the secure shell (SSH) daemon

learn more… | top users | synonyms

2
votes
1answer
22 views

enable access via ssh-key without using ~/ssh/authorized_keys

i want to enable access to a home dirs via ssh/scp with an key. Normally i would place the pub key into ~/ssh/authorized keys But i want disable the ability to add or remove ssh-keys (turn off ...
0
votes
1answer
26 views

Make sshd override login shell of a group of users

My users are shared across a number of machines via LDAP. For one of those machines (let's call it 'fileserf'), I would like to restrict some users in what they can do (actually: prevent them from ...
0
votes
2answers
47 views

Why does SSH server say, “authorized_keys is not a regular file”?

I've been trying to configure the login with a key generated from puttygen so I can disable password authentication. I saved a private key from puttygen and copied the public part to my ...
2
votes
1answer
64 views

SSH/SCP Connection problem | Lost connection

We are unable to ssh or scp to a particular host, SSH Connection hangs for a while and then gets disconnected and we get this error "Lost connection" All the hosts are CentOS 6.7 Openssh version ...
1
vote
1answer
47 views

How can I restrict SSH login on CentOS 7 to Active Directory groups? [closed]

I've successfully added CentOS 7 to AD and can login locally or SSH with domain credentials before I try restricting login. I'm using the AllowGroups flag in sshd_config and this works if I specify a ...
-1
votes
2answers
39 views

Need the sshd server be run in root privilege for a password-less login? [closed]

I mean: if the sshd is't being run in root account, then how can it let the remote ssh client run shell or other command in root account ? if sshd call the login command, then the user could login ...
3
votes
2answers
36 views

How much RAM should an SSH connection typically use?

I'd like to ask about how much memory an SSH connection should take typically. Here is how I'm finding out how much of a RAM hit is incurred: Kindly don't get vehement that I'm using a GoDaddy shared ...
0
votes
1answer
16 views

The path to sshd centos

How do I find the path to sshd? I need it to configure some stuff but the instructions just say /path/to/sshd. Does that mean the sshd_config file or something else? is there a default? or terminal ...
0
votes
1answer
38 views

How can I avoid always having to use `eval 'ssh-agent -s'`

I can't figure out why everytime I ssh back into my server I always have to start my ssh agent with the command eval 'ssh-agent -s' followed by ssh-add <my_key.pem> in order to successfully ssh ...
0
votes
0answers
21 views

How to get informed about EVERY incoming ssh connection (e.g. with no remote command specified)

The case I'm used to set up automatic reverse ssh tunnels to remote computers via my server with cron. Usually I use the following entry: @reboot sleep 300 && ssh -MNf -R xxx22:host:22 ...
0
votes
0answers
19 views

Trying to make a SSH Tunel [duplicate]

I configurated a bastion server on AWS on my public subnet. I can make direct ssh to the ec2 instance inside the private subnet, using the bastion host. I can connect to the bastion host and check ...
1
vote
2answers
34 views

Add user with root/administrative privileges

quick questions. I'm running lots of Debian boxes (as servers), we don’t install the UI. We would like to setup monitoring Via a SSH connection (monitoring tool establishing an SSH connection to scan ...
1
vote
1answer
34 views

Force SSH password prompt without restarting the service [closed]

I've met a problem when I configure SSH users in Centos7. There are two computing nodes, for example: hostname: node1 users: user1 user2 hostname : node2 users :user1,user2 If I input the ...
0
votes
0answers
9 views

From when does OpenSSHD use SHA-2?

IMHO in OpenSSHD, SHA* is only used for "Data Integrity Verification". Question: But from which version does OpenSSHD use SHA-2 as default?
2
votes
1answer
54 views

How to allow unauthenticated logins over ssh on FreeBSD?

I created an account ckurs on my FreeBSD 10 workstation. This account uses a custom shell-script as a login-shell that attaches the user to a tmux-session in read-only mode. I have sufficiently ...
1
vote
2answers
44 views

Why ssh is not authenticating the password [closed]

I'm trying ssh to another machine with option k or K. It is not verifying the password. With any string in password section, it is logging in. what is the reason behind this? Example: ssh -k ...
-2
votes
1answer
37 views

What is the maximum number of ssh connections we can do and how can i check in linux

I am trying to figure out how many max number of ssh connections we can do to a machine. where we need to change this value if i want more or reduce the connections. i mean the path of the file.
-4
votes
1answer
47 views

