the secure shell (SSH) daemon

learn more… | top users | synonyms

0
votes
3answers
7 views

Authentication refused: bad ownership or modes for file /var/git/.ssh/authorized_keys

I can no longer connect with ssh-rsa key for a specific user, but it still work for other users. The git user defined as follow : # cat /etc/passwd | grep git git:x:1002:1002:,,,:/var/git:/bin/bash ...
2
votes
0answers
28 views

How to tell systemd to start sshd later in the boot sequence?

My sshd_config file specifies it should listen on some specific IP addresses instead of on all IP addresses. The problem is that one of these NICs doesn't come up until later in the boot sequence. ...
2
votes
1answer
44 views

Configure OpenSSH server not to require password *or* key for a particular user

For the purpose of a training session, I'd like to make it possible for a particular user to connect without requiring a password or key-based authentication. I do not know the IPs or other data of ...
2
votes
2answers
57 views

Passwordless login only works using directly invoked sshd on server

I've been through as many of the bugfixes as I can find for the classic ssh key issue : I've set up my public and private keys "correctly" but passwordless login still doesn't work. The details : ...
0
votes
0answers
43 views

fedora 21 workstation and sshguard 1.5 set up

I installed fedora 21 workstation, and I compiled and implemented sshguard 1.5 since I could not find rpm 64. How do I best set up sshguard so that it protects the server? Esp. in terms of reading the ...
0
votes
1answer
38 views

SSH login too slow in Centos 6.6 [closed]

SSH login take too much time in my CentOS machine, and also a ftp server is running on it. Please help me to speedup the login time for both root and ftp user. I tried some tricks but no ...
1
vote
1answer
37 views

Can't connect to the sshd in my unprivileged LXC guest. What to do?

So you configured your unprivileged LXC guest, by defining lxc.id_map = u 0 1000000000 10000 lxc.id_map = g 0 1000000000 10000 and of course assigning those subordinate UID/GID ranges to an ...
1
vote
1answer
100 views

Is there a canonical method to restrict ssh access to certain IP addresses in Unix?

I checked man pages related to ssh on OS X and other systems and tried using hosts.allow and hosts.deny files as per this post, and sshd_config to no avail. $ cat /etc/hosts.allow sshd: ...
2
votes
1answer
23 views

SSH demon not installed in linux embedded device

I have an embedded device which runs linux(arm). I am trying to update the executable through ethernet using scp command. But I got to know that sshd is not running in the device . I need to install ...
1
vote
0answers
49 views

How do I configure SSHd to require 2 (or more) passwords to log in

I'm asking because I want to setup a server that cannot be administered by any single admin, not without the permission (and oversight) of one other authorized admin (there can be many). Since there ...
0
votes
1answer
33 views

how to view failed login attempts?

I tried to view failed user login attempts since a specific time. But all methods I found by searching the internet does not work. I am using openSUSE 13.2. journalctl -a --no-pager ...
2
votes
1answer
48 views

How to make sshd listen to two ports, but restrict one of them to a single source address?

I need sshd to listen both on port 22225 (allowing connections on that port from any IP) and port 22 (allowing just a single static IP on that port). In other words, listen on two ports at the same ...
0
votes
0answers
24 views

ssh agent-forwarding with lxc

I have a "little" problem I try to ssh using putty and pageant to server, than to ssh into lxc-container and than to other server. But no publickey is used, it prompts for password (at last hop). ...
2
votes
1answer
79 views

How to use ssh over http or https?

I have a linux fedora21 client laptop behind a corporate firewall (which lets through http and https ports but not ssh 22) and I have a linux fedora21 server at home behind my own router. Browsing ...
0
votes
1answer
19 views

Set MasSessions to SSH does not take effect

I got a server with enabled ssh. To prevent attacks and to fit to my needs, I just need one connection at the same time to my server. So, I tried to set MaxSessions paramater to 1 in ...
1
vote
2answers
64 views

remote shell - are there any non-ssh based alternatives?

