Questions about the OpenSSH implementation of the ssh protocol.

learn more… | top users | synonyms

0
votes
1answer
26 views

Installed OpenSSH on Mint 17 but it doesn't seem to be running

So I've installed OpenSSH on Mint rafaela 17.2, but it doesn't seem to be running when using the modified config file. Not sure why service says its up, but I don't have a PID, don't have a listener, ...
0
votes
1answer
25 views

Disabling openssh host key checking on LAN

If I want to specify for LAN addresses that I don't want to deal with host keys, how do I do that? /etc/ssh/ssh_config Host 192.168.*.* StrictHostKeyChecking no UserKnownHostsFile /dev/null ...
1
vote
2answers
20 views

Unexpected Match behavior in sshd_config

I'm trying to configure the following restrictions in my sshd_config: Users with local IP addresses face no restrictions Users with non-local IP addresses, who are in the sftp group, are allowed to ...
1
vote
1answer
18 views

Is it possible to chroot sftp service as unprivileged user?

I currently have an sftp-only sshd service running as an unprivileged user that works fine. When adding ChrootDirectory %h to the separate user_sshd_config, the user is immediately disconnected after ...
4
votes
2answers
70 views

How do I list available host key algorithms for an SSH client?

So ssh has the option HostKeyAlgorithms. Sample usage: ssh -o "HostKeyAlgorithms ssh-rsa" user@hostname I'm trying to get the client to connect using the servers ecdsa key, but I can't find what ...
1
vote
1answer
37 views

Prevent ssh-keyscan from generating output

Problem: When running ssh-keyscan in cron it emails me the output of ssh-keyscan every day. The email simply contains the following. # <hostname> SSH-2.0-OpenSSH_5.3 My (simplified) cron ...
1
vote
2answers
57 views

Open the SSH Door to a Knocking Friend

I am logged into my Debian machine. I want my friend to get in via SSH. He comes to authenticate as the user friend. My machine asks him for a password. He does not know the password. I want to ...
0
votes
2answers
15 views

Why are my OpenSSH keys stored in OpenLDAP returned base64 encoded

I'm doing an experiment on my Ubuntu server and have stored OpenSSH keys in the OpenLDAP server. There are enough examples around how to achieve this. A good source is this one. Somehow my keys are ...
2
votes
0answers
83 views

scp does not honor .ssh/config

Used for a few years arcfour as default cipher for SSH2 connection in my ~/.ssh/config file host namaka hostname localhost port 2022 ciphers arcfour IdentityFile ~/.ssh/virtualbox ...
2
votes
1answer
22 views

Display full settings of sshd

The OpenSSH daemon has many "default" values for its settings. So looking at the sshd_config might not give someone the complete set of active settings. How to display the full sshd configuration ...
5
votes
3answers
42 views

How to make SSH's `ControlPath` distinguish between IPv4 and IPv6?

I'm using ControlMaster auto ControlPath ~/.ssh/tmp/%l_%r@%h:%p in my ~/.ssh/config to open multiple sessions using the same connection when accessing a host via SSH. That works fine for ...
0
votes
1answer
14 views

ssh-copy-id doesn't copy to non-default location

Does ssh-copy-id recognize if the authorized_keys file is not in ~/.ssh? I am storing my authorized keys file in a different folder, which I have configured as: AuthorizedKeysFile ...
3
votes
1answer
281 views

How to access my local network from anywhere over ssh?

What do I have to do to be able to access my local network over ssh with a dynamic IP address?
0
votes
0answers
42 views

SMTP traffic being forwarded through SSH even do AllowTcpForwarding is disabled

I have a situation on one server, where it seems to be spaming over traffic being sent over SSH tunnel. Output below shows connections being made to remote SMTP server that seem to be initiated over ...
1
vote
1answer
82 views

How to discriminate between SSH and SCP for QoS in OpenWRT (and other systems)?

