Questions about the OpenSSH implementation of the ssh protocol.

learn more… | top users | synonyms

0
votes
3answers
39 views

Have a server on DigitalOcean only accessibly by SSH, what happens if my computer breaks?

I bought a server/droplet on Digital Ocean and per its recommendations disabled password login so it could only be accessed by SSH key. I understand the SSH security mechanism basically makes it so ...
0
votes
1answer
27 views

Installed OpenSSH on Mint 17 but it doesn't seem to be running

So I've installed OpenSSH on Mint rafaela 17.2, but it doesn't seem to be running when using the modified config file. Not sure why service says its up, but I don't have a PID, don't have a listener, ...
0
votes
1answer
25 views

Disabling openssh host key checking on LAN

If I want to specify for LAN addresses that I don't want to deal with host keys, how do I do that? /etc/ssh/ssh_config Host 192.168.*.* StrictHostKeyChecking no UserKnownHostsFile /dev/null ...
1
vote
2answers
22 views

Unexpected Match behavior in sshd_config

I'm trying to configure the following restrictions in my sshd_config: Users with local IP addresses face no restrictions Users with non-local IP addresses, who are in the sftp group, are allowed to ...
1
vote
1answer
2k views

OpenSSH hangs after login without showing login prompt

I ran across an issue with ssh after fresh Ubuntu 13.10 installation on Lenovo T420. I tried git pull (which failed) and this led me to more general ssh failing. After spending some 2-3 hrs of ...
1
vote
1answer
18 views

Is it possible to chroot sftp service as unprivileged user?

I currently have an sftp-only sshd service running as an unprivileged user that works fine. When adding ChrootDirectory %h to the separate user_sshd_config, the user is immediately disconnected after ...
4
votes
2answers
71 views

How do I list available host key algorithms for an SSH client?

So ssh has the option HostKeyAlgorithms. Sample usage: ssh -o "HostKeyAlgorithms ssh-rsa" user@hostname I'm trying to get the client to connect using the servers ecdsa key, but I can't find what ...
1
vote
1answer
38 views

Prevent ssh-keyscan from generating output

Problem: When running ssh-keyscan in cron it emails me the output of ssh-keyscan every day. The email simply contains the following. # <hostname> SSH-2.0-OpenSSH_5.3 My (simplified) cron ...
1
vote
2answers
58 views

Open the SSH Door to a Knocking Friend

I am logged into my Debian machine. I want my friend to get in via SSH. He comes to authenticate as the user friend. My machine asks him for a password. He does not know the password. I want to ...
0
votes
2answers
15 views

Why are my OpenSSH keys stored in OpenLDAP returned base64 encoded

I'm doing an experiment on my Ubuntu server and have stored OpenSSH keys in the OpenLDAP server. There are enough examples around how to achieve this. A good source is this one. Somehow my keys are ...
4
votes
1answer
13k views

Installing fail2ban on CentOS 7

I am using @GarethTheRed 's answer to this question to install fail2ban on a remote CentOS 7 server. I am able to complete all the steps up until tail -f /var/log/fail2ban.log, at which point I get ...
1
vote
3answers
1k views

Intermittent 'ssh_exchange_identification: Connection closed by remote host' error

While there are many questions on this site and others addressing this very issue, I haven't yet found one that seems to address what I'm experiencing. When trying to ssh a linux box from a MBpro ...
3
votes
1answer
2k views

ssh-add -D doesn't erase stored keys from the ssh-agent

How come this happens?: stan@tcpc:~/.ssh$ ssh-add -l 8192 e0:45:5e:cc:45:3e:17:2b:a6:54:6f:8d:53:1b:j2:e3 github (RSA) 2048 25:41:53:a6:45:5d:ac:eb:5c:45:f8:ce:42:a9:he:aa BITBUCKET (RSA) ...
2
votes
0answers
84 views

scp does not honor .ssh/config

Used for a few years arcfour as default cipher for SSH2 connection in my ~/.ssh/config file host namaka hostname localhost port 2022 ciphers arcfour IdentityFile ~/.ssh/virtualbox ...
5
votes
3answers
44 views

How to make SSH's `ControlPath` distinguish between IPv4 and IPv6?

