Questions about the OpenSSH implementation of the ssh protocol.

learn more… | top users | synonyms

6
votes
2answers
3k views

Force ssh to always use SSH_ASKPASS

I want to force ssh to always use the program specified by SSH_ASKPASS. In my case the program is just a bash script returning the passphrase. The problem is, as the ssh documentation says: If ...
3
votes
2answers
256 views

Denying “/opt/” access for SFTP Users other than particular dir

This is my first (newbie) post here in unix stackexchange. I want to use my WebServer (Debian) as SFTPServer giving access to particular employees. The dir structure is as follows under root: ...
1
vote
2answers
680 views

SSH via cert-authority

I'm trying to use SSH using signed certificates. I'm using ssh -i keys/client.key to connect to the target device. If I generate a public key from that private key (with ssh-keygen -y -f ...
3
votes
1answer
440 views

Making ChrootDirectory directory writable by SFTP user

If a user logs into a machine via SFTP, one can make use of ChrootDirectory keyword to give an illusion that user is in a root directory. But that directory is only writable by root user. I would love ...
2
votes
1answer
128 views

Arch Linux openSSH frequently drops connection

I'm running a VM using Oracle's VirtualBox. The OS is the latest version of Arch, 64-bit. For some odd reason, every so often (frequently enough to be very annoying and making it almost impossible ...
2
votes
1answer
56 views

Programatically / dynamically adjust SSH session port forwards

I have a workflow where I am trying to do the following: For a given existing SSH session, access the remote machinne and perform a process from which a port is returned (e.g. a remote daemon has ...
2
votes
1answer
325 views

How to prevent ssh-agent from starting in CentOS?

How do I stop ssh-agent from starting when logging into CentOS via openssh? There are no references to ssh-agent in my bash startup scripts (.bashrc) or /etc/bashrc.
1
vote
1answer
91 views

SSH access asking for password in local network but public

I have a problem when ssh to another server. I created ssh-key and copied it to other server. -bash-4.2$ whoami postgres -bash-4.2$ ssh-keygen Generating public/private rsa key pair. Enter file in ...
1
vote
1answer
145 views

How to diagnose SSH connection timeout issue?

I am Debain and Linux beginner so please bare with me. I have a VPS running Debian 7, that I connect to using PuTTY from my Windows machine. Most of the time, PuTTY connects fine and I can log in ...
1
vote
1answer
185 views

storing ssh remote executed command output to variable is blocking. connection not ending?

I'm not quite sure what the issue is. I'm on Kali Linux 2.0 right now, fresh install. The following worked on Ubuntu 14.04 but it's not working anymore (maybe I accidentally changed it?). It looks ...
1
vote
1answer
137 views

Appending a line to a file via a ssh chain

From my machine A, I got access to a machine B that can access a machine C. From A, I want to append a line to the file ~/.profile of C. So far I tried: ssh user@B ssh user@C "echo \"line of ...
1
vote
1answer
71 views

Can OpenSSH 6.7 optionally not depend on OpenSSL?

It has been reported on Slashdot on 2014-04-30 that OpenSSH now has a compile-time option to not depend on OpenSSL. However, OpenSSH 6.7 release notes, released on 2014-10-06, do not make any mention ...
1
vote
1answer
629 views

ssh connection fails after login at one user

Have server with 2 users - (e.g. - user and root). SSH login to root works corrctly. But I can't login to user - it immediatelly fails with "write failed - broken pipe" after login. ssh -vvv ...
0
votes
1answer
26 views

sshd AllowGroups group not granting access

I have this weird situation: On a Centos 6.6 box, in my sshd_config, I have the line AllowGroups foo bar baz just like on all the other servers. However, when user baz (whose group is baz) tries to ...
0
votes
1answer
181 views

ssh key_load_public: invalid format warning

SSHing into my system succeeds but even without the -v flag I get key_load_public: invalid format message. Below is the output w/ using the verbose flag. Specifically debug1: key_load_public: No ...
0
votes
1answer
52 views

Cannot setup password less ssh on local host

I followed all the steps given in the following answer - 1. ssh-keygen -t rsa Press enter for each line 2. cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys 3. chmod og-wx ...
0
votes
1answer
95 views