I regularly upload large amounts of data using SCP through my DSL upstream connection, which is limited to 1kbit/s. While I really want interactive SSH sessions to have highest priority, simply ...
0
votes
0answers
33 views

Forward only one port in openvpn

I have a ‍openvpn server in Amazon Cloud and I use it to make a link between my home pc and linux computer which is located on a corporate network. It works except that it routes all traffic through ...
1
vote
1answer
37 views

Appending a line to a file via a ssh chain

From my machine A, I got access to a machine B that can access a machine C. From A, I want to append a line to the file ~/.profile of C. So far I tried: ssh user@B ssh user@C "echo \"line of ...
0
votes
1answer
249 views

SSH Server Not Responding to Connection Request

I'm attempting to set up an SSH server on my local machine using OpenSSH. When I try to SSH from a remote host into my local SSH server, the SSH server doesn't respond and the request times out. I'm ...
1
vote
0answers
37 views

OpenSSH Server as Tor Hidden Service

What exactly is considered best practice when setting up an open SSH server as a Tor hidden service? I do it this way, but I feel like there's a better way of doing this: I just set SSH up as a ...
0
votes
2answers
53 views

Setting Up SSH. Just need some understanding

My goal is to build a LAMP server on my arch linux laptop. The main reason is for a web server. The other reason is to learn about how all this administration stuff works. My setup is a laptop with ...
2
votes
1answer
48 views

Configure OpenSSH server not to require password *or* key for a particular user

For the purpose of a training session, I'd like to make it possible for a particular user to connect without requiring a password or key-based authentication. I do not know the IPs or other data of ...
2
votes
1answer
45 views

OpenSSH-Server: How can I remotely set the client's side window title?

I have an OpenSSH server running under Ubuntu 14.04LTS. I'm connecting to it from a Windows 7 machine via PuTTY's SSH client. I have found this option on Putty client named Disable remote-controlled ...
2
votes
1answer
76 views

ssh-copy-id: why is the end of my public key different on my local vs remote?

Usually in the past I've always manually copied over my SSH public key to the remotes where necessary. I'm on a Mac and I finally decided to start using ssh-copy-id to make my life simpler, so I just ...
2
votes
1answer
97 views

Does `ssh -D` proxy DNS request?

Is DNS resolution tunneled to the other end when I use a SOCKS proxy created with ssh -D? I have read the manual, searched the Internet, and found no documentation relevant.
1
vote
1answer
597 views

How to set up chrooted and non-chrooted sftp?

I am trying to set up my Openssh server to allow for chrooted sftp-only users as well as for non-chrooted sftp and ssh users. My condensed (comments and blank lines removed) /etc/ssh/sshd_config looks ...
2
votes
0answers
64 views

ssh terminating immediately with message Terminated

I have tried following command on my local system (Ubuntu 14.04 LTS): $ ssh localhost The authenticity of host 'localhost (127.0.0.1)' can't be established. ECDSA key fingerprint is ...
2
votes
2answers
71 views

Use a dynamically obtained hostname with an ssh config entry

Our accounts in our lab are all mounted over NFS and are accessible over all the systems in a subnet. So, effectively we can ssh into any of the machines in the subnet and continue our work. The ...
2
votes
0answers
182 views

Force OpenSSH / pam / pam_ldapd to do pam_ldapd(sshd:auth) with public-key authentication

I have working pam_ldap authentication using libpam_ldapd. I'm using slapo-nssov and want to use loginStatus attribute which is added to users ldap entry after opening pam session and deleted when its ...
0
votes
0answers
36 views

Cygwin and OpenSSH

I am having issues setting up and installing the latest Cygwin with Openssh. Similar to this issue Installing SSH via Cygwin I can get this setup and working fine when the server is not connected ...
2
votes
1answer
69 views

Arch Linux openSSH frequently drops connection

I'm running a VM using Oracle's VirtualBox. The OS is the latest version of Arch, 64-bit. For some odd reason, every so often (frequently enough to be very annoying and making it almost impossible ...
0
votes
1answer
53 views

SFTP Chroot and SSH

I have a chrooted SFTP user group to access my home server. The chroot location is /mnt/, mostly because it is already owned by root and is where I have mounted the external HDD I want to the chrooted ...
-1
votes
1answer
1k views

How to install openssh-server on openSUSE

I recently installed openSUSE, and I want to set up an ssh server so that I can ssh into this machine. However, I am having trouble installing openssh-server. I have tried $ sudo zypper install ...
2
votes
2answers
112 views

Chroot user exit jail [duplicate]

I am using OpenSSH chrootdirectory feature to give access to a user via ssh. Can this user exit the jail and return to the normal OS environment? Maybe with su?
1
vote
1answer
60 views

