Questions about the OpenSSH implementation of the ssh protocol.

learn more… | top users | synonyms

0
votes
0answers
31 views

read failure error while connecting to the server [on hold]

There was a problem last night when I tried to connect to a remote server from my personal computer having Linux. First, I received the following error: ssh_exchange_identification: read: Connection ...
0
votes
2answers
42 views

Setting Up SSH. Just need some understanding

My goal is to build a LAMP server on my arch linux laptop. The main reason is for a web server. The other reason is to learn about how all this administration stuff works. My setup is a laptop with ...
2
votes
1answer
44 views

Configure OpenSSH server not to require password *or* key for a particular user

For the purpose of a training session, I'd like to make it possible for a particular user to connect without requiring a password or key-based authentication. I do not know the IPs or other data of ...
2
votes
1answer
25 views

OpenSSH-Server: How can I remotely set the client's side window title?

I have an OpenSSH server running under Ubuntu 14.04LTS. I'm connecting to it from a Windows 7 machine via PuTTY's SSH client. I have found this option on Putty client named Disable remote-controlled ...
2
votes
1answer
35 views

ssh-copy-id: why is the end of my public key different on my local vs remote?

Usually in the past I've always manually copied over my SSH public key to the remotes where necessary. I'm on a Mac and I finally decided to start using ssh-copy-id to make my life simpler, so I just ...
1
vote
2answers
29 views

Does `ssh -D` proxy DNS request?

Is DNS resolution tunneled to the other end when I use a SOCKS proxy created with ssh -D? I have read the manual, searched the Internet, and found no documentation relevant.
1
vote
1answer
90 views

How to set up chrooted and non-chrooted sftp?

I am trying to set up my Openssh server to allow for chrooted sftp-only users as well as for non-chrooted sftp and ssh users. My condensed (comments and blank lines removed) /etc/ssh/sshd_config looks ...
2
votes
0answers
38 views

ssh terminating immediately with message Terminated

I have tried following command on my local system (Ubuntu 14.04 LTS): $ ssh localhost The authenticity of host 'localhost (127.0.0.1)' can't be established. ECDSA key fingerprint is ...
2
votes
2answers
29 views

Use a dynamically obtained hostname with an ssh config entry

Our accounts in our lab are all mounted over NFS and are accessible over all the systems in a subnet. So, effectively we can ssh into any of the machines in the subnet and continue our work. The ...
2
votes
0answers
82 views

Force OpenSSH / pam / pam_ldapd to do pam_ldapd(sshd:auth) with public-key authentication

I have working pam_ldap authentication using libpam_ldapd. I'm using slapo-nssov and want to use loginStatus attribute which is added to users ldap entry after opening pam session and deleted when its ...
0
votes
0answers
25 views

Cygwin and OpenSSH

I am having issues setting up and installing the latest Cygwin with Openssh. Similar to this issue Installing SSH via Cygwin I can get this setup and working fine when the server is not connected ...
2
votes
1answer
38 views

Arch Linux openSSH frequently drops connection

I'm running a VM using Oracle's VirtualBox. The OS is the latest version of Arch, 64-bit. For some odd reason, every so often (frequently enough to be very annoying and making it almost impossible ...
0
votes
1answer
39 views

SFTP Chroot and SSH

I have a chrooted SFTP user group to access my home server. The chroot location is /mnt/, mostly because it is already owned by root and is where I have mounted the external HDD I want to the chrooted ...
-1
votes
1answer
370 views

How to install openssh-server on openSUSE

I recently installed openSUSE, and I want to set up an ssh server so that I can ssh into this machine. However, I am having trouble installing openssh-server. I have tried $ sudo zypper install ...
2
votes
2answers
66 views

Chroot user exit jail [duplicate]

I am using OpenSSH chrootdirectory feature to give access to a user via ssh. Can this user exit the jail and return to the normal OS environment? Maybe with su?
1
vote
1answer
38 views

Integer after username in OpenSSH client separated by colon

I have a reverse SSH server in Cisco router(runs IOS operating system) and it listens on port 2001: C1841#sh control-plane host open-ports Active internet connections (servers and established) Prot ...
0
votes
1answer
59 views

Running 2 OpenVPN on the same box

(Fist of all, I'm a total Unix newbie). I know I can create two (or more) user accounts with root privileges, and I can access them independtly through SSH sessions. But I don't know how Unix systems ...
1
vote
1answer
69 views

