the secure shell (SSH) daemon

learn more… | top users | synonyms

2
votes
0answers
31 views

Linux: $SSH_CONNECTION is set even without SSHing to the server

I have a remote server and I am writing a script in the server and want it to fire only when I SSH. I thought of using the $SSH_CONNECTION and $SSH_TTY for this purpose. I found out that when I have ...
3
votes
2answers
25 views

Starting SSH server after VPN starts

I am running an OpenVPN server on Ubuntu 14.04 as well as OpenSSH. I have my SSH server configured to bind to an IP address on my VPN interface. Once my machine boots, binding to that IP fails. ...
0
votes
3answers
25 views

Is there a log for sshd where I can see who has used ssh to access my PC? [duplicate]

I am running the OpenSSH daemon (sshd) on CrunchBang Linux, and I want to see a history of who (i.e. IP address) has logged in using SSH.
1
vote
1answer
9 views

CentOS 6.4: SSH RSA key issue, “[…]== rsa-key-20140711\n failed”

For some reason sshd is reading from my authorized_keys file a new line that does not exist. I generated the keys with puttygen, copied the public key text in as required, concatenated the key into ...
1
vote
2answers
64 views

Locked myself out of Amazon EC2 SSH - This service allows sftp connections only

Doh. Locked myself out of SSH on an Amazon EC2 box after fiddling with ForceCommand internal-sftp in /etc/ssh/sshd_config in order to allow root log-in via SFTP. SFTP still works fine, but PuTTY ...
3
votes
1answer
41 views

SSHD Password Feedback (Show Asterisks for Characters)

Is it possible to have SSHD show asterisks for the password characters much like pwfeedback does for sudo? I am using CentOS 6.5. For example:
1
vote
1answer
30 views

SSH slow after configuring TCP Wrappers

We have SSH open on one of our production servers leaving it prone to various brute force attacks to break in. I reduced the attempts by changing the default port from 22. I want to further harden ...
2
votes
0answers
45 views

SSH AuthorizedKeysCommand and SELinux

I'm trying to use the SSH AuthorizedKeysCommand in a CentOS 6.5 machine, but I'm encountering an SELinux error. When I switch SELinux to permissive mode - using setenforce 0 - it works, but when I ...
14
votes
2answers
336 views

What is the difference between these two SSHD configs?

1 Match Group GROUPNAME, User *,!root 2 Match Group GROUPNAME User !root My question: What is the difference between #1 and #2 in the SSHD_CONFIG?
0
votes
0answers
34 views

Unable to SSH into Puppy Linux, even though SSHD is running

I installed OpenSSH client and server on my Puppy Linux computer. That computer is behind a router. I tried to ssh into it over the internet (outside the router) but it times out. Also doesn't work if ...
1
vote
0answers
45 views

X11 connection rejected because of wrong authentication — on CentOS, for all users (including root)

I'm configuring a small computing cluster with CentOS. The last step is setting up X11 forwarding, and here I find problems that I cannot solve. On all compute nodes except one, I can set up ...
4
votes
1answer
25 views

How to exclude from a “Match Group” in SSHD?

There is a Match group in the SSHD config: cat /etc/ssh/sshd_config ... Match Group FOOGROUP ForceCommand /bin/customshell ... There are many users on the machine that are in the ...
1
vote
2answers
121 views

MaxStartups and MaxSessions configurations parameter for ssh connections?

I am copying the files from machineB and machineC into machineA as I am running my below shell script on machineA. If the files is not there in machineB then it should be there in machineC for sure ...
0
votes
0answers
18 views

Centos not respecting ClientAliveCountMax

I'm running Centos 6.3 and trying to connect to it via OS X through capistrano deploying a Rails project. Capistrano is notorious for not respecting ServerAliveInternal from the client so I must set ...
2
votes
1answer
52 views

Is there a way to run a privileged command upon successful SSH login (not necessarily with shell or PTY)?

I'd like to run a privileged command upon successful SSH logins at the server's end. However, this has to be in the server configuration (sshd_config or anything else that cannot be manipulated or ...
1
vote
1answer
57 views

What is the maximum length of an ssh-banner message?

It seems that if the banner message is longer than a certain limit, no banner at all will be displayed to the client. What is either the character or file size limit?
1
vote
1answer
98 views

problem with unique ssh public/private key pair on second user

I have created an ssh key pair using ssh-keygen -t rsa for my main user and everything seems to be working well. Password login has been disabled. I have a second user that I am trying to create a ...
3
votes
1answer
216 views

How can I restart the SSH daemon on Ubuntu?

