the secure shell (SSH) daemon

learn more… | top users | synonyms

0
votes
1answer
30 views

sshd AllowGroups group not granting access

I have this weird situation: On a Centos 6.6 box, in my sshd_config, I have the line AllowGroups foo bar baz just like on all the other servers. However, when user baz (whose group is baz) tries to ...
0
votes
1answer
44 views

I have to restart sshd every time I reboot

I have an arch machine that I use as a local server. It used to be that every time I rebooted it (which was not often), I had to login and enter # dhcpcd net0. After that, I could ssh into it from my ...
-2
votes
2answers
38 views

Why does running a Cron Job as root stop the sshd service and disallows login for other users?

I have a script for getting Clamav updates from another server which I run as a Cron job as root. Also, I have root login disabled for /sbin/nologin. But this has serious implications on the system as ...
1
vote
1answer
128 views

Being Prompted for Password After Already Registered Public Key On server [closed]

NOTE: This is not a duplicate to the popular question. Why am I still getting a password prompt with ssh with public key authentication? I had an original post but I did not get much answers helping ...
3
votes
2answers
50 views

How to make ssh account capabele to only sshfs and rsync?

I'd like to make ssh account that is capable of doing two things: mounting (can be one) directory via sshfs performing backup&recovery of his/her desired directories using rsync I would love ...
0
votes
0answers
12 views

ssh warning banner on centos 6.7

I am using the kick start installation for my centos 6.7. After installation, the output of mount command looks like below: proc on /proc type proc (rw) sysfs on /sys type sysfs (rw) devpts on ...
2
votes
2answers
36 views

sshd: Problem disabling password authentication from outside LAN

I have a CentOS 7 server with 2 NICs, one inside the LAN with a private IP 192.168.1.1 (lan0) and one with a public internet IP (ppp0) For connections originating from inside the LAN I want password ...
0
votes
1answer
51 views

unable to SSH to eth1 after bringing down eth0

I have a remote machine with 2 interfaces: eth0 and eth1. I am able to ssh using eth0 ip address as well as eth1 ip addr. However, things go strange once I bring down eth0 using the command ifdown ...
0
votes
0answers
32 views

Why would my putty key be refused “server refused our key”, but works on next attempt?

I use PuTTY, and I use a key generated with PuTTYgen. My server is a VPS running Ubuntu 14.04 (perhaps this belongs on askubuntu, but I think it may not be Ubuntu specific). The public portion of the ...
0
votes
2answers
44 views

How to suppress debug2 messages during SSH session?

When I am logged into my home Linux machines via SSH, I get the following debug output a few times every minute: debug2: channel 0: request window-change confirm 0 When I am editing files in nano, ...
-2
votes
2answers
38 views

linux + ssh login took time from one server to another

I have a central Linux server (Red Hat version 6.5), and from this server I establish SSH sessions to other servers. To one server the SSH login took around 5 seconds, while to all others it took ...
3
votes
1answer
31 views

Remove any ssh-keygen commands from init scripts

I'm running Ubuntu 14.04 64 bit server. I'm following this guide: Secure Secure Shell https://stribika.github.io/2015/01/04/secure-secure-shell.html It includes the instruction: remove any ...
2
votes
1answer
34 views

In journald, why are some sshd log entries not attributed to ssh.service

When using journalctl to inspect my journald logs the output from the commands journalctl -u ssh.service and journalctl _COMM=sshd differ. The first command produces just a subset of the log ...
0
votes
0answers
15 views

Testing OpenSSH Logging

I'm attempting to turn on logging inside OpenSSH running in an Alpine Docker container. I made sure to install rsyslog and start the daemon with /usr/sbin/rsyslogd. My sshd logging settings are as ...
0
votes
0answers
37 views

sshd error: no more sessions

I see many lines in /var/log/auth.log about sshd sessions, like below Mar 25 11:04:47 hosting-prd sshd[7882]: error: no more sessions Mar 25 11:04:47 hosting-prd sshd[7882]: error: no more sessions ...
0
votes
2answers
75 views

SSH always connects to the same IP address [closed]

No matter what the host is, SSH keeps trying to connect to 162.13.177.241. Command ssh -v user@host Output debug1: Connecting to 162.13.177.241 [162.13.177.241] port 22. My /etc/hosts file is ...
0
votes
0answers
35 views

ssh PrintLastLog prints actual login

I connect with my server via ssh and always it shows the last log: Last login: Sat Mar 19 14:05:17 2016 from... but that login is my actual login. What's the utility of this info? It should print the ...
1
vote
1answer
44 views