Running 2 OpenVPN on the same box

(Fist of all, I'm a total Unix newbie). I know I can create two (or more) user accounts with root privileges, and I can access them independtly through SSH sessions. But I don't know how Unix systems ...
0
votes
1answer
481 views

Specifying a random monitoring port with autossh

I have many reverse ssh tunnels and because monitoring ports can't be reused, I am trying to find a free random port for monitoring. Meanwhile I specified -M 0 and the forwards work great and in ...
0
votes
1answer
770 views

SSH to Linux Container from Other Machine

I am trying to learn about Linux Containers and this is my first encounter with servers, ssh and many other things that I do not know the terms yet. I create five different containers and authorized ...
0
votes
1answer
191 views

Linux Fedora Core 18 freezes on OpenSSH login

miagos:~ $ uname -a Linux miagos 3.9.6-200.fc18.x86_64 #1 SMP Thu Jun 13 18:56:55 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux I have a reproducible issue, when my desktop Linux node stays online for more ...
4
votes
0answers
1k views

Can't figure out why ssh_exchange_identification: Connection closed by remote host appear

At home, I have setup a Raspberry Pi with the latest version of Raspbian and with ssh enabled. I also use a Mac Book Pro with OS X 10.9.3. I use ssh pi@192.168.0.22 to do some work on the Raspberry ...
2
votes
0answers
43 views

MOTD not displayed after installing openssh from source

On Debian Wheezy the default openssh server package displays the motd from /etc/motd. When i compile it from source (openssh-6.0p1) it won't display the motd anymore after an ssh login. Configure ...
2
votes
0answers
119 views

ssh terminating immediately with message Terminated

I have tried following command on my local system (Ubuntu 14.04 LTS): $ ssh localhost The authenticity of host 'localhost (127.0.0.1)' can't be established. ECDSA key fingerprint is ...
2
votes
0answers
517 views

Force OpenSSH / pam / pam_ldapd to do pam_ldapd(sshd:auth) with public-key authentication

I have working pam_ldap authentication using libpam_ldapd. I'm using slapo-nssov and want to use loginStatus attribute which is added to users ldap entry after opening pam session and deleted when its ...
2
votes
0answers
46 views

Placing OpenSSH control socket in /run

OpenSSH has a feature that allows you to multiplex connections over a controlsocket. It is generally accepted that these control sockets should not reside in a common area, due to the security issues ...
2
votes
0answers
202 views

How to find out what triggers ssh-askpass prompting for passphrase periodically

I recently deleted the contents of my ~/.ssh directory and generated new keys. They new ones work fine, but every once in a while I am getting a gui dialog titled OpenSHH from asking for the ...
1
vote
0answers
58 views

Slow SSH connection on embedded platform

I am operating an embedded device running the linux core. I have OpenSHH_4.9p1 installed running in debug mode and trying to establish an SSH connection using PuTTY. After the login screen everything ...
1
vote
0answers
83 views

Freeradius PAM create user and home on login

At this moment i have installed freeradius and PAM radius properly. When i create an account on the system and set a password in /etc/raddb/users.conf the user can login. Sudo also works great with ...
1
vote
0answers
71 views

Proper permissions on SFTP upload and download subdirectories in a user's home directory?

I have a server running OpenSSH. I've setup an SFTP server that users can log into. I have created user userName with a folder at /sftp/userName with permissions of 555 and owner root. This folder has ...
1
vote
0answers
97 views

OpenSSH Server as Tor Hidden Service

What exactly is considered best practice when setting up an open SSH server as a Tor hidden service? I do it this way, but I feel like there's a better way of doing this: I just set SSH up as a ...
1
vote
0answers
129 views

How to get information from sshd about established remote tunnels

I have a server running on which from many different places people log on via ssh and open remote ssh-tunnels to other places behind different firewalls. Now I want to try to get an overview, which ...
1
vote
0answers
298 views

git push in gnome-term crashes my window manager

In terminal in awesome wm when i git push awesome wm freezes. so i move over to tty2 and log in. top shows awesome at %100 cpu. ps aux | grep [g]it output git-remote-https origin ...
0
votes
0answers
40 views

how to manage stdout/stdin buffering while doing ssh using openssh?

