Questions about the OpenSSH implementation of the ssh protocol.

learn more… | top users | synonyms

0
votes
0answers
105 views

Problem with OpenSSH

I think I got an OpenSSH-problem with my Ubuntu Server 14.04.1. Let me explain my setup: For development, I use Git and Gitolite. I have 3 server: server A ( master-server for git-mirroring) ...
3
votes
1answer
24k views

What is the default idle timeout for OpenSSH?

I can't seem to find an answer to this simple question, which I need for some compliance documentation. On a default install of CentOS 6.5 (OpenSSH 5.3p1-94.el6), after how long of being idle will ...
3
votes
1answer
966 views

Only apply Match keyword to single Host in ssh config

I have a host which I ssh into. Sometimes I'm inside the same network, and can ssh directly into it, other times I'm outside it and I need to use a proxy. Because ssh via the proxy server is much ...
2
votes
1answer
333 views

public key authentication without authorized_keys file

I have a lot of ssh public key logins on a Linux server, e.g.: Jul 25 11:41:01 host sshd[24594]: Accepted publickey for root from xxx.xxx.xx.xx port 33374 ssh2 This is strange for me since there's ...
3
votes
3answers
40 views

Submit an updated manpage

I found missing information in the manpage for scp when using IP6: there is no hint that you have to use slash masked brackets around the IP when using scp -6: scp -6 ...
4
votes
2answers
853 views

Starting SSH server after VPN starts

I am running an OpenVPN server on Ubuntu 14.04 as well as OpenSSH. I have my SSH server configured to bind to an IP address on my VPN interface. Once my machine boots, binding to that IP fails. ...
26
votes
2answers
4k views

What's the purpose of the randomart image for user (not host) SSH keys?

The ssh-keygen generates the following output: The key fingerprint is: dd:e7:25:b3:e2:5b:d9:f0:25:28:9d:50:a2:c9:44:97 user@machine The key's randomart image is: +--[ RSA 2048]----+ | .o o.. ...
4
votes
0answers
1k views

Can't figure out why ssh_exchange_identification: Connection closed by remote host appear

At home, I have setup a Raspberry Pi with the latest version of Raspbian and with ssh enabled. I also use a Mac Book Pro with OS X 10.9.3. I use ssh pi@192.168.0.22 to do some work on the Raspberry ...
3
votes
1answer
329 views

openSuse, new user cannot login

I am using openSuse 12.3. I have created a new user using: linux-amvn:~ # useradd -m -G users,dev -s /bin/bash -p pass123 harbir-PC The user harbir-PC is not able to login, when I try to log using ...
1
vote
0answers
111 views

How to get information from sshd about established remote tunnels

I have a server running on which from many different places people log on via ssh and open remote ssh-tunnels to other places behind different firewalls. Now I want to try to get an overview, which ...
1
vote
0answers
14 views

Why does wget return a HTTP 403 error to download openSSH pet? [duplicate]

I am trying to learn how I would get OpenSSH using the command line. I found a *.pet link on this webpage: http://puppylinux.org/wikka/OpenSSH which says: Installation Install an appropriate ...
14
votes
1answer
48k views

how to connect ssh 'with' specified port?

I know how to connect 'to' a certain port when ssh'ing. ssh user@remotehostip -p XXX but is there a way to establish a ssh 'with' a certain port? I mean, is there a way to specify the port which ...
9
votes
4answers
5k views

Local, timestamped logging of all ssh commands?

How can I keep a local, timestamped record of all remote commands I use in ssh (command-line openssh client started through bash)? Requirements: Essential: 100% client-side without relying on ...
5
votes
1answer
2k views

How to exclude from a “Match Group” in SSHD?

There is a Match group in the SSHD config: cat /etc/ssh/sshd_config ... Match Group FOOGROUP ForceCommand /bin/customshell ... There are many users on the machine that are in the ...
3
votes
2answers
3k views

Help updating OpenSSH to v6.6

My system is vulnerable to OpenSSH Wildcards on AcceptEnv Vulnerability, CVE-2014-2532. I have tried to update openssh to version 6.6 for centos but I can not get repository[sic] for that version. ...
1
vote
1answer
515 views

Compiling OpenSSH client or Dropbear for Android

I have an interesting problem. I'd like to use a private SSH key with my Android Terminal Emulator (jackpal.androidterm). I'd like to install the private key in a fairly-secure location and be able ...
4
votes
1answer
2k views

Are dropbear and OpenSSH host keys compatible?