How to disable ssh remote login using tcp wrapper [closed]

I want to use tcp wrapper to disable ssh remote login from a client on the server. How do I find out if sshd supports tcp wrapper and hence use it to disable ssh login?
4
votes
1answer
26 views

How to avoid calling 'startx' upon ssh login

my current situation is that in my .zprofile file I have the following line I found somewhere on the internet [[ -z $DISPLAY && $XDG_VTNR -eq 1 ]] && exec startx I think it's ...
6
votes
2answers
62 views

Isolate SSH Authentication Failures into Own Log File on RHEL 6.6

This may be impossible, but I've got a case where we want to log SSH authentication failures separately from standard SSH logging on a RHEL 6.6 box. I am aware we can use SyslogFacility with ...
0
votes
1answer
29 views

What does this mean :“sshd 5927 root 3u IPv4 66110 0t0 TCP 192.168.1.165:ssh->43.229.53.76:60 673 (ESTABLISHED)”

I tried to check who is connecting to my server and got this line I could not recognized. I used sudo lsof -i -n | egrep '\<ssh\>'. And these lines looks odd to me: sshd 5921 sshd ...
0
votes
0answers
463 views

SSH Connection Refused In CentOS?

For a week, SSH was working perfectly. Today I restarted my server and I got this error in my Mac terminal: ssh: connect to host 162.243.7.7 port 22: Connection refused This is very odd... I am ...
1
vote
0answers
64 views

Unable to ssh in to machine behind router

I'm trying to ssh into a desktop which is behind a router from a remote location. I've set the router (TP-link AC1750) to forward TCP connections to port 8000 along to port 8000 on my desktop using ...
2
votes
2answers
66 views

Does keyboard-interactive authentication support two sequential passwords?

Keyboard-interactive authentication(RFC 4256), which is implemented as ChallengeResponseAuthentication in OpenSSH configuration file, allows one to chain multiple authentication methods. For example ...
4
votes
2answers
38 views

Understand the PasswordAuthentication in sshd configuration

I have an OpenSSH server which supports only password authentication: [martin@ ~]$ ssh -v 10.10.1.183 -l root OpenSSH_5.2p1 FreeBSD-20090522, OpenSSL 0.9.8k 25 Mar 2009 debug1: Reading configuration ...
6
votes
2answers
1k views

Can't login to a remote machine with key

I used to login to a remote machine( I have to root of this machine) using key. Both my local machine and remote machine is in f23. From last few days, I can't login to this machine using key. It is ...
3
votes
2answers
153 views

SSH - Connection closed after correct login

I had SSH working on my Raspberry but suddenly it's not working anymore and I get the follwing output. Any help is really appreciated. Thanks, ssh -vvv pi@192.168.1.151 OpenSSH_6.9p1, LibreSSL ...
4
votes
2answers
70 views

How to change service type of well defined ports in SElinux (centOS 6.5)

I need to be able to run SSH on port 23 instead of 22 on CentOS 6.5. SElinux won't allow that, as it has it as tcp/23 defined in policy. Any steps on how can I go about changing service type from ...
1
vote
1answer
44 views

chroot directive in sshd_config fails to exclude users

In Ubuntu, I have this SSH server configuration set up in /etc/ssh/sshd_config: Subsystem sftp internal-sftp UsePAM yes ChrootDirectory %h ForceCommand internal-sftp GatewayPorts no ...
1
vote
0answers
51 views

Why is denyhosts not banning *some* brute force root SSH login attempts?

I recently noticed in my logwatch emails from a couple of servers that although denyhosts was doing its job for some brute force root ssh login attempts others seem to be ignored and continue to ...
0
votes
0answers
22 views

Why wont my ssh key work on a different port? [duplicate]

Edit: This answer, fixed my problem. I have used ssh-copy-id to move my ssh key to my server. I have changed it so that my server is listening for ssh connections on port 50505 instead of the ...
2
votes
2answers
97 views

How do I configure sshd to 1) require public key _and_ 2) require a password for login?

How do I configure sshd to 1) require public key and 2) require a password for login? Note that I am not referring to the symmetric encryption of the client's key here. I am referring to a server-side ...
0
votes
0answers
202 views

How to restart ssh server / sshd on Linux?

