Questions about the OpenSSH implementation of the ssh protocol.

learn more… | top users | synonyms

2
votes
4answers
220 views

Does ssh send the password over the network?

Basically the entire question is in the headline: Does ssh send the password over the network? Presuming of course that login via username and password is used. I'm asking because if ssh doesn't send ...
0
votes
1answer
19 views

Why are there 2 different fingerprints for ssh depending on what network I connect from?

When I connect to my computer over ssh on the local network, putty fives me the correct fingerprint of ssh-rsa 2048 ad:e3:4c:e3:d0:6f:81:2e:05:94:77:6c:0f:2c:a8:7f This matches the fingerprint on ...
7
votes
4answers
668 views

OpenSSH - map aliases in ~/.ssh/config to IP addresses in command line

Is it possible to query ~/.ssh/config in the command line? Let's say I would like to retrieve what IP address does the particular alias point to in a separate program, is it possible?
0
votes
0answers
18 views

OpenSSH ForceCommand

I want to disable this kind of command executing: ssh user@host command on my server. Then, I want to run some tests and later invoke the interactive shell What I did I've found in the web that ...
0
votes
1answer
810 views

SSH to Linux Container from Other Machine

I am trying to learn about Linux Containers and this is my first encounter with servers, ssh and many other things that I do not know the terms yet. I create five different containers and authorized ...
0
votes
1answer
41 views

Problems with SSH ProxyCommand [closed]

i have some problems with the ssh proxycommand. The authentication on the proxy works fine, but when i want to login to the remote-host it fails. The problem seems to be, that the proxy tries to login ...
3
votes
1answer
54 views

Placing OpenSSH control socket in /run

OpenSSH has a feature that allows you to multiplex connections over a controlsocket. It is generally accepted that these control sockets should not reside in a common area, due to the security issues ...
1
vote
1answer
85 views

Completely new to SSH

I'm trying to SSH from Debian (Jessie, installed as chroot environment in Chrome OS) to Arch on the same network, and I keep getting an error saying the connection was refused because of a public key ...
6
votes
1answer
42 views

Current SSH connection properties (cipher, auth type, timeout, etc)

After a connection is established with SSH, how we can get the current connection properties ? Is there a way to know what cipher(s) is being used ? Properties of the authentication ? Protocol ...
26
votes
5answers
68k views

Where are my sshd logs?

I can't find my sshd logs in the standard places. What I've tried: Not in /var/log/auth.log Not in /var/log/secure Did a system search for 'auth.log' and found nothing I've set /etc/ssh/sshd_config ...
1
vote
1answer
17 views

OpenSSH accesslog : Logging ciphers, MAC and user agent

How to log the Protocol, KexAlgorithm, Cipher and MAC algorithm negociated by the client and the client's user agent string? What I'm looking for is the OpenSSH equivalent to Apache HTTPD's CustomLog+...
6
votes
2answers
33k views

What is the default idle timeout for OpenSSH?

I can't seem to find an answer to this simple question, which I need for some compliance documentation. On a default install of CentOS 6.5 (OpenSSH 5.3p1-94.el6), after how long of being idle will ...
0
votes
1answer
95 views

ssh authentification without-password is not working anymore

I used to run an ssh without password on my servers (after I copied my id). Today, it stopped working, here is a debug: OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014 debug1: Reading configuration data /...
-1
votes
1answer
42 views

ssh login does't work using key without password

It seems that id_dsa doesn't exist and it tries id_ecdsa, but it's there and I tried to regenerate it several times and still doesn't work. any one has the same issue and solved? or any one know how ...
1
vote
0answers
68 views

Why is it not possible to connect to my server using RSA from an Ubuntu machine?

I tried to connect to my server using ssh xxxx@xxxxxxx.xxx The result was: Unable to negotiate with xxx.xxx.xxx.xxx port 22: no matching host key type found. Their offer: ssh-dss Then I ran ssh ...
1
vote
2answers
46 views

GNU Parallel and sshpass with server list in a loop

With this loop we sequential update on all servers (server list = consul members | grep awk {'print $2'} | cut -d ":" -f1) the package consul. for i in $(consul members | grep awk {'print $2'} | cut -...
3
votes
0answers
53 views

openSSH login slow for one user but not others

I'm running a server at home with Ubuntu 14.04. I have two users on the machine, say user1 and user2, each able to ssh into the box. While user1 logs in very quickly, user2 takes about 20 seconds to ...
25
votes
2answers
89k views

how to connect ssh 'with' specified port?