Are there any alternative SSH servers other than SSHD? One that is not SSH based? Ideally one that can be installed from offical Debian repository, that listens on a port other than port 22. (To ...
0
votes
1answer
455 views

How to open the SSH port 22? [closed]

I have installed the ssh utility on an embedded system but I can't connect to it. I am able to ssh from the device to another computer on the network but not the other way around. The only port ...
4
votes
1answer
329 views

Why did sshd delete my /dev/zero?

When I do lsof +c 0 | grep /dev/zero, I see the following two lines: sshd 19064 root DEL REG 0,4 497862 /dev/zero sshd 19064 root DEL REG 0,4 498725 /dev/zero ...
1
vote
1answer
69 views

Restrict SSH login to local network: VPN connection not allowed

There are two (unix) users who are allowed to connect to my Debian Wheezy server using ssh: git and peter. While git is allowed to connect from everywhere, peter (who is in the sudo group) should be ...
1
vote
1answer
68 views

SSH message, source of a after-login greeting command

On a server previously adminstered by someone else i noticed non-standard after-login ssh message. It looks like this: In case of problems please send an email to ....@..... Disk quotas for user ...
0
votes
2answers
105 views

SSH banner not showing

I have a fresh installation of OpenSSH. In the /etc/ssh/sshd_config I have the following entry: Banner /etc/issue.net I have restarted the SSH deamon using: sudo /etc/init.d/ssh restart. Now, ...
1
vote
2answers
108 views

SSH via cert-authority

I'm trying to use SSH using signed certificates. I'm using ssh -i keys/client.key to connect to the target device. If I generate a public key from that private key (with ssh-keygen -y -f ...
-2
votes
2answers
107 views

ssh gives an illegal user error

Setup a new server and was able to ssh in successfully until I updated apache and php, which maybe upgraded sshd? # grep -i allow /etc/ssh/sshd_config | grep -v "^\($\|#\)" AllowUser lbutlr ...
4
votes
2answers
139 views

which config file is openssh sshd using?

Where can i check/verify which config file sshd is using? I know you can change the config file to use by using -f command, but is there a way to echo which config file is currently being used or is ...
0
votes
0answers
10 views

SSH tunneling error: “channel 1016:: open failed: administratively prohibited: open failed” [duplicate]

when I use config file in the /home/username/.ssh/config to connect to localhost with ssh, I get the following results: channel 1016: open failed: administratively prohibited: open failed channel ...
1
vote
1answer
2k views

Forwarding X11 not working - Error: Can't open display: localhost:11.0

LM 17 Xfce OpenSSH_6.6.1p1 Ubuntu-2ubuntu2 Despite googling everywhere, I cannot seem to get this to work. I keep getting this error. $ xlogo Error: Can't open display: localhost:10.0 I have tried ...
2
votes
2answers
523 views

RHEL 7 (CentOS 7) security / ssh / sshd_config advise requested

I am not a sysadmin and try to create a more or less secure web server (LAMP based CentOS 7). I read several tutorials about setup an initial CentOS 7 droplet and got everything running fine. ...
0
votes
1answer
27 views

Migrate SSHD sftp Logging

currently my messages log file is filling up with Dec 19 08:46:43 XXXXXXXXX sftp-server[32357]: closedir and similar messages - is there a setting that I can move all sftp-server messages off to ...
0
votes
0answers
970 views

CentOS 7 add new user with root privileges

I am reading this tutorial, and trying to create a new user with root privileges and then block root access via ssh in a CentOS 7 server. The problem is that the new user is blocked from doing root ...
1
vote
0answers
116 views

SSHD_CONFIG keeps corrupting on reverse SSH setup

I have a reverse SSH setup to traverse an impenetrable CGN NAT. It works well, but the SSHD daemon on the client behind the NAT keeps dieing for unknown reasons (fails to start-up). The client ...
1
vote
1answer
72 views