Restrict SSH login to local network: VPN connection not allowed

There are two (unix) users who are allowed to connect to my Debian Wheezy server using ssh: git and peter. While git is allowed to connect from everywhere, peter (who is in the sudo group) should be ...
0
votes
1answer
65 views

Compiling LibSSH2 with specific LibSSL

I have downloaded and compiled the latest version of libssl, the result of which is located at /usr/local/ssl. I want to compile libssh2 using the files in this folder, and to do that I've set the ...
1
vote
2answers
112 views

SSH via cert-authority

I'm trying to use SSH using signed certificates. I'm using ssh -i keys/client.key to connect to the target device. If I generate a public key from that private key (with ssh-keygen -y -f ...
2
votes
2answers
91 views

RPM Says Shared Object Is Missing But I Can Find It With ls

Having a problem installing an openssh rpm I hand-rolled today: [root@local_host ]# rpm -i openssh-6.7p1-1.i386.rpm error: Failed dependencies: libcrypto.so.1.0.0 is needed by ...
0
votes
0answers
10 views

SSH tunneling error: “channel 1016:: open failed: administratively prohibited: open failed” [duplicate]

when I use config file in the /home/username/.ssh/config to connect to localhost with ssh, I get the following results: channel 1016: open failed: administratively prohibited: open failed channel ...
1
vote
0answers
173 views

openssh-server doesn't start in Docker container

I am having a weird problem. I am not able to ssh to docker container having ip address 172.17.0.61. I am getting following error: $ ssh 172.17.0.61 ssh: connect to host 172.17.0.61 port 22: ...
2
votes
0answers
24 views

Placing OpenSSH control socket in /run

OpenSSH has a feature that allows you to multiplex connections over a controlsocket. It is generally accepted that these control sockets should not reside in a common area, due to the security issues ...
0
votes
0answers
112 views

restrict ssh access to /bin and using bash as a shell

I want to restrict my admin user to /bin directory while permitting to use bash as a shell via ssh. This is in my sshd_config file: Match User admin ChrootDirectory /bin X11Forwarding no ...
1
vote
1answer
46 views

Can OpenSSH 6.7 optionally not depend on OpenSSL?

It has been reported on Slashdot on 2014-04-30 that OpenSSH now has a compile-time option to not depend on OpenSSL. However, OpenSSH 6.7 release notes, released on 2014-10-06, do not make any mention ...
6
votes
5answers
1k views

Use two different ip addresses per host in SSH

I have a server, named gamma, constantly up and running at work. Sometimes I connect to it from at home, in which case I use the public IP address 55.22.33.99. Sometimes, I connect to it when I'm at ...
3
votes
1answer
8k views

installing fail2ban on CentOS 7

I am using @GarethTheRed 's answer to this question to install fail2ban on a remote CentOS 7 server. I am able to complete all the steps up until tail -f /var/log/fail2ban.log, at which point I get ...
1
vote
2answers
56 views

downloading sshd logs from remote centos 7 server

When I log into a remote centos 7 server as root, I am able to see the sshd logs by typing journalctl _COMM=sshd in the terminal. But the logs are massive. How can I download all the logs into a ...
0
votes
0answers
146 views

SSH client connection not working to remote servers not working

I am unable to connect to other machines from one of my servers. Here is the verbose output (IP, domain, port are masked. OpenSSH version info removed): $ ssh -vvv user@example.com -p yyyy debug1: ...
0
votes
1answer
153 views

CentOS 7 VPN server

How do I set up a remote internet web server using CentOS 7 so that it is completely shielded by a VPN? Here is the use case: 1.) This means that ALL requests for ANY interaction with the web ...
0
votes
1answer
34 views

SSH connection gets lost, but not when logged in to MySQL

When I open an SSH connection to our database server and leave it open for a longer time, the connection gets lost at some point. I don't know why or how, but this happens a lot. I still see the ...
2
votes
1answer
112 views

restricting remote vpn login to ip address in CentOS 7

I have read that OpenSSH itself does not support authentication via specific IP address. In a CentOS 7 installation on a web server, how would one configure the login so that a user would not only ...
2
votes
1answer
33 views