I'm using ControlMaster auto ControlPath ~/.ssh/tmp/%l_%r@%h:%p in my ~/.ssh/config to open multiple sessions using the same connection when accessing a host via SSH. That works fine for ...
2
votes
1answer
22 views

Display full settings of sshd

The OpenSSH daemon has many "default" values for its settings. So looking at the sshd_config might not give someone the complete set of active settings. How to display the full sshd configuration ...
1
vote
1answer
1k views

Double port forwarding - SSH

NOTE: I'm not explaining why I want to do this. But here is the requirement. There are 4 hosts. Host A, Host B, Host C, Host D Host A is running some application which can be accessed at port 8001 ...
0
votes
1answer
14 views

ssh-copy-id doesn't copy to non-default location

Does ssh-copy-id recognize if the authorized_keys file is not in ~/.ssh? I am storing my authorized keys file in a different folder, which I have configured as: AuthorizedKeysFile ...
3
votes
1answer
284 views

How to access my local network from anywhere over ssh?

What do I have to do to be able to access my local network over ssh with a dynamic IP address?
0
votes
0answers
43 views

SMTP traffic being forwarded through SSH even do AllowTcpForwarding is disabled

I have a situation on one server, where it seems to be spaming over traffic being sent over SSH tunnel. Output below shows connections being made to remote SMTP server that seem to be initiated over ...
2
votes
1answer
97 views

Does `ssh -D` proxy DNS request?

Is DNS resolution tunneled to the other end when I use a SOCKS proxy created with ssh -D? I have read the manual, searched the Internet, and found no documentation relevant.
17
votes
3answers
26k views

How do I convert a ssh-keygen public key into a format that openssl PEM_read_bio_RSA_PUBKEY() function will consume?

I'm having an issue generating a public key that the openssl PEM_read_bio_RSA_PUBKEY() function can consume. I keep getting errors. Obviously I cannot simply use the ASCII string in the ssh-keygen ...
1
vote
1answer
83 views

How to discriminate between SSH and SCP for QoS in OpenWRT (and other systems)?

I regularly upload large amounts of data using SCP through my DSL upstream connection, which is limited to 1kbit/s. While I really want interactive SSH sessions to have highest priority, simply ...
0
votes
0answers
33 views

Forward only one port in openvpn

I have a ā€openvpn server in Amazon Cloud and I use it to make a link between my home pc and linux computer which is located on a corporate network. It works except that it routes all traffic through ...
1
vote
1answer
38 views

Appending a line to a file via a ssh chain

From my machine A, I got access to a machine B that can access a machine C. From A, I want to append a line to the file ~/.profile of C. So far I tried: ssh user@B ssh user@C "echo \"line of ...
5
votes
3answers
2k views

SSH access from inside and outside a LAN using the same terminal command

I have a Raspberry Pi (RPi) and I am making remote connections to it using ssh. I have managed to set up ssh correctly such that I can access the RPi both from a local area network and from the ...
2
votes
3answers
3k views

Can't SSH into Any Server

I work on remote servers frequently, but for some reason I cannot discern, today I am unable to ssh into anything. Everything comes back with Write failed: broken pipe. I know this is a common ...
0
votes
1answer
253 views

SSH Server Not Responding to Connection Request

I'm attempting to set up an SSH server on my local machine using OpenSSH. When I try to SSH from a remote host into my local SSH server, the SSH server doesn't respond and the request times out. I'm ...
9
votes
4answers
4k views

Local, timestamped logging of all ssh commands?

How can I keep a local, timestamped record of all remote commands I use in ssh (command-line openssh client started through bash)? Requirements: Essential: 100% client-side without relying on ...
1
vote
0answers
37 views

OpenSSH Server as Tor Hidden Service

What exactly is considered best practice when setting up an open SSH server as a Tor hidden service? I do it this way, but I feel like there's a better way of doing this: I just set SSH up as a ...
0
votes
2answers
53 views

Setting Up SSH. Just need some understanding

My goal is to build a LAMP server on my arch linux laptop. The main reason is for a web server. The other reason is to learn about how all this administration stuff works. My setup is a laptop with ...
17
votes
3answers
17k views

What difference between openssh key and putty key?

I've found that ssh-keygen ("ssh" package) produces different keys from puttygen ("putty" package). If I create public and private keys with ssh-keygen some ssh-servers will not accept my keys. If I ...
2
votes
1answer
48 views

Configure OpenSSH server not to require password *or* key for a particular user

For the purpose of a training session, I'd like to make it possible for a particular user to connect without requiring a password or key-based authentication. I do not know the IPs or other data of ...
2
votes
1answer
45 views

OpenSSH-Server: How can I remotely set the client's side window title?

