Questions about the OpenSSH implementation of the ssh protocol.

learn more… | top users | synonyms

1
vote
1answer
15 views

How to discriminate between SSH and SCP for QoS in OpenWRT (and other systems)?

I regularly upload large amounts of data using SCP through my DSL upstream connection, which is limited to 1kbit/s. While I really want interactive SSH sessions to have highest priority, simply ...
0
votes
0answers
18 views

Forward only one port in openvpn

I have a ‍openvpn server in Amazon Cloud and I use it to make a link between my home pc and linux computer which is located on a corporate network. It works except that it routes all traffic through ...
1
vote
1answer
31 views

Appending a line to a file via a ssh chain

From my machine A, I got access to a machine B that can access a machine C. From A, I want to append a line to the file ~/.profile of C. So far I tried: ssh user@B ssh user@C "echo \"line of ...
3
votes
1answer
1k views

ssh-add -D doesn't erase stored keys from the ssh-agent

How come this happens?: stan@tcpc:~/.ssh$ ssh-add -l 8192 e0:45:5e:cc:45:3e:17:2b:a6:54:6f:8d:53:1b:j2:e3 github (RSA) 2048 25:41:53:a6:45:5d:ac:eb:5c:45:f8:ce:42:a9:he:aa BITBUCKET (RSA) ...
1
vote
1answer
2k views

OpenSSH hangs after login without showing login prompt

I ran across an issue with ssh after fresh Ubuntu 13.10 installation on Lenovo T420. I tried git pull (which failed) and this led me to more general ssh failing. After spending some 2-3 hrs of ...
0
votes
1answer
1k views

Double port forwarding - SSH

NOTE: I'm not explaining why I want to do this. But here is the requirement. There are 4 hosts. Host A, Host B, Host C, Host D Host A is running some application which can be accessed at port 8001 ...
5
votes
3answers
2k views

SSH access from inside and outside a LAN using the same terminal command

I have a Raspberry Pi (RPi) and I am making remote connections to it using ssh. I have managed to set up ssh correctly such that I can access the RPi both from a local area network and from the ...
1
vote
3answers
880 views

Intermittent 'ssh_exchange_identification: Connection closed by remote host' error

While there are many questions on this site and others addressing this very issue, I haven't yet found one that seems to address what I'm experiencing. When trying to ssh a linux box from a MBpro ...
2
votes
3answers
3k views

Can't SSH into Any Server

I work on remote servers frequently, but for some reason I cannot discern, today I am unable to ssh into anything. Everything comes back with Write failed: broken pipe. I know this is a common ...
0
votes
1answer
69 views

SSH Server Not Responding to Connection Request

I'm attempting to set up an SSH server on my local machine using OpenSSH. When I try to SSH from a remote host into my local SSH server, the SSH server doesn't respond and the request times out. I'm ...
9
votes
4answers
3k views

Local, timestamped logging of all ssh commands?

How can I keep a local, timestamped record of all remote commands I use in ssh (command-line openssh client started through bash)? Requirements: Essential: 100% client-side without relying on ...
1
vote
0answers
21 views

OpenSSH Server as Tor Hidden Service

What exactly is considered best practice when setting up an open SSH server as a Tor hidden service? I do it this way, but I feel like there's a better way of doing this: I just set SSH up as a ...
0
votes
2answers
45 views

Setting Up SSH. Just need some understanding

My goal is to build a LAMP server on my arch linux laptop. The main reason is for a web server. The other reason is to learn about how all this administration stuff works. My setup is a laptop with ...
16
votes
3answers
14k views

What difference between openssh key and putty key?

I've found that ssh-keygen ("ssh" package) produces different keys from puttygen ("putty" package). If I create public and private keys with ssh-keygen some ssh-servers will not accept my keys. If I ...
2
votes
1answer
45 views

Configure OpenSSH server not to require password *or* key for a particular user

For the purpose of a training session, I'd like to make it possible for a particular user to connect without requiring a password or key-based authentication. I do not know the IPs or other data of ...
2
votes
1answer
33 views

OpenSSH-Server: How can I remotely set the client's side window title?

I have an OpenSSH server running under Ubuntu 14.04LTS. I'm connecting to it from a Windows 7 machine via PuTTY's SSH client. I have found this option on Putty client named Disable remote-controlled ...
2
votes
1answer
56 views

ssh-copy-id: why is the end of my public key different on my local vs remote?

