes that are required to sshd_config and pam.d/sshd files. But ...
0
votes
1answer
25 views

Questions about SSH certification

I have some SSH login questions from the client computer to the backup computer. I have a laptop (client) which should make backups to a Synology via rsync / SSH. I have read a lot about it in the ...
0
votes
1answer
30 views

Error 403 - Forbidden with symbolic link

I'm deploying Laravel app in shared hosting. I've deleted the orginal public_html folder and created symbolic link ln -s app/public public_html The symbolic link is success. But I'm getting Error ...
0
votes
0answers
19 views

Could not ssh to google cloud instance, then instance became empty

I was doing some work on my gcloud instance and after trying to save a file I received a message from Python that there is not enough memory. I promptly deleted several files to free some space and ...
0
votes
0answers
10 views

SFTP user: chroot and “no shell” restrictions throwing mystery errors

With copious web content about how to set up an SFTP-only user that can only access their home directory, I didn't expect it to stump me, but there are two issues I can't get past. The directory ...
0
votes
0answers
30 views

SSH linux server access: 'Permission denied' using MobaXterm. No problems using Putty, tough

I'm trying to use MobaXTerm to log in via SSH into a couple of RHEL5 boxes. I always get Permission denied. I'm sure the typed password is correct because when I use PuTTY rather than MobaXTerm, I ...
2
votes
1answer
53 views

how to create status of REMOTE HOST IDENTIFICATION HAS CHANGED when performing ssh to remote machine for testing

We want to cause the status from a remote Linux machine to return "@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@\r", "@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @\r", "@@@...
1
vote
1answer
17 views

OpenSSH on Windows permissions / best practice

I'm struggling with an issue I can find a lot of information on the internet, but unfortunately no solution. I need to offer a SFTP connection to a Windows Server. The protocol and the OS is fixed, ...
0
votes
0answers
26 views

End user authentication advice

We have a potential security problem in our environment, need expert advice to resolve it. I have docker containers running on Amazon Linux Ec2's and the user authentication happens via a tool called ...
0
votes
3answers
55 views

Error provisioning server with ansible

I have another frustrating dilemma and it would be wonderful to have another pair of eyes on this (really any but mine..). I have built a wordpress site using sage/bedrock/trellis, and I was just ...
2
votes
0answers
45 views

Username collision files/ldap, both passwords accepted

Ubuntu 18.04.3 server, slapd running, LDAP auth configured with libnss-ldapd and libpam-ldapd packages (all on the same machine). Created a local user with useradd and a user in the LDAP database with ...
0
votes
0answers
16 views

Debugging ssh reverse tunnel crash upon systemd restart

I have a Raspberry Pi that sets up a reverse ssh tunnel to a remote server using a systemd file. Occasionally the systemd command seems to crash and locks up the whole machine. This seems to be ...
-1
votes
0answers
29 views

hostgator connect ssh ( Too many authentication failures for root )?

When I just connect to ssh server it's show this error !! ** Too many authentication failures for root ** And I tried this command ( ssh -o IdentitiesOnly=yes root@my-ip ) image He just ...
2
votes
0answers
37 views

Accessing servers in China via encrypted channels (like SSH, HTTPS, VPN) from outside

I've been approached by a potential customer to manage certain servers in Mainland China, for which I would need to have access to them via encrypted channels (like SSH/HTTPS/VPN). While I am aware ...
0
votes
1answer
52 views

Port Forward - KVM host forward port 23 to port 22 of a guest running an ssh service

I have a KVM server (host) with multiple virtual machines (guests). My goal is my host forward port 23 to port 22 of a guest running an ssh service. Command example... ssh root@[HOST_IP] -p 23 ...
1
vote
0answers
40 views

How to block SSH on an arbitrary non-standard port with iptables?

How to block SSH connection on an arbitrary non-standard port with iptables? There's no way to distinguish SSH connection on non-standard port on 4th layer as both source port and destination port ...