I have an OpenSSH server running under Ubuntu 14.04LTS. I'm connecting to it from a Windows 7 machine via PuTTY's SSH client. I have found this option on Putty client named Disable remote-controlled ...
2
votes
1answer
76 views

ssh-copy-id: why is the end of my public key different on my local vs remote?

Usually in the past I've always manually copied over my SSH public key to the remotes where necessary. I'm on a Mac and I finally decided to start using ssh-copy-id to make my life simpler, so I just ...
1
vote
1answer
602 views

How to set up chrooted and non-chrooted sftp?

I am trying to set up my Openssh server to allow for chrooted sftp-only users as well as for non-chrooted sftp and ssh users. My condensed (comments and blank lines removed) /etc/ssh/sshd_config looks ...
2
votes
0answers
65 views

ssh terminating immediately with message Terminated

I have tried following command on my local system (Ubuntu 14.04 LTS): $ ssh localhost The authenticity of host 'localhost (127.0.0.1)' can't be established. ECDSA key fingerprint is ...
2
votes
2answers
71 views

Use a dynamically obtained hostname with an ssh config entry

Our accounts in our lab are all mounted over NFS and are accessible over all the systems in a subnet. So, effectively we can ssh into any of the machines in the subnet and continue our work. The ...
2
votes
0answers
184 views

Force OpenSSH / pam / pam_ldapd to do pam_ldapd(sshd:auth) with public-key authentication

I have working pam_ldap authentication using libpam_ldapd. I'm using slapo-nssov and want to use loginStatus attribute which is added to users ldap entry after opening pam session and deleted when its ...
9
votes
1answer
15k views

Single command to login to SSH and run program?

Is there a way to structure a single command to login via SSH to a remote server and run a program on the remote login shell? In the OpenSSH manual, it reads "If command is specified, it is executed ...
0
votes
0answers
36 views

Cygwin and OpenSSH

I am having issues setting up and installing the latest Cygwin with Openssh. Similar to this issue Installing SSH via Cygwin I can get this setup and working fine when the server is not connected ...
2
votes
1answer
69 views

Arch Linux openSSH frequently drops connection

I'm running a VM using Oracle's VirtualBox. The OS is the latest version of Arch, 64-bit. For some odd reason, every so often (frequently enough to be very annoying and making it almost impossible ...
0
votes
1answer
53 views

SFTP Chroot and SSH

I have a chrooted SFTP user group to access my home server. The chroot location is /mnt/, mostly because it is already owned by root and is where I have mounted the external HDD I want to the chrooted ...
-1
votes
1answer
1k views

How to install openssh-server on openSUSE

I recently installed openSUSE, and I want to set up an ssh server so that I can ssh into this machine. However, I am having trouble installing openssh-server. I have tried $ sudo zypper install ...
2
votes
2answers
114 views

Chroot user exit jail [duplicate]

I am using OpenSSH chrootdirectory feature to give access to a user via ssh. Can this user exit the jail and return to the normal OS environment? Maybe with su?
1
vote
1answer
60 views

Integer after username in OpenSSH client separated by colon

I have a reverse SSH server in Cisco router(runs IOS operating system) and it listens on port 2001: C1841#sh control-plane host open-ports Active internet connections (servers and established) Prot ...
3
votes
2answers
2k views

Help updating OpenSSH to v6.6

My system is vulnerable to OpenSSH Wildcards on AcceptEnv Vulnerability, CVE-2014-2532. I have tried to update openssh to version 6.6 for centos but I can not get repository[sic] for that version. ...
0
votes
1answer
76 views

Running 2 OpenVPN on the same box

(Fist of all, I'm a total Unix newbie). I know I can create two (or more) user accounts with root privileges, and I can access them independtly through SSH sessions. But I don't know how Unix systems ...
1
vote
1answer
166 views

Restrict SSH login to local network: VPN connection not allowed

There are two (unix) users who are allowed to connect to my Debian Wheezy server using ssh: git and peter. While git is allowed to connect from everywhere, peter (who is in the sudo group) should be ...
0
votes
1answer
186 views

Compiling LibSSH2 with specific LibSSL

I have downloaded and compiled the latest version of libssl, the result of which is located at /usr/local/ssl. I want to compile libssh2 using the files in this folder, and to do that I've set the ...