SSH tunnels force new tunnel and kill old session

This is the situation: I have a Linux server running Ubuntu server 14.04 to which multiple computers connect and authenticate with SSH and try to open a reverse tunnel. These computers usually do not ...
0
votes
1answer
39 views

reading the output of netstat for tcp

If I ssh root@server -R 5901:localhost:5900 and netstat -an I get: Active Internet connections (servers and established) │ Proto Recv-Q Send-Q Local Address ...
0
votes
1answer
44 views

How can I restrict multiple groups or users to specific folders with SFTP? [duplicate]

I know how to restrict users of groups to their home folders and remove terminal access, but I cannot seem to get it working for multiple groups. I have two groups: groupA groupB My sshd_config ...
1
vote
0answers
59 views

Slow SSH connection on embedded platform

I am operating an embedded device running the linux core. I have OpenSHH_4.9p1 installed running in debug mode and trying to establish an SSH connection using PuTTY. After the login screen everything ...
0
votes
1answer
18 views

2 Factor Authentication in SSH using public key and yubikey

I'm trying to setup 2 Factor Authentication. I want to login via 2 methods: Public Key > YubiKey Password > YubiKey And now I have this done, but I want to specify what users can login via ...
1
vote
0answers
95 views

Freeradius PAM create user and home on login

At this moment i have installed freeradius and PAM radius properly. When i create an account on the system and set a password in /etc/raddb/users.conf the user can login. Sudo also works great with ...
3
votes
0answers
50 views

Cant SSH in to cloned EC2 server from public network [closed]

I created a new AWS EC2 instance, using the AMI image, configured it to my liking, and saved an image, (Call this svr01). Then I created another EC2 instance, using that same image ((Call this svr02). ...
3
votes
1answer
66 views

kill user who is idle for more than 3 hours

I have a user who logs in via sftp but he opens a lot of sessions and keep them opened. This will make ssh and sftp very slow for all other users. I thought about using ClientAliveInterval number ...
1
vote
2answers
59 views

Forward ssh for git user to git server

It is surprisingly difficult to find information on this simple problem. Like many people we run a gitlabs/gogs server on a remote instance. Currently it listens on port 10022. We also run ssh on ...
2
votes
1answer
42 views

enable access via ssh-key without using ~/ssh/authorized_keys

i want to enable access to a home dirs via ssh/scp with an key. Normally i would place the pub key into ~/ssh/authorized keys But i want disable the ability to add or remove ssh-keys (turn off ...
1
vote
1answer
99 views

Make sshd override login shell of a group of users

My users are shared across a number of machines via LDAP. For one of those machines (let's call it 'fileserf'), I would like to restrict some users in what they can do (actually: prevent them from ...
0
votes
2answers
141 views

Why does SSH server say, “authorized_keys is not a regular file”?

I've been trying to configure the login with a key generated from puttygen so I can disable password authentication. I saved a private key from puttygen and copied the public part to my ...
1
vote
1answer
152 views

SSH/SCP Connection problem | Lost connection

We are unable to ssh or scp to a particular host, SSH Connection hangs for a while and then gets disconnected and we get this error "Lost connection" All the hosts are CentOS 6.7 Openssh version ...
1
vote
1answer
174 views

How can I restrict SSH login on CentOS 7 to Active Directory groups? [closed]

I've successfully added CentOS 7 to AD and can login locally or SSH with domain credentials before I try restricting login. I'm using the AllowGroups flag in sshd_config and this works if I specify a ...
0
votes
2answers
56 views

Need the sshd server be run in root privilege for a password-less login? [closed]

I mean: if the sshd is't being run in root account, then how can it let the remote ssh client run shell or other command in root account ? if sshd call the login command, then the user could login ...
3
votes
2answers
132 views

How much RAM should an SSH connection typically use?