I know how to connect 'to' a certain port when ssh'ing. ssh user@remotehostip -p XXX but is there a way to establish a ssh 'with' a certain port? I mean, is there a way to specify the port which ...
0
votes
2answers
46 views

Can't SSH (connection refused) [closed]

I'm trying to set up a headless machine running manjaro. I install and enable openssh, and can ssh localhost, but can't ssh by another machine. Plus, if I modify the /etc/ssh/sshd_config I cannot even ...
1
vote
2answers
3k views

SSH Connection Refused In CentOS?

For a week, SSH was working perfectly. Today I restarted my server and I got this error in my Mac terminal: ssh: connect to host 162.243.7.7 port 22: Connection refused This is very odd... I am ...
1
vote
3answers
43 views

How to SSH via intermediate server [duplicate]

Three server A,B & C. How to ssh connect from A to C via intermediate server B, if A to B & C to B are password less(key)? I encountered this in an interview. Anyone knows how?
1
vote
1answer
22 views

SSH in local network while hosting same network

I have the following setup: Computer A has a Wifi-USB adapter (and is a robot, so it doesn't need real internet access). It's running Ubuntu 14.04. Computer B is my Laptop running Ubuntu 14.04 also. ...
2
votes
1answer
46 views

error: conflicting types when cross compiling openssh for armv5tel

When cross compiling openssh-7.2p2 on wheezy for armv5tel, I get the following errors. Before this, I have successfully cross compiled and installed zlib-1.2.8 and openssl-1.0.2h. For openssl, I used ...
3
votes
1answer
42 views

Cannot tunnel over ssh without command/getting shell [duplicate]

I would like using ssh tunneling options. For that purpose I use command: ssh -L 1234:localhost:5678 host however this logs me into the shell on remote host. Next I tried -f as: ssh -f -L 8999:...
6
votes
2answers
4k views

Force ssh to always use SSH_ASKPASS [duplicate]

I want to force ssh to always use the program specified by SSH_ASKPASS. In my case the program is just a bash script returning the passphrase. The problem is, as the ssh documentation says: If ...
2
votes
2answers
128 views

pssh (Parallel-ssh) passing different parameter for every host

I have a file called hosts which looks as follow: host1 host2 host3 host4 ..... On these machines there is also a local user named as the machine name. host1 user is created on host1 host and so ...
12
votes
4answers
50k views

How to ssh to remote server using a private key?

I have two servers. Both servers are in CentOS 5.6. I want to SSH from Server 1 to Server 2 using a private key I have (OpenSSH SSH-2 Private Key). I don't know how to do it over unix. But what I did ...
3
votes
1answer
31 views

How to limit connections to OpenSSH server to using private keys necessarily with passphrase?

Is there any way to configure OpenSSH (/etc/ssh/sshd_config) server to allow private keys necessarily with passphrase?
0
votes
1answer
56 views

sshd AllowGroups group not granting access

I have this weird situation: On a Centos 6.6 box, in my sshd_config, I have the line AllowGroups foo bar baz just like on all the other servers. However, when user baz (whose group is baz) tries to ...
0
votes
1answer
1k views

non root ssh keys help

I'm having issues setting up a different CentOS account with its own pair of SSH keys. I have created the required files but when connecting with Putty it says Connection refused, here's the putty log:...
0
votes
0answers
42 views

how to manage stdout/stdin buffering while doing ssh using openssh?

I have an embedded system -Linux, which has openssh utility - Linux. I am trying to do ssh from first device to second device and from second device to the third device. When I am doing the second ...
1
vote
1answer
719 views

ssh key_load_public: invalid format warning

SSHing into my system succeeds but even without the -v flag I get key_load_public: invalid format message. Below is the output w/ using the verbose flag. Specifically debug1: key_load_public: No ...
1
vote
0answers
67 views

Problem with ssh connection [closed]

I need to connect to my computer via ssh. I have to use VPN, because the remote machine is my computer at my workplace. I have no problems with using VPN. So, I installed open ssh server from the ...
2
votes
1answer
45 views

How to track ssh connection time, disconnection time and idle time?

