Questions about the OpenSSH implementation of the ssh protocol.

learn more… | top users | synonyms

2
votes
2answers
1k views

OpenSSH, chroot user: Root needs to own the user directory, is there any consequence?

I want to create an account for my friend on my computer, but I don't want my friend to be able to view all my files. I saw that with OpenSSH, there is an option for that. Inside the SSHD ...
1
vote
3answers
2k views

Can't SSH into Any Server

I work on remote servers frequently, but for some reason I cannot discern, today I am unable to ssh into anything. Everything comes back with Write failed: broken pipe. I know this is a common ...
6
votes
1answer
2k views

how to set the sftp -s subsystem option in a configuration file

The sftp command supports a subsystem option (-s) which allows the remote user to select the remote sftp-server executable, and optionally upgrade to sudo in the process like so; sftp -s ...
2
votes
1answer
557 views

How to setup port redirection after a ssh connection has been opened?

I'm using openssh on both client and server. I know I can run ssh -L or ssh -R to setup some port redirections over ssh. However, since they are command-line parameters, such redirections must be ...
13
votes
3answers
16k views

How do I convert a ssh-keygen public key into a format that openssl PEM_read_bio_RSA_PUBKEY() function will consume?

I'm having an issue generating a public key that the openssl PEM_read_bio_RSA_PUBKEY() function can consume. I keep getting errors. Obviously I cannot simply use the ASCII string in the ssh-keygen ...
2
votes
1answer
714 views

List ports tunnelled on OpenSSH server

Is there any way to list the tunnels that SSH clients connected to my OpenSSH server have set up? I can use e.g. lsof -i to show connections that are being actively tunnelled, but I'd like to be able ...
3
votes
3answers
455 views

How to install openssh in Crux Linux

In Crux Linux I already have installed SSH but when I use ssh-keygen, and try to use the command: ssh localhost to test SSH I get this error: # ssh localhost ssh: connect to host localhost port ...
3
votes
3answers
18k views

How to ssh to remote server using a private key?

I have two servers. Both servers are in CentOS 5.6. I want to SSH from Server 1 to Server 2 using a private key I have (OpenSSH SSH-2 Private Key). I don't know how to do it over unix. But what I did ...
11
votes
1answer
4k views

Limits of SSH multiplexing

I have the following entry in my .ssh/config file Host AAA User BBB HostName CCC ControlMaster auto ControlPath ~/.ssh/%r@%h:%p The above allows me to multiplex multiple ssh ...
2
votes
1answer
170 views

Wrapping socket connections

I'd like to wrap an insecure connection (this one: http://culturedcode.com/things/) with a secure tunnel, a bit like http://en.wikipedia.org/wiki/Stunnel does, just using UNIX tools. What's the best ...
7
votes
3answers
14k views

ssh, start a specific shell, and run a command on the remote machine?

I am in a situation where several users are sharing the same user account on a remote machine. I have a "personal" directory where I wrote my own .zshrc file, and I would like to have a way to: ...
3
votes
1answer
5k views

Can ping but can't do ssh

I am able to ping my friend but not able to do ssh. Why so? He is using a modem. I thought there might be some firewall enabled. I told him to type #iptables -F He did that, but still I am not able ...
0
votes
1answer
409 views

Does OpenSSH_5.9p1 support Chrooted SSH?

Lately i upgraded my SSH server with OpenSSH_5.9p1 and tried to setup chrooted SFTP/SSH. So far i managed to setup chrooted access only for SFTP using new feature of openssh5.9p1: Match User ...
6
votes
4answers
379 views

SSH “sleeping” for a long time before connect? [duplicate]

Possible Duplicate: How to speed my too-slow ssh login? I have a very strange issue with my SSH server. Whenever I attempt to connect, it literally waits about 30 seconds to a minute before ...
4
votes
1answer
888 views

Use different authentication methods for OpenSSH server depending on client IP

I'm sure this has been answered before, but I could not locate the answer with Google, and this search. I currently only allow shared key authentication for openssh server on my box. However, I ...
6
votes
1answer
1k views

All about ssh ProxyCommand

I am looking for an in-depth explanation of the following ProxyCommand, down to the nuts and bolts of its operation, please. Can you kindly completely dissect it for me and improve on it if you can? ...
3
votes
5answers
12k views

ssh server: reasons for sudden “Connection closed by remote host”

One of my ec2 servers has stopped receiving ssh connections. The OS is Ubuntu server 8.04, and the ssh server is the standard openssh-server. After months of uptime, I tried to connet to it today, ...
4
votes
3answers
690 views

Is there a way to run an ssh server on an Android device?

I'm looking to install Debian over my Android installation so as to be able to use openssh-server, as it's so much better than Dropbear. Is there an easy way to do this, or just to simply install ...
5
votes
2answers
5k views

Multiple 'Host *' in ssh_config?

My understanding of the way ~/.ssh/config works is that each 'Host ' line takes effect for any host matching after that point in the config file. I have a number of personal servers and work servers ...
0
votes
1answer
678 views

github ssh problem- permission denied(publickey)

I tried setting up git as shown in Github's help page, on Arch linux but there seems to be some problem with the SSH keys. It gives this error- Permission denied (publickey). This problem is ...
6
votes
2answers
1k views

Should I be backing up my SSH host keys?

In my automated backups, I'm not sure if I should be doing this. If the hard drive fails or if I wipe the hard disk and start over, what will be the effect of starting with a new SSH host key to my ...
3
votes
2answers
3k views

SSH slow at starting session

Starting an Interactive shell over SSH is slow to one of my servers. Everything leading up to it including negotiating encryption is fast, but then it hangs for 45 seconds. After that, it finishes ...
22
votes
3answers
20k views

Restricting an SSH/SCP/SFTP user to a directory

Is there a simple way to restrict an SCP/SFTP user to a directory? All methods that I've come across require me to set a chroot jail up by copying binaries, but I don't think that should be necessary. ...
4
votes
1answer
155 views

I can't ssh on localhost at a certain port on os x

Here are basics information: $ which ssh /opt/local/bin/ssh It's like that because I'm using MacPorts and it did install there. I did the sudo port load openssh When doing a netstat -an | grep ...
3
votes
2answers
3k views

making ssh hosts global to all the users on the computer

So SSH has these files that configure settings for a specific user. ~/.ssh/authorized_keys ~/.ssh/config ~/.ssh/id_rsa ~/.ssh/id_rsa.pub ~/.ssh/known_hosts I'd like to globalise some of these ...
11
votes
4answers
5k views

Given keys in ~/.ssh/authorized_keys format, can you determine key strength easily?

~/.ssh/authorized_keys[2] contains the list of public keys. Unfortunately, each public key does not specify the key strength ( number of bits ). Is there a utility that can process this file line by ...