I'd like to ask about how much memory an SSH connection should take typically. Here is how I'm finding out how much of a RAM hit is incurred: Kindly don't get vehement that I'm using a GoDaddy shared ...
0
votes
1answer
20 views

The path to sshd centos

How do I find the path to sshd? I need it to configure some stuff but the instructions just say /path/to/sshd. Does that mean the sshd_config file or something else? is there a default? or terminal ...
0
votes
1answer
54 views

How can I avoid always having to use `eval 'ssh-agent -s'`

I can't figure out why everytime I ssh back into my server I always have to start my ssh agent with the command eval 'ssh-agent -s' followed by ssh-add <my_key.pem> in order to successfully ssh ...
0
votes
0answers
28 views

How to get informed about EVERY incoming ssh connection (e.g. with no remote command specified)

The case I'm used to set up automatic reverse ssh tunnels to remote computers via my server with cron. Usually I use the following entry: @reboot sleep 300 && ssh -MNf -R xxx22:host:22 ...
0
votes
0answers
19 views

Trying to make a SSH Tunel [duplicate]

I configurated a bastion server on AWS on my public subnet. I can make direct ssh to the ec2 instance inside the private subnet, using the bastion host. I can connect to the bastion host and check ...
1
vote
2answers
62 views

Add user with root/administrative privileges

quick questions. I'm running lots of Debian boxes (as servers), we don’t install the UI. We would like to setup monitoring Via a SSH connection (monitoring tool establishing an SSH connection to scan ...
0
votes
0answers
10 views

From when does OpenSSHD use SHA-2?

IMHO in OpenSSHD, SHA* is only used for "Data Integrity Verification". Question: But from which version does OpenSSHD use SHA-2 as default?
2
votes
1answer
86 views

How to allow unauthenticated logins over ssh on FreeBSD?

I created an account ckurs on my FreeBSD 10 workstation. This account uses a custom shell-script as a login-shell that attaches the user to a tmux-session in read-only mode. I have sufficiently ...
-2
votes
1answer
92 views

What is the maximum number of ssh connections we can do and how can i check in linux

I am trying to figure out how many max number of ssh connections we can do to a machine. where we need to change this value if i want more or reduce the connections. i mean the path of the file.
-4
votes
1answer
70 views

How to disable ssh remote login using tcp wrapper [closed]

I want to use tcp wrapper to disable ssh remote login from a client on the server. How do I find out if sshd supports tcp wrapper and hence use it to disable ssh login?
4
votes
1answer
49 views

How to avoid calling 'startx' upon ssh login

my current situation is that in my .zprofile file I have the following line I found somewhere on the internet [[ -z $DISPLAY && $XDG_VTNR -eq 1 ]] && exec startx I think it's ...
5
votes
2answers
72 views

Isolate SSH Authentication Failures into Own Log File on RHEL 6.6

This may be impossible, but I've got a case where we want to log SSH authentication failures separately from standard SSH logging on a RHEL 6.6 box. I am aware we can use SyslogFacility with ...
0
votes
1answer
36 views

What does this mean :“sshd 5927 root 3u IPv4 66110 0t0 TCP 192.168.1.165:ssh->43.229.53.76:60 673 (ESTABLISHED)”

I tried to check who is connecting to my server and got this line I could not recognized. I used sudo lsof -i -n | egrep '\<ssh\>'. And these lines looks odd to me: sshd 5921 sshd ...
0
votes
0answers
2k views

SSH Connection Refused In CentOS?

For a week, SSH was working perfectly. Today I restarted my server and I got this error in my Mac terminal: ssh: connect to host 162.243.7.7 port 22: Connection refused This is very odd... I am ...
1
vote
0answers
92 views

Unable to ssh in to machine behind router

I'm trying to ssh into a desktop which is behind a router from a remote location. I've set the router (TP-link AC1750) to forward TCP connections to port 8000 along to port 8000 on my desktop using ...
2
votes
2answers
82 views

Does keyboard-interactive authentication support two sequential passwords?

Keyboard-interactive authentication(RFC 4256), which is implemented as ChallengeResponseAuthentication in OpenSSH configuration file, allows one to chain multiple authentication methods. For example ...
4
votes
2answers
53 views

Understand the PasswordAuthentication in sshd configuration

I have an OpenSSH server which supports only password authentication: [martin@ ~]$ ssh -v 10.10.1.183 -l root OpenSSH_5.2p1 FreeBSD-20090522, OpenSSL 0.9.8k 25 Mar 2009 debug1: Reading configuration ...
7
votes
2answers
5k views

Can't login to a remote machine with key

I used to login to a remote machine( I have to root of this machine) using key. Both my local machine and remote machine is in f23. From last few days, I can't login to this machine using key. It is ...