How can I track ssh sessions on my server including ssh connection time, disconnection time and idle time? Here's what I have for connections: cat /var/log/{auth.log,auth.log.1} | grep -i Accepted | ...
1
vote
2answers
95 views

Why does SCP fail when “RequestTTY force” option is enabled?

In my SSH config file, I have to enable the RequestTTY force for some important reasons. And currently my config file looks like this: Host x.x.x.x HostName yyyy StrictHostKeyChecking no ...
0
votes
1answer
19 views

Under remote (ssh) .. How do I remove all remotes and root logins [closed]

How do you delete ssh if you suspect ra root administrating your macbook.. And are under a control by ssh remote?
1
vote
1answer
230 views

storing ssh remote executed command output to variable is blocking. connection not ending?

I'm not quite sure what the issue is. I'm on Kali Linux 2.0 right now, fresh install. The following worked on Ubuntu 14.04 but it's not working anymore (maybe I accidentally changed it?). It looks ...
0
votes
1answer
32 views

Why does SSH client offer public key to SSH server?

If I enable -vvv when logging in to a SSH server using key-based authentication, then according to debug messages SSH client offers public key to SSH server: debug1: Offering public key: /home/user/....
1
vote
1answer
53 views

The most secure Alpine SSHD Configuration

I'm experimenting with Docker's alpine image and OpenSSH. The sshd_config file that ships with alpine has everything commented out by default. I only uncomment Port 22. I assume this is the most ...
0
votes
1answer
1k views

SFTP, SSH Couldn't read packet: Connection reset by peer [duplicate]

My sftp -v to host returns, Connecting to xxx.xx.xx.xx... OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003 debug1: Reading configuration data /etc/ssh/ssh_config debug1: Applying options for * debug1: ...
55
votes
5answers
47k views

What is the point of sshd “UseDNS” option?

I know what it does, but i don't know why. What attack(s) does it prevent ? Is it relevant for all kind of authentication methods ? (hostbased, password, publickey, keyboard-interactive ...)
1
vote
1answer
155 views

Specifying SSH KexAlgorithms works at CLI but not via ssh_config [duplicate]

By default, my SSH client disallows the use of the diffie-hellman-group-exchange-sha256 key exchange algorithm. However, I need to access a server on 10.0.0.1 that requires the use of that algorithm. ...
5
votes
2answers
264 views

options override for openssh client configuration

Since I want to protect my ssh connections, I set some global cipher suite options to restrict set of used algorithms. But recently I've encountered a server which doesn't support some of those ...
0
votes
1answer
6k views

How to install openssh-server on openSUSE?

I recently installed openSUSE, and I want to set up an ssh server so that I can ssh into this machine. However, I am having trouble installing openssh-server. I have tried $ sudo zypper install ...
1
vote
1answer
195 views

SSH access asking for password in local network but public

I have a problem when ssh to another server. I created ssh-key and copied it to other server. -bash-4.2$ whoami postgres -bash-4.2$ ssh-keygen Generating public/private rsa key pair. Enter file in ...
0
votes
0answers
160 views

SFTP connection using public key (without password) not working

I need to provide sftp access to a client to my ftp server and this is working fine. For them to access our server without using password - we have followed the below steps on our server. Created ...
5
votes
1answer
253 views

Can I get SSH to use an askpass program even if it was run from a terminal?

man ssh says: SSH_ASKPASS If ssh needs a passphrase, it will read the passphrase from the current terminal if it was run from a terminal. If ssh does not have a terminal associated with ...
0
votes
2answers
134 views

How to use openSSH for disc encryption at boot time (OpenSSH vs. Dropbear)

Basic setup: - Operating System: CentOS 7 (64 bit) - Grub 2 - separate boot partition with ext4 - luks encryption (aes-xts-plain64:sha512) on two disc partitions which both need to be unlocked by ...
0
votes
0answers
16 views

Printing to a remote network printer over ssh using a proxy server [duplicate]

I want to be able to print to a network printer at home from a remote location. I don't want to open a port on my router. Is it possible to use a SSH tunnel to connect via my home server (Fedora) ...
0
votes
0answers
16 views

Printing to a remote network printer over SSH [duplicate]

I want to be able to print to a network printer at home from a remote location. I don't want to open a port on my router. Is it possible to use a SSH tunnel to connect via my home server (Fedora) ...