Questions about the OpenSSH implementation of the ssh protocol.

learn more… | top users | synonyms

0
votes
1answer
761 views

SSH to Linux Container from Other Machine

I am trying to learn about Linux Containers and this is my first encounter with servers, ssh and many other things that I do not know the terms yet. I create five different containers and authorized ...
0
votes
1answer
65 views

ssh key_load_public: invalid format warning

SSHing into my system succeeds but even without the -v flag I get key_load_public: invalid format message. Below is the output w/ using the verbose flag. Specifically debug1: key_load_public: No ...
1
vote
0answers
53 views

Problem with ssh connection [closed]

I need to connect to my computer via ssh. I have to use VPN, because the remote machine is my computer at my workplace. I have no problems with using VPN. So, I installed open ssh server from the ...
2
votes
1answer
36 views

How to track ssh connection time, disconnection time and idle time?

How can I track ssh sessions on my server including ssh connection time, disconnection time and idle time? Here's what I have for connections: cat /var/log/{auth.log,auth.log.1} | grep -i Accepted | ...
1
vote
2answers
45 views

Why does SCP fail when “RequestTTY force” option is enabled?

In my SSH config file, I have to enable the RequestTTY force for some important reasons. And currently my config file looks like this: Host x.x.x.x HostName yyyy StrictHostKeyChecking no ...
0
votes
1answer
19 views

Under remote (ssh) .. How do I remove all remotes and root logins [closed]

How do you delete ssh if you suspect ra root administrating your macbook.. And are under a control by ssh remote?
6
votes
2answers
3k views

Force ssh to always use SSH_ASKPASS

I want to force ssh to always use the program specified by SSH_ASKPASS. In my case the program is just a bash script returning the passphrase. The problem is, as the ssh documentation says: If ...
2
votes
2answers
30 views

pssh (Parallel-ssh) passing different parameter for every host

I have a file called hosts which looks as follow: host1 host2 host3 host4 ..... On these machines there is also a local user named as the machine name. host1 user is created on host1 host and so ...
1
vote
1answer
173 views

storing ssh remote executed command output to variable is blocking. connection not ending?

I'm not quite sure what the issue is. I'm on Kali Linux 2.0 right now, fresh install. The following worked on Ubuntu 14.04 but it's not working anymore (maybe I accidentally changed it?). It looks ...
0
votes
0answers
12 views

openssh - Reading from a file [migrated]

In the openssh code (openssh-5.9p1/auth2.c) in the function input_userauth_request(int type, u_int32_t seq, void *ctxt) I'm trying to read my own file (tried using fopen, fread) but fopen fails ...
0
votes
1answer
27 views

Why does SSH client offer public key to SSH server?

If I enable -vvv when logging in to a SSH server using key-based authentication, then according to debug messages SSH client offers public key to SSH server: debug1: Offering public key: ...
1
vote
1answer
26 views

The most secure Alpine SSHD Configuration

I'm experimenting with Docker's alpine image and OpenSSH. The sshd_config file that ships with alpine has everything commented out by default. I only uncomment Port 22. I assume this is the most ...
0
votes
1answer
52 views

SFTP, SSH Couldn't read packet: Connection reset by peer [duplicate]

My sftp -v to host returns, Connecting to xxx.xx.xx.xx... OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003 debug1: Reading configuration data /etc/ssh/ssh_config debug1: Applying options for * debug1: ...
51
votes
5answers
43k views

What is the point of sshd “UseDNS” option?

I know what it does, but i don't know why. What attack(s) does it prevent ? Is it relevant for all kind of authentication methods ? (hostbased, password, publickey, keyboard-interactive ...)
1
vote
1answer
37 views

Specifying SSH KexAlgorithms works at CLI but not via ssh_config [duplicate]

By default, my SSH client disallows the use of the diffie-hellman-group-exchange-sha256 key exchange algorithm. However, I need to access a server on 10.0.0.1 that requires the use of that algorithm. ...
5
votes
2answers
70 views

options override for openssh client configuration

Since I want to protect my ssh connections, I set some global cipher suite options to restrict set of used algorithms. But recently I've encountered a server which doesn't support some of those ...
0
votes
1answer
5k views

How to install openssh-server on openSUSE?