When I type in service sshd restart I get a sshd: unrecognized service error. I do have, in /etc/ssh/ a file sshd_config that I use to set config. I can also putty into the Ubuntu box (it is remote). ...
1
vote
1answer
38 views

How to fix SSH on OSX?

I have been able to connect to OSX machine using ssh client successfully for hours, but then it stops working and I get connection refused. ps -ax | grep ssh 841 ttys004 0:00.00 grep ssh Using ...
1
vote
1answer
146 views

Login via ssh without password, getting authorized_keys file removed after first login attempt

I'm trying to configure passwordless login via ssh. I have Centos 6.5 This what I did: copied content of id_rsa.pub from my client machine to ~/.ssh/authorized_keys set permissions 700 to ~/.ssh and ...
2
votes
1answer
77 views

rkhunter /usr/bin/ssh && /usr/sbin/sshd [Warning]

My last rkhuter scan reported a couple of warnings that deserve to be checked(for my noob eyes). Main reason for my suspect is that i wasn't on the machine at (03-Apr-2014 01:12:12) ->AM I googled ...
4
votes
1answer
46 views

Seperate messages of multiple sshds in syslog-ng

Is there a common way of distinguishing between the messages of multiple processes in syslog-ng beside setting different facilities? +1 if filtering and therefore logging in different files would be ...
3
votes
0answers
37 views

Are there any canned solutions for running sshd in the initrd?

This is mostly aimed at Debian/Ubuntu, but I feel savvy enough on a variety of distros to be able to adapt the solution for one distro to another. Here's my scenario. There are a few situations when ...
2
votes
1answer
33 views

Accept any private key for authentication

Is it possible to configure OpenSSH (or any other standard sshd) to accept any key offered by a connecting client? EG ssh -i ~/arbitraryKey hostname grants a login shell while ssh hostanme doesn't. ...
2
votes
1answer
520 views

How to resolve ssh connection refused on AIX?

I am no longer successfully able to connect to my AIX LPAR. ssh -v user@<ip> OpenSSH_6.2p2, OpenSSL 1.0.1c 10 May 2012 debug1: Reading configuration data /etc/ssh_config debug1: Connecting to ...
5
votes
1answer
222 views

Logging ssh remote commands to `bash_history`

SSH allows a remote user to issue some command without interactively logging in to the server, as the last line of ssh usage indicates: usage: ssh [-1246AaCfgKkMNnqsTtVvXxYy] [-b bind_address] [-c ...
1
vote
1answer
97 views

ssh connection fails after login at one user

Have server with 2 users - (e.g. - user and root). SSH login to root works corrctly. But I can't login to user - it immediatelly fails with "write failed - broken pipe" after login. ssh -vvv ...
1
vote
1answer
194 views

How can I have a SSH banner appear BEFORE the “login as:” prompt? [duplicate]

CentOS 5.x When I enable the Banner /path/to/banner parameter in my sshd config file, the banner displays AFTER the login as: prompt. For example: login as: foo ...
2
votes
1answer
58 views

Unable to connect after ChrootDirectory within sshd_config

After adding the following to my sshd_config file... Match user myuser ChrootDirectory /var/www/html X11Forwarding no AllowTcpForwarding no ForceCommand internal-sftp I am unable to ...
0
votes
0answers
79 views

Separate SSHD Authpriv logs into /var/log/messages, all other authpriv logging goes to messages

Right now I have SSHD using AUTHPRIV facility. The level of logging is fine, but I dont want it in the syslog, I want it to go to /var/log/sshd (which doesnt yet exist) Red Hat Linux/Enterprise ...
1
vote
1answer
326 views

Activity Logging Level in SFTP

I'm using CentOS, i have already figured out how to enable the SFTP Logging. After that when i test it by using FileZilla (from User-end) and tail -f /var/log/sftp.log from the Server, all the ...
2
votes
1answer
32 views

How to prepare a headless machine?

I'm currently preparing an SD-card for my Raspberry Pi, i.e. an ARM machine, while I'm sitting on a x86 one. Therefore I cannot simply chroot into it and run rc-update add sshd default. So, how else ...
1
vote
3answers
1k views

Where are my sshd logs?