Integer after username in OpenSSH client separated by colon

I have a reverse SSH server in Cisco router(runs IOS operating system) and it listens on port 2001: C1841#sh control-plane host open-ports Active internet connections (servers and established) Prot ...
0
votes
1answer
76 views

Running 2 OpenVPN on the same box

(Fist of all, I'm a total Unix newbie). I know I can create two (or more) user accounts with root privileges, and I can access them independtly through SSH sessions. But I don't know how Unix systems ...
1
vote
1answer
164 views

Restrict SSH login to local network: VPN connection not allowed

There are two (unix) users who are allowed to connect to my Debian Wheezy server using ssh: git and peter. While git is allowed to connect from everywhere, peter (who is in the sudo group) should be ...
0
votes
1answer
185 views

Compiling LibSSH2 with specific LibSSL

I have downloaded and compiled the latest version of libssl, the result of which is located at /usr/local/ssl. I want to compile libssh2 using the files in this folder, and to do that I've set the ...
1
vote
2answers
264 views

SSH via cert-authority

I'm trying to use SSH using signed certificates. I'm using ssh -i keys/client.key to connect to the target device. If I generate a public key from that private key (with ssh-keygen -y -f ...
2
votes
2answers
150 views

RPM Says Shared Object Is Missing But I Can Find It With ls

Having a problem installing an openssh rpm I hand-rolled today: [root@local_host ]# rpm -i openssh-6.7p1-1.i386.rpm error: Failed dependencies: libcrypto.so.1.0.0 is needed by ...
0
votes
0answers
11 views

SSH tunneling error: “channel 1016:: open failed: administratively prohibited: open failed” [duplicate]

when I use config file in the /home/username/.ssh/config to connect to localhost with ssh, I get the following results: channel 1016: open failed: administratively prohibited: open failed channel ...
1
vote
0answers
253 views

openssh-server doesn't start in Docker container

I am having a weird problem. I am not able to ssh to docker container having ip address 172.17.0.61. I am getting following error: $ ssh 172.17.0.61 ssh: connect to host 172.17.0.61 port 22: ...
2
votes
0answers
29 views

Placing OpenSSH control socket in /run

OpenSSH has a feature that allows you to multiplex connections over a controlsocket. It is generally accepted that these control sockets should not reside in a common area, due to the security issues ...
0
votes
0answers
204 views

restrict ssh access to /bin and using bash as a shell

I want to restrict my admin user to /bin directory while permitting to use bash as a shell via ssh. This is in my sshd_config file: Match User admin ChrootDirectory /bin X11Forwarding no ...
1
vote
1answer
61 views

Can OpenSSH 6.7 optionally not depend on OpenSSL?

It has been reported on Slashdot on 2014-04-30 that OpenSSH now has a compile-time option to not depend on OpenSSL. However, OpenSSH 6.7 release notes, released on 2014-10-06, do not make any mention ...
7
votes
5answers
2k views

Use two different ip addresses per host in SSH

I have a server, named gamma, constantly up and running at work. Sometimes I connect to it from at home, in which case I use the public IP address 55.22.33.99. Sometimes, I connect to it when I'm at ...
4
votes
1answer
13k views

Installing fail2ban on CentOS 7

I am using @GarethTheRed 's answer to this question to install fail2ban on a remote CentOS 7 server. I am able to complete all the steps up until tail -f /var/log/fail2ban.log, at which point I get ...
1
vote
2answers
72 views

downloading sshd logs from remote centos 7 server

When I log into a remote centos 7 server as root, I am able to see the sshd logs by typing journalctl _COMM=sshd in the terminal. But the logs are massive. How can I download all the logs into a ...
0
votes
0answers
265 views

SSH client connection not working to remote servers not working

I am unable to connect to other machines from one of my servers. Here is the verbose output (IP, domain, port are masked. OpenSSH version info removed): $ ssh -vvv user@example.com -p yyyy debug1: ...
0
votes
1answer
183 views

CentOS 7 VPN server

How do I set up a remote internet web server using CentOS 7 so that it is completely shielded by a VPN? Here is the use case: 1.) This means that ALL requests for ANY interaction with the web ...
0
votes
1answer
36 views

SSH connection gets lost, but not when logged in to MySQL

When I open an SSH connection to our database server and leave it open for a longer time, the connection gets lost at some point. I don't know why or how, but this happens a lot. I still see the ...