The title basically says it all. But mind: host key, not the login key. And if they're not compatible out of the box, is there a way to convert between them - and what would be the steps in that ...
3
votes
1answer
448 views

Is there a way to run a privileged command upon successful SSH login (not necessarily with shell or PTY)?

I'd like to run a privileged command upon successful SSH logins at the server's end. However, this has to be in the server configuration (sshd_config or anything else that cannot be manipulated or ...
3
votes
2answers
6k views

check if latest openssh patch provided by RHEL is installed

We have encountered a security threat in one of our RHEL servers which says the SSH server is configured to use Cipher Block Chaining. As far as I know, the RHEL systems provide security updates ...
7
votes
2answers
722 views

Determine dynamically allocated port for OpenSSH RemoteForward

Question (TL;DR) When assigning ports dynamically for remote forwarding (a.k.a. -R option), how can a script on the remote machine (for instance sourced from .bashrc) determine which ports were ...
5
votes
1answer
2k views

Generate own (stronger) RSA host key for OpenSSH?

I would like to replace the default 2048 bit host key generated when installing OpenSSH or starting it the first time with one of 4096 bit length. This leads to two questions: Does OpenSSH allow ...
0
votes
3answers
7k views

How I Determine The latest OpenSSL patch is installed?

This post is about applying the latest patch for OpenSSL to protect our port 443 web traffic, not using ssh to log into these systems. I went and obtained the lastest OpenSSL tarball source patch ...
2
votes
2answers
182 views

using ssh-agent

I have my desktop in the office. When X starts, ssh-agent starts automatically. I have to add my SSH key once, at the beginning, and then I can use ssh without having to enter my password each time. ...
6
votes
3answers
2k views

How to prevent “Last Login:” message from showing up when using sftp?

In Ubuntu GNU/Linux 12.04, I have a user johndoe that is part of an sftponly group, set up to sftp to a chroot jail using Subsystem sftp internal-sftp Match Group sftponly ChrootDirectory %h ...
4
votes
1answer
3k views

Force ssh to always use SSH_ASKPASS

I want to force ssh to always use the program specified by SSH_ASKPASS. In my case the program is just a bash script returning the passphrase. The problem is, as the ssh documentation says: If ...
4
votes
1answer
133 views

Accept any private key for authentication

Is it possible to configure OpenSSH (or any other standard sshd) to accept any key offered by a connecting client? EG ssh -i ~/arbitraryKey hostname grants a login shell while ssh hostanme doesn't. ...
1
vote
1answer
2k views

Understand debug messages from sshd [closed]

I'm using OpenSSH_5.8p1 in my machine,I'm connecting my machine using putty client but its slower so I have ran sshd in debug mode and found following messages can any one explain me in detail about ...
3
votes
2answers
245 views

Denying “/opt/” access for SFTP Users other than particular dir

This is my first (newbie) post here in unix stackexchange. I want to use my WebServer (Debian) as SFTPServer giving access to particular employees. The dir structure is as follows under root: ...
0
votes
0answers
197 views

sshd without pam slower

I am running OpenSSH_6.5 with UsePAM yes in my board. I have observed that with UsePAM no in /etc/ssh/sshd_config, sshd runs slower than previous case. How is this possible? My understanding is ...
1
vote
1answer
501 views

ssh connection fails after login at one user

Have server with 2 users - (e.g. - user and root). SSH login to root works corrctly. But I can't login to user - it immediatelly fails with "write failed - broken pipe" after login. ssh -vvv ...
2
votes
1answer
4k views

How can I have a SSH banner appear BEFORE the “login as:” prompt? [duplicate]

CentOS 5.x When I enable the Banner /path/to/banner parameter in my sshd config file, the banner displays AFTER the login as: prompt. For example: login as: foo ...
14
votes
1answer
21k views

Single command to login to SSH and run program?