Usually in the past I've always manually copied over my SSH public key to the remotes where necessary. I'm on a Mac and I finally decided to start using ssh-copy-id to make my life simpler, so I just ...
1
vote
2answers
38 views

Does `ssh -D` proxy DNS request?

Is DNS resolution tunneled to the other end when I use a SOCKS proxy created with ssh -D? I have read the manual, searched the Internet, and found no documentation relevant.
3
votes
1answer
9k views

installing fail2ban on CentOS 7

I am using @GarethTheRed 's answer to this question to install fail2ban on a remote CentOS 7 server. I am able to complete all the steps up until tail -f /var/log/fail2ban.log, at which point I get ...
1
vote
1answer
252 views

How to set up chrooted and non-chrooted sftp?

I am trying to set up my Openssh server to allow for chrooted sftp-only users as well as for non-chrooted sftp and ssh users. My condensed (comments and blank lines removed) /etc/ssh/sshd_config looks ...
2
votes
0answers
49 views

ssh terminating immediately with message Terminated

I have tried following command on my local system (Ubuntu 14.04 LTS): $ ssh localhost The authenticity of host 'localhost (127.0.0.1)' can't be established. ECDSA key fingerprint is ...
2
votes
2answers
41 views

Use a dynamically obtained hostname with an ssh config entry

Our accounts in our lab are all mounted over NFS and are accessible over all the systems in a subnet. So, effectively we can ssh into any of the machines in the subnet and continue our work. The ...
2
votes
0answers
124 views

Force OpenSSH / pam / pam_ldapd to do pam_ldapd(sshd:auth) with public-key authentication

I have working pam_ldap authentication using libpam_ldapd. I'm using slapo-nssov and want to use loginStatus attribute which is added to users ldap entry after opening pam session and deleted when its ...
8
votes
1answer
12k views

Single command to login to SSH and run program?

Is there a way to structure a single command to login via SSH to a remote server and run a program on the remote login shell? In the OpenSSH manual, it reads "If command is specified, it is executed ...
0
votes
0answers
31 views

Cygwin and OpenSSH

I am having issues setting up and installing the latest Cygwin with Openssh. Similar to this issue Installing SSH via Cygwin I can get this setup and working fine when the server is not connected ...
2
votes
1answer
46 views

Arch Linux openSSH frequently drops connection

I'm running a VM using Oracle's VirtualBox. The OS is the latest version of Arch, 64-bit. For some odd reason, every so often (frequently enough to be very annoying and making it almost impossible ...
0
votes
1answer
45 views

SFTP Chroot and SSH

I have a chrooted SFTP user group to access my home server. The chroot location is /mnt/, mostly because it is already owned by root and is where I have mounted the external HDD I want to the chrooted ...
-1
votes
1answer
671 views

How to install openssh-server on openSUSE

I recently installed openSUSE, and I want to set up an ssh server so that I can ssh into this machine. However, I am having trouble installing openssh-server. I have tried $ sudo zypper install ...
2
votes
2answers
83 views

Chroot user exit jail [duplicate]

I am using OpenSSH chrootdirectory feature to give access to a user via ssh. Can this user exit the jail and return to the normal OS environment? Maybe with su?
1
vote
1answer
47 views

Integer after username in OpenSSH client separated by colon

I have a reverse SSH server in Cisco router(runs IOS operating system) and it listens on port 2001: C1841#sh control-plane host open-ports Active internet connections (servers and established) Prot ...
3
votes
2answers
2k views

Help updating OpenSSH to v6.6

My system is vulnerable to OpenSSH Wildcards on AcceptEnv Vulnerability, CVE-2014-2532. I have tried to update openssh to version 6.6 for centos but I can not get repository[sic] for that version. ...
0
votes
1answer
67 views

Running 2 OpenVPN on the same box

(Fist of all, I'm a total Unix newbie). I know I can create two (or more) user accounts with root privileges, and I can access them independtly through SSH sessions. But I don't know how Unix systems ...
1
vote
1answer
99 views

Restrict SSH login to local network: VPN connection not allowed

There are two (unix) users who are allowed to connect to my Debian Wheezy server using ssh: git and peter. While git is allowed to connect from everywhere, peter (who is in the sudo group) should be ...
0
votes
1answer
93 views