I am trying to restart the ssh server on my server which is running Fedora Cloud. I have tried the method here http://www.cyberciti.biz/faq/howto-restart-ssh/ (# service sshd restart) and get Failed ...
1
vote
1answer
31 views

CentOS - SSH - File That Change Iunput Setup

I use CentOS 7 and I need to change the file that delivers the SSH configuration /etc/ssh/sshd_config to /etc/ssh/sshd_config_other. This demand was due to a security automation that always ...
2
votes
2answers
148 views

Can't connect to another user than root through SSH

I'm trying to connect to a server on my local network using SSH and would like to be able to login as storm but not as root (for obvious security purposes). I copied my .pub key to the ...
2
votes
1answer
83 views

How to Use who/w with Non-Interactive SSH logins

I'd like to perform selective shutdown of a server in my house after backing-up over SSH. My post-backup script waits for five minutes and then runs a very short 'safe shutdown' script located on the ...
2
votes
2answers
64 views

Openssh server: fatal: Too many listen sockets. Enlarge MAX_LISTEN_SOCKS [closed]

I am using Ubuntu 14.04 LTS. I want to create an openssh server, which listens on many ports (at least 100 different ports). Multiple clients would connect to this server, but each client would need ...
2
votes
1answer
30 views

Specific user's SSH-RSA with root access (via AWS EC2)

Is it possible to set up a specific SSH-RSA key (via another user i.e. "ec2-user") to have ability to sudo into root. I.e. You login with key to "Bob" (ec2-user). Currently user "Bob" can sudo ...
2
votes
3answers
188 views

Allow SSH access but restrict root's access to a given set of IPs

I want to allow SSH for all users as normal except that I want to restrict root's access based on a set of IP addresses. So, users peter, paul, lary can login from anywhere, but root may login only ...
1
vote
2answers
54 views

Cannot login over ssh

I did something very stupid. I created user accounts on my linux server, then I disabled password logins. I configured ssh to not accept password logins and only accept ssh. I configured the ufw ...
1
vote
1answer
59 views

iptables and ssh

I'm running Arch Linux and I have a running SSH daemon to access my machine when I'm out side my LAN. I can do the connection, but iptables keeps blocking SSH Daemon, so I can only connect if I turn ...
0
votes
1answer
34 views

opensshd / openssh - allow EITHER keypair or password

I would like to configure my sshd to allow users to authenticate with a keypair, then fallback to password authentication. But I'm struggling to achieve that from the information in the man pages / ...
0
votes
1answer
45 views

Error becoming root centos

I'm getting the following error when I'm trying to become root -bash-4.1$ sudo su - Could not open a connection to your authentication agent. * Error: Problem adding; giving up I have tried eval ...
1
vote
2answers
81 views

Unexpected Match behavior in sshd_config

I'm trying to configure the following restrictions in my sshd_config: Users with local IP addresses face no restrictions Users with non-local IP addresses, who are in the sftp group, are allowed to ...
1
vote
1answer
35 views

Is 2s a “normal” variation in ssh's execution time?

In my program, ssh "normally" takes around 0.3s, however sometimes it may take more than 2s. I wonder whether this is a normal variation for ssh's execution time, and whether there is some thing I ...
3
votes
2answers
32 views

Can resource over-utilization actually cause users to be unable to SSH to Linux?

The night support guys where I work have a tendency to reboot machines citing the fact that they can't ssh in and figure out what's going on in the first place. It's pretty much against company ...
1
vote
0answers
95 views

Reverse AutoSSH working, but the proxied LISTEN ports fail randomly

I'm having a hard time describing the error, sorry for the lengthy explanation: I have a successful, working, stable reverse AutoSSH solution nailed up between a client beagle board and a server. The ...
2
votes
0answers
218 views

“Too many open files ssh” when the number of open files is far below ulimit

I was trying to set up 2000 concurrent ssh connections, but got the error message in server log (i.e. journalctl): sshd[1356]: error: reexec socketpair: Too many open files I've set both the soft ...
7
votes
1answer
236 views

Enable Massive Concurrent SSH to a single server

My goal is to allow 10000 concurrent sshs running on a single server. For simplicity I am ssh-ing to localhost: for i in `seq 1 10000`; do ssh localhost "echo ${i}; sleep 100" >>./info ...
2
votes
2answers
37 views

Is there a way to tell how a user authenticated their SSH connection ? i.e. whether it was by password or by public key?

I'm locking down my server to use public-key only. I just want to make sure before I flip the switch that all my users have already made the transition, and nobody is left using passwords to log in.