Is there a way to structure a single command to login via SSH to a remote server and run a program on the remote login shell? In the OpenSSH manual, it reads "If command is specified, it is executed ...
1
vote
0answers
275 views

git push in gnome-term crashes my window manager

In terminal in awesome wm when i git push awesome wm freezes. so i move over to tty2 and log in. top shows awesome at %100 cpu. ps aux | grep [g]it output git-remote-https origin ...
0
votes
1answer
669 views

SSH to Linux Container from Other Machine

I am trying to learn about Linux Containers and this is my first encounter with servers, ssh and many other things that I do not know the terms yet. I create five different containers and authorized ...
1
vote
1answer
2k views

Double port forwarding - SSH

NOTE: I'm not explaining why I want to do this. But here is the requirement. There are 4 hosts. Host A, Host B, Host C, Host D Host A is running some application which can be accessed at port 8001 ...
5
votes
2answers
359 views

Why are rules not combining in an ssh config file?

It seems like the following would work as expected, i.e., that the second rule, having a hostname that matches the first rule, would apply it. Host *.hostname.com User myuser IdentityFile ...
1
vote
1answer
721 views

Setting the bash SHELL for remote openSSH connections?

I am connected to a Freebsd 10 -STABLE server with SSH from my office box but when I trying to work inside the session I encounter these problems: although I did chsh for every user in said server ...
0
votes
1answer
177 views

Linux Fedora Core 18 freezes on OpenSSH login

miagos:~ $ uname -a Linux miagos 3.9.6-200.fc18.x86_64 #1 SMP Thu Jun 13 18:56:55 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux I have a reproducible issue, when my desktop Linux node stays online for more ...
17
votes
5answers
53k views

Where are my sshd logs?

I can't find my sshd logs in the standard places. What I've tried: Not in /var/log/auth.log Not in /var/log/secure Did a system search for 'auth.log' and found nothing I've set /etc/ssh/sshd_config ...
4
votes
2answers
437 views

SSH - How to make X applications run on client?

I have the reverse problem that most people seem to be having. If I start an X application while logged into ssh, it displays on the server(host) machine instead of the client(local). This is the ...
0
votes
1answer
116 views

Supply additional ssh options in config file

How can I supply additional options in .ssh/config? I know that information like Host, Port, User etc. may be used in the ssh-configuration file to abbreviate ssh commands. I frequently create ...
1
vote
1answer
3k views

OpenSSH hangs after login without showing login prompt

I ran across an issue with ssh after fresh Ubuntu 13.10 installation on Lenovo T420. I tried git pull (which failed) and this led me to more general ssh failing. After spending some 2-3 hrs of ...
1
vote
1answer
1k views

ssh_exchange_identification: Connection closed by remote host on vnx machine (linux)

I changed the password of my linux machine . I was able to login for sometime and after that I am not able to ssh. I am getting the following error: ssh es4042cs -v OpenSSH_5.1p1, OpenSSL ...
3
votes
1answer
955 views

Disable ForwardX11Timeout without ForwardX11Trusted in OpenSSH Client?

By default, recent versions of OpenSSH automatically set ForwardX11Timeout to 20 minutes if you set ForwardX11Trusted to no. This means that 20 minutes after you start your ssh connection, you can't ...
5
votes
3answers
3k views

SSH access from inside and outside a LAN using the same terminal command

I have a Raspberry Pi (RPi) and I am making remote connections to it using ssh. I have managed to set up ssh correctly such that I can access the RPi both from a local area network and from the ...
0
votes
0answers
443 views

How can I get ssh working on Mint Olivia?

I have a Mint KDE VM (under VMware Fusion on Mavericks), and it is refusing ssh connections. I have not enabled UFW, and openssh-server installed without reported error. However, when I attempt to ...
2
votes
3answers
3k views

Trying to SSH into my Android phone, but connection closed

I am trying to use the ssh/sftp Daemon app on Android, and SSHing into the phone using an openssh client. Here is the verbose output I get right before the connection breaks debug1: Authentication ...
1
vote
1answer
487 views

Session limit for OpenSSH server on Ubuntu Desktop 7.10

I need restrict session limit on my OpenSSH server only for one session (one connection). I use Ubuntu Desktop 7.10. Of course Version is old, but I need it for experimental purposes. I tried modify ...
1
vote
3answers
627 views

Can't ssh to a machine

All of a sudden, I couldn't ssh to a machine to which I used to ssh earlier. Consider I am ssh-ing from A to B. Output when I run ssh root@ip_addr_of_B I get: Permission denied ...
5
votes
1answer
5k views

sFTP server fails to start

I'm having problems getting sFTP working while there are no problems with ssh. I'm basically building zlib, openssl, and openssh for an ARM processor using an existing embedded Linux filesystem. After ...