I can't find my sshd logs in the standard places. What I've tried: Not in /var/log/auth.log Not in /var/log/secure Did a system search for 'auth.log' and found nothing I've set /etc/ssh/sshd_config ...
1
vote
2answers
61 views

can I tell to useradd to execute a script? Maybe in /etc/default/useradd?

There are plenty of people that already answered to the question "how to execute useradd properly in a script?" My question is: "is it possible to tell to useradd to execute one script when it is ...
2
votes
1answer
99 views

Reconfigure login through root ftp (lost ssh access)

My question is twofold. I need to somehow re-enable telnet and/or ssh in a device where I currently only have root ftp access. Also, if I am going about this wrong, please let me know. Details to ...
2
votes
2answers
804 views

Why does sshd requires an absolute path?

Why does sshd require an absolute path when restarting, e.g /usr/sbin/sshd rather than sshd Are there any security implications? P.S the error message: # sshd sshd re-exec requires execution with ...
2
votes
0answers
100 views

telneting to ssh port works, but SSH not

I installed a machine with two network cards: one goes in the router, gets IP via DHCP, OK, another is connected to my notebook directly, using a different IP subnet. I can ping both IP addresses, ...
5
votes
1answer
3k views

X client forwarded over SSH “cannot open display: localhost:11.0”

I have enabled X forwarding on remote machine where SSH server is running: # grep -i forward /etc/ssh/sshd_config X11Forwarding yes # On local machine, I have started SSH client with -X flag ...
3
votes
0answers
31 views

unable to forward X11 applications [duplicate]

I installed a headless Debian server which has Wireshark installed. Now I would like to run Wireshark in a way that it uses X11 server running in my Linux Mint laptop. As a first step I permitted X11 ...
2
votes
1answer
93 views

SFTP chroot jail/access based on wildcard

I want to give a list of people SFTP access to /webdocs/ABC* where they will read-write access to only directories that match this wildcard. How do I do this? Can I create a chroot jaill or some ...
4
votes
2answers
423 views

How to Provide login delay in ssh

I wanted to provide login delay while login through ssh .I tried couple of ways of doing same but couldn't find desired result. I tried steps provided by given link. ...
2
votes
1answer
204 views

Why “sshd Bad prime description” errors?

I've noticed that all our FreeBSD machines throw sshd Bad prime description in line xxx (insert a large number of values for xxx). Presumably this is not something they are all supposed to be doing ...
4
votes
1answer
218 views

Executing a remote command on SSH connection, before login

I am trying to find a way to execute a specific command when connecting to a server via SSH. By this I mean, the command will execute unconditionally on opening a connection, so this would preferably ...
0
votes
3answers
311 views

What are the commands to apply changes made to /etc/ssh/sshd_config?

I have made some changes to /etc/ssh/sshd file and wanted these effects should take place. I know I can run below command for the effects to take place. /etc/init.d/sshd reload But on my box I ...
2
votes
1answer
201 views

How to terminate an interactive ssh session after certain amount of time

In my /etc/ssh/sshd_config file I have set the below parameters: ClientAliveInterval 10 ClientAliveCountMax 3 Now from host machine I did ssh to the my server (where I made changes to ...
2
votes
0answers
104 views

SSH server is not disconnecting session when I shutdown the machine

I have a Arch Linux virtual machine, if I shutdown the machine while a ssh connection is alive. The SSH session would stuck (and the machine shuts down correctly) So the server is not disconnecting ...
2
votes
1answer
212 views

How to dump SSHD process and search for strings

Symantec has disclosed details on an SSHD backdoor and suggests to dump the SSHD process and search for some particular strings. NOTE: Background here: Symantec report on Linux Back Door I have no ...
0
votes
2answers
624 views

SSH client authentication as non root user

On my system ssh client authentication was allowed for root, but I wanted ssh client authentication to be allowed only for non root users. To disable ssh as root, I changed the PermitRootLogin yes to ...
1
vote
1answer
223 views

Reverse connection to SSH server [duplicate]

Machine A is connected to the internet and is behind firewall so it cannot receive incoming connections. Machine B is open to the internet. I want to be able to type commands into B and have them ...
1
vote
1answer
120 views

failure in connecting to my server through ssh

My goal: I want to be able to ssh to my workstation from external client. My workstation(in the following also referred as server) is on a lan. Its ip address on this lan is obviously different from ...