Compiling LibSSH2 with specific LibSSL

I have downloaded and compiled the latest version of libssl, the result of which is located at /usr/local/ssl. I want to compile libssh2 using the files in this folder, and to do that I've set the ...
3
votes
3answers
494 views

How to install openssh in Crux Linux

In Crux Linux I already have installed SSH but when I use ssh-keygen, and try to use the command: ssh localhost to test SSH I get this error: # ssh localhost ssh: connect to host localhost port ...
1
vote
2answers
155 views

SSH via cert-authority

I'm trying to use SSH using signed certificates. I'm using ssh -i keys/client.key to connect to the target device. If I generate a public key from that private key (with ssh-keygen -y -f ...
2
votes
2answers
106 views

RPM Says Shared Object Is Missing But I Can Find It With ls

Having a problem installing an openssh rpm I hand-rolled today: [root@local_host ]# rpm -i openssh-6.7p1-1.i386.rpm error: Failed dependencies: libcrypto.so.1.0.0 is needed by ...
0
votes
0answers
11 views

SSH tunneling error: “channel 1016:: open failed: administratively prohibited: open failed” [duplicate]

when I use config file in the /home/username/.ssh/config to connect to localhost with ssh, I get the following results: channel 1016: open failed: administratively prohibited: open failed channel ...
1
vote
0answers
222 views

openssh-server doesn't start in Docker container

I am having a weird problem. I am not able to ssh to docker container having ip address 172.17.0.61. I am getting following error: $ ssh 172.17.0.61 ssh: connect to host 172.17.0.61 port 22: ...
2
votes
0answers
27 views

Placing OpenSSH control socket in /run

OpenSSH has a feature that allows you to multiplex connections over a controlsocket. It is generally accepted that these control sockets should not reside in a common area, due to the security issues ...
0
votes
0answers
153 views

restrict ssh access to /bin and using bash as a shell

I want to restrict my admin user to /bin directory while permitting to use bash as a shell via ssh. This is in my sshd_config file: Match User admin ChrootDirectory /bin X11Forwarding no ...
1
vote
1answer
50 views

Can OpenSSH 6.7 optionally not depend on OpenSSL?

It has been reported on Slashdot on 2014-04-30 that OpenSSH now has a compile-time option to not depend on OpenSSL. However, OpenSSH 6.7 release notes, released on 2014-10-06, do not make any mention ...
7
votes
5answers
1k views

Use two different ip addresses per host in SSH

I have a server, named gamma, constantly up and running at work. Sometimes I connect to it from at home, in which case I use the public IP address 55.22.33.99. Sometimes, I connect to it when I'm at ...
1
vote
2answers
64 views

downloading sshd logs from remote centos 7 server

When I log into a remote centos 7 server as root, I am able to see the sshd logs by typing journalctl _COMM=sshd in the terminal. But the logs are massive. How can I download all the logs into a ...
0
votes
0answers
188 views

SSH client connection not working to remote servers not working

I am unable to connect to other machines from one of my servers. Here is the verbose output (IP, domain, port are masked. OpenSSH version info removed): $ ssh -vvv user@example.com -p yyyy debug1: ...
0
votes
1answer
167 views

CentOS 7 VPN server

How do I set up a remote internet web server using CentOS 7 so that it is completely shielded by a VPN? Here is the use case: 1.) This means that ALL requests for ANY interaction with the web ...
0
votes
1answer
35 views

SSH connection gets lost, but not when logged in to MySQL

When I open an SSH connection to our database server and leave it open for a longer time, the connection gets lost at some point. I don't know why or how, but this happens a lot. I still see the ...
2
votes
1answer
35 views

Programatically / dynamically adjust SSH session port forwards

I have a workflow where I am trying to do the following: For a given existing SSH session, access the remote machinne and perform a process from which a port is returned (e.g. a remote daemon has ...
2
votes
1answer
121 views

restricting remote vpn login to ip address in CentOS 7

I have read that OpenSSH itself does not support authentication via specific IP address. In a CentOS 7 installation on a web server, how would one configure the login so that a user would not only ...
1
vote
2answers
253 views

SSH PC at office in local network from home

My office has one default gateway and behind that is a local network with locally assigned IP addresses to all computers including mine. I hold admin in my Ubuntu installed office PC and is it ...