I recently installed openSUSE, and I want to set up an ssh server so that I can ssh into this machine. However, I am having trouble installing openssh-server. I have tried $ sudo zypper install ...
1
vote
1answer
60 views

SSH access asking for password in local network but public

I have a problem when ssh to another server. I created ssh-key and copied it to other server. -bash-4.2$ whoami postgres -bash-4.2$ ssh-keygen Generating public/private rsa key pair. Enter file in ...
0
votes
0answers
75 views

SFTP connection using public key (without password) not working

I need to provide sftp access to a client to my ftp server and this is working fine. For them to access our server without using password - we have followed the below steps on our server. Created ...
5
votes
1answer
203 views

Can I get SSH to use an askpass program even if it was run from a terminal?

man ssh says: SSH_ASKPASS If ssh needs a passphrase, it will read the passphrase from the current terminal if it was run from a terminal. If ssh does not have a terminal associated with ...
0
votes
2answers
63 views

How to use openSSH for disc encryption at boot time (OpenSSH vs. Dropbear)

Basic setup: - Operating System: CentOS 7 (64 bit) - Grub 2 - separate boot partition with ext4 - luks encryption (aes-xts-plain64:sha512) on two disc partitions which both need to be unlocked by ...
0
votes
0answers
16 views

Printing to a remote network printer over ssh using a proxy server [duplicate]

I want to be able to print to a network printer at home from a remote location. I don't want to open a port on my router. Is it possible to use a SSH tunnel to connect via my home server (Fedora) ...
0
votes
0answers
15 views

Printing to a remote network printer over SSH [duplicate]

I want to be able to print to a network printer at home from a remote location. I don't want to open a port on my router. Is it possible to use a SSH tunnel to connect via my home server (Fedora) ...
4
votes
3answers
4k views

SSH slow at starting session

Starting an Interactive shell over SSH is slow to one of my servers. Everything leading up to it including negotiating encryption is fast, but then it hangs for 45 seconds. After that, it finishes ...
1
vote
2answers
83 views

Cannot ssh without password [duplicate]

I have been trying to set up remote file copy without password between 2 Linux machines. I have appended my .ssh/id_rsa.pub from local to remote .ssh/authorized_keys. I have also set up correct file ...
0
votes
1answer
52 views

Why am I still being asked for an ssh password when I'm using private key authentication?

I have Linux mint on my pc. I have a public/private key pair to ssh into my router without having to type the password. It works on Windows using putty, but Mint isn't when I run it from terminal. ...
1
vote
1answer
50 views

Change SSH banner which is grabbed by netcat

I have installed openssh server. I want to disable banner which is shown when I do :: nc 0.0.0.0 22 It shows something like this :: SSH-2.0-OpenSSH_6.7p1 Raspbian-5 . How to make it show something ...
5
votes
2answers
3k views

ssh-add -D doesn't erase stored keys from the ssh-agent

How come this happens?: stan@tcpc:~/.ssh$ ssh-add -l 8192 e0:45:5e:cc:45:3e:17:2b:a6:54:6f:8d:53:1b:j2:e3 github (RSA) 2048 25:41:53:a6:45:5d:ac:eb:5c:45:f8:ce:42:a9:he:aa BITBUCKET (RSA) ...
23
votes
6answers
61k views

Where are my sshd logs?

I can't find my sshd logs in the standard places. What I've tried: Not in /var/log/auth.log Not in /var/log/secure Did a system search for 'auth.log' and found nothing I've set /etc/ssh/sshd_config ...
1
vote
0answers
51 views

Slow SSH connection on embedded platform

I am operating an embedded device running the linux core. I have OpenSHH_4.9p1 installed running in debug mode and trying to establish an SSH connection using PuTTY. After the login screen everything ...
-1
votes
2answers
44 views

How can I Log ssh login passwords attempts?

I need to log ssh passwords attempts. I read somewhere you could get this done by patching openssh but I don't know if that is the correct way to get this done. I am using Arch. EDIT: I want to get ...
0
votes
0answers
36 views

Ansible: running from virtualenvwrapper with pip installation

I'm trying to test ansible with a "pip" installation of ansible in a virtualenv of python managed by virtualenvwrapper. However, I am having problems to use the ssh-agent and the SSH keys: (ansible)$ ...
5
votes
3answers
438 views

Why are rules not combining in an ssh config file?