I have an embedded system -Linux, which has openssh utility - Linux. I am trying to do ssh from first device to second device and from second device to the third device. When I am doing the second ...
0
votes
0answers
98 views

SFTP connection using public key (without password) not working

I need to provide sftp access to a client to my ftp server and this is working fine. For them to access our server without using password - we have followed the below steps on our server. Created ...
0
votes
0answers
44 views

Ansible: running from virtualenvwrapper with pip installation

I'm trying to test ansible with a "pip" installation of ansible in a virtualenv of python managed by virtualenvwrapper. However, I am having problems to use the ssh-agent and the SSH keys: (ansible)$ ...
0
votes
0answers
64 views

ssh authentification without-password is not working anymore

I used to run an ssh without password on my servers (after I copied my id). Today, it stopped working, here is a debug: OpenSSH_6.6.1, OpenSSL 1.0.1f 6 Jan 2014 debug1: Reading configuration data ...
0
votes
0answers
17 views

Why does `ssh-keygen` keep asking for keyfile name, even after passing the `-f output_keyfile` option?

I'm trying to automate generating an SSH key using ssh-keygen from OpenSSH_7.1p1, OpenSSL 1.0.2d 9 Jul 2015 (as reported by ssh -V). Running ArchLinux 4.2.5-1-ARCH (as reported by uname -r). First ...
0
votes
0answers
38 views

Upgrading from SSH1 to SSH2 on Linux RAID Array command line

Any ideas of how I could upgrade from SSH-1 to SSH-2 on RAID array on the command line. Raid Model: HP StorageWorks MSA2312i. Below shows that the raid node 10.5.5.75 has SSH-1.99. I need to ...
0
votes
0answers
2k views

SSH Connection Refused In CentOS?

For a week, SSH was working perfectly. Today I restarted my server and I got this error in my Mac terminal: ssh: connect to host 162.243.7.7 port 22: Connection refused This is very odd... I am ...
0
votes
0answers
43 views

Connect to work pc via ssh

I have a PC on my work which I want to connect to from home (on both machines Ubuntu 14.04 is installed). I already opened a port in my work firewall. Now I found an instruction to create a pseudo ssh ...
0
votes
0answers
82 views

SMTP traffic being forwarded through SSH even do AllowTcpForwarding is disabled

I have a situation on one server, where it seems to be spaming over traffic being sent over SSH tunnel. Output below shows connections being made to remote SMTP server that seem to be initiated over ...
0
votes
0answers
113 views

Forward only one port in openvpn

I have a ā€openvpn server in Amazon Cloud and I use it to make a link between my home pc and linux computer which is located on a corporate network. It works except that it routes all traffic through ...
0
votes
0answers
291 views

restrict ssh access to /bin and using bash as a shell

I want to restrict my admin user to /bin directory while permitting to use bash as a shell via ssh. This is in my sshd_config file: Match User admin ChrootDirectory /bin X11Forwarding no ...
0
votes
0answers
646 views

SSH client connection not working to remote servers not working

I am unable to connect to other machines from one of my servers. Here is the verbose output (IP, domain, port are masked. OpenSSH version info removed): $ ssh -vvv user@example.com -p yyyy debug1: ...
0
votes
0answers
118 views

Problem with OpenSSH

I think I got an OpenSSH-problem with my Ubuntu Server 14.04.1. Let me explain my setup: For development, I use Git and Gitolite. I have 3 server: server A ( master-server for git-mirroring) ...
0
votes
0answers
230 views

sshd without pam slower

I am running OpenSSH_6.5 with UsePAM yes in my board. I have observed that with UsePAM no in /etc/ssh/sshd_config, sshd runs slower than previous case. How is this possible? My understanding is ...
0
votes
0answers
458 views

How can I get ssh working on Mint Olivia?

I have a Mint KDE VM (under VMware Fusion on Mavericks), and it is refusing ssh connections. I have not enabled UFW, and openssh-server installed without reported error. However, when I attempt to ...