Programatically / dynamically adjust SSH session port forwards

I have a workflow where I am trying to do the following: For a given existing SSH session, access the remote machinne and perform a process from which a port is returned (e.g. a remote daemon has ...
2
votes
2answers
119 views

temporarily disable login using one specific ssh key

On my server, I have several public SSH keys in ~/.ssh/authorized_keys. I would like to temporarily block/disallow/deactivate one key. I want to prevent the user to log in using this key now. but I ...
1
vote
2answers
231 views

SSH PC at office in local network from home

My office has one default gateway and behind that is a local network with locally assigned IP addresses to all computers including mine. I hold admin in my Ubuntu installed office PC and is it ...
2
votes
0answers
103 views

How to find out what triggers ssh-askpass prompting for passphrase periodically

I recently deleted the contents of my ~/.ssh directory and generated new keys. They new ones work fine, but every once in a while I am getting a gui dialog titled OpenSHH from asking for the ...
0
votes
0answers
43 views

Cannot connect to OpenSSH when compiled with the gcc option: -finstrument-functions

I want to make custom traces of sshd. So, I have added the source file ptrace.c from here. This file enables to trace function calls (but this is not the subject of my question). So, I have modified ...
2
votes
1answer
181 views

update openssh and openssl on solaris

I got a nexenta system, I updated openssl to 1.0.1j, which I compiled from source code. I updated openssh to 6.7, from source code as well, and I get this: root@cteraportal:/root# openssl version ...
0
votes
1answer
192 views

Specifying a random monitoring port with autossh

I have many reverse ssh tunnels and because monitoring ports can't be reused, I am trying to find a free random port for monitoring. Meanwhile I specified -M 0 and the forwards work great and in ...
0
votes
0answers
19 views

OpenSSH: UseDNS is not enforced

I cannot get the UseDNS constraint to work. It is set to UseDNS=yes on the server running sshd. That server queries a local DNS server which is the authority for each host on the network. Each host ...
1
vote
2answers
815 views

Intermittent 'ssh_exchange_identification: Connection closed by remote host' error

While there are many questions on this site and others addressing this very issue, I haven't yet found one that seems to address what I'm experiencing. When trying to ssh a linux box from a MBpro ...
3
votes
1answer
178 views

How to know which public key was used when someone used passwordless ssh login?

Say for some reason, there is only a "user" account on a shhd server. Everyone has his own private key to ssh to the server, as "user". Then, is there a way to see who is he (during or after his ...
0
votes
0answers
78 views

Problem with OpenSSH

I think I got an OpenSSH-problem with my Ubuntu Server 14.04.1. Let me explain my setup: For development, I use Git and Gitolite. I have 3 server: server A ( master-server for git-mirroring) ...
0
votes
1answer
10k views

What is the default idle timeout for OpenSSH?

I can't seem to find an answer to this simple question, which I need for some compliance documentation. On a default install of CentOS 6.5 (OpenSSH 5.3p1-94.el6), after how long of being idle will ...
3
votes
1answer
355 views

Only apply Match keyword to single Host in ssh config

I have a host which I ssh into. Sometimes I'm inside the same network, and can ssh directly into it, other times I'm outside it and I need to use a proxy. Because ssh via the proxy server is much ...
2
votes
1answer
254 views

public key authentication without authorized_keys file

I have a lot of ssh public key logins on a Linux server, e.g.: Jul 25 11:41:01 host sshd[24594]: Accepted publickey for root from xxx.xxx.xx.xx port 33374 ssh2 This is strange for me since there's ...
4
votes
2answers
502 views

Starting SSH server after VPN starts

I am running an OpenVPN server on Ubuntu 14.04 as well as OpenSSH. I have my SSH server configured to bind to an IP address on my VPN interface. Once my machine boots, binding to that IP fails. ...
23
votes
2answers
2k views

What's the purpose of the randomart image for user (not host) SSH keys?

The ssh-keygen generates the following output: The key fingerprint is: dd:e7:25:b3:e2:5b:d9:f0:25:28:9d:50:a2:c9:44:97 user@machine The key's randomart image is: +--[ RSA 2048]----+ | .o o.. ...
4
votes
0answers
1k views

Can't figure out why ssh_exchange_identification: Connection closed by remote host appear

At home, I have setup a Raspberry Pi with the latest version of Raspbian and with ssh enabled. I also use a Mac Book Pro with OS X 10.9.3. I use ssh pi@192.168.0.22 to do some work on the Raspberry ...