It seems like the following would work as expected, i.e., that the second rule, having a hostname that matches the first rule, would apply it. Host *.hostname.com User myuser IdentityFile ...
2
votes
1answer
40 views

How to convert open-ssl created private key to openssh private key?

I have created an open-ssl private key which I would like to use to connect to my server through ssh. The openssl key was generated during certificate creation and I have to use this key on putty. The ...
1
vote
0answers
60 views

Freeradius PAM create user and home on login

At this moment i have installed freeradius and PAM radius properly. When i create an account on the system and set a password in /etc/raddb/users.conf the user can login. Sudo also works great with ...
3
votes
2answers
22 views

OpenSSH import configuration from external files

I've been searching around with no luck, so I'm just asking to make sure. Is it possible to import an external config file? Example with ~/.ss/config file : Hosts * IdentityFile ...
15
votes
2answers
7k views

Limits of SSH multiplexing

I have the following entry in my .ssh/config file Host AAA User BBB HostName CCC ControlMaster auto ControlPath ~/.ssh/%r@%h:%p The above allows me to multiplex multiple ssh ...
20
votes
2answers
69k views

how to connect ssh 'with' specified port?

I know how to connect 'to' a certain port when ssh'ing. ssh user@remotehostip -p XXX but is there a way to establish a ssh 'with' a certain port? I mean, is there a way to specify the port which ...
3
votes
1answer
59 views

How to disable password prompt from ssh client side?

I have a script that relies on public/private key ssh authentication. The problem is that some systems are misconfigured and do not have the proper ssh public/private key trust set up. When that ...
0
votes
1answer
46 views

Cannot setup password less ssh on local host

I followed all the steps given in the following answer - 1. ssh-keygen -t rsa Press enter for each line 2. cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys 3. chmod og-wx ...
0
votes
0answers
49 views

ssh authentification without-password is not working anymore

I used to run an ssh without password on my servers (after I copied my id). Today, it stopped working, here is a debug: OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014 debug1: Reading configuration data ...
3
votes
2answers
28k views

What is the default idle timeout for OpenSSH?

I can't seem to find an answer to this simple question, which I need for some compliance documentation. On a default install of CentOS 6.5 (OpenSSH 5.3p1-94.el6), after how long of being idle will ...
1
vote
2answers
55 views

Forward ssh for git user to git server

It is surprisingly difficult to find information on this simple problem. Like many people we run a gitlabs/gogs server on a remote instance. Currently it listens on port 10022. We also run ssh on ...
1
vote
1answer
30 views

ssh_config: Add a host section that matches IPs even when connecting via hostname

I want a host section in my ssh config that matches any local IP: Host 10.* 192.168.*.* 172.31.* 172.30.* 172.2?.* 172.1?.* setting setting ... This works as long as I connect directly to a ...
1
vote
1answer
80 views

Make sshd override login shell of a group of users

My users are shared across a number of machines via LDAP. For one of those machines (let's call it 'fileserf'), I would like to restrict some users in what they can do (actually: prevent them from ...
2
votes
1answer
65 views

SSH: display warning when using (deprecated) ssh-dss key

With the 7.0 release, OpenSSH disabled ssh-dss keys. The not-so-recommended workaround is to explicitly re-add DSA key support to .ssh/config, which will eventually be dropped by a later OpenSSH ...
1
vote
1answer
3k views

OpenSSH hangs after login without showing login prompt

I ran across an issue with ssh after fresh Ubuntu 13.10 installation on Lenovo T420. I tried git pull (which failed) and this led me to more general ssh failing. After spending some 2-3 hrs of ...
2
votes
0answers
43 views

MOTD not displayed after installing openssh from source

On Debian Wheezy the default openssh server package displays the motd from /etc/motd. When i compile it from source (openssh-6.0p1) it won't display the motd anymore after an ssh login. Configure ...
2
votes
3answers
48 views

How to log into a single SSH host without passphrase?

I usually have to access a couple of remote and local SSH hosts, this works perfectly, I actually want to have to type in the passphrase every time. However, there's a single SSH host on my local ...
-1
votes
2answers
250 views

What are the keys accepted by openSSH?

Question is simple: What are the (private) key types and (their specification - format, syntax) accepted by current openSSH? The vague answer "the keys generated by ssh-keygen" is not accepted - ...