Jail in chroot in debian 7.5 - Privileges Separation problem

I'm trying to create a jail for a user in my server. Let's call the user "juser". What do I want to achieve? I want an ssh user to be jailed in his home folder and not have any access (whatsoever) on ...
0
votes
1answer
61 views

Memory Required for SSH-only Linux Setup

I am attempting to set up a minimal Debian or CentOS installation for internal network access. The purpose of the setup will be to allow SSH access into the rest of the internal network—that's it. It ...
3
votes
1answer
7k views

installing fail2ban on CentOS 7

I am using @GarethTheRed 's answer to this question to install fail2ban on a remote CentOS 7 server. I am able to complete all the steps up until tail -f /var/log/fail2ban.log, at which point I get ...
9
votes
2answers
609 views

tmux session killed when disconnecting from ssh

Summary: I'm trying to figure out why my tmux session dies when I disconnect from ssh Details: I have tmux installed on an Arch Linux system. When I start a tmux session I can detach from it and ...
0
votes
2answers
43 views

Pinpoint strange text at initiation of SSH session

On my OpenSUSE 13.1 (Gnome 3) system, whenever I start a SSH session, somewhere in the initialization, the terminal outputs some strange lines. Last login: Sat Nov 29 00:00:00 2014 from [HOSTNAME] ...
2
votes
1answer
946 views

Key-based authentication from PyCharm / JSCH to OpenBSD fails

I am trying to configure PyCharm (java-based IDE) to connect via sftp to a new OpenBSD 5.6 machine with an almost-default setup. However, it keeps returning an error "Algorithm negotiation fails". I ...
0
votes
0answers
137 views

ssh with rsa key asks for password

I have a server with Ubuntu 14.04 x64 operation system. Part of my sshd_config file (entire file): Port 2202 Protocol 2 PermitRootLogin without-password StrictModes yes RSAAuthentication yes ...
1
vote
0answers
52 views

Some commands does not work in su envirorment

I have logged in to CentOS 5 machine with normal user and then I used su command to login as root user. Now commands like ifconfig, useradd, userdel are not working on machine and it gives command not ...
3
votes
1answer
53 views

Allow SFTP users to create sub-accounts

Environment Ubuntu 14.04.1 LTS server edition OpenSSH_6.6.1p1 Ubuntu-2ubuntu2, OpenSSL 1.0.1f 6 Jan 2014 Current Configuration SFTP password-protected accounts are setup for Alice and Bob. Their ...
0
votes
1answer
396 views

How to start sshd on Puppy Linux?

I have installed sshd on puppy linux. Can someone tell me how to start sshd on it?
0
votes
1answer
51 views

How to deny SSH Connection from other user [closed]

I need to know is there is any other way to deny ssh entry other than /etc/ssh/sshd_config. If any please let me know.
2
votes
1answer
34 views

Are there any loopholes in IP restricting sshd?

Say that i want to only allow username/password logins on my private network, but restrict all external sources on to key/cert login. I would do something like this: RSAAuthentication yes ...
2
votes
3answers
129 views

Redirect SSH user server side

I know that I can create shortcuts for specific users/servers on the client side via ~/.ssh/config or /etc/ssh/ssh_config, but I would like to do something similar but on the server side. That is, ...
3
votes
1answer
177 views

How to know which public key was used when someone used passwordless ssh login?

Say for some reason, there is only a "user" account on a shhd server. Everyone has his own private key to ssh to the server, as "user". Then, is there a way to see who is he (during or after his ...
3
votes
1answer
157 views

How do you verify if an INCOMING ssh tunnel is still up and who it belongs to?

See edit below for short version I am having issues displaying the status of the ssh tunnels on our server. Here is some relevant info: user001 = remote client's username 123.123.123.123 = ssh ...
1
vote
1answer
496 views

How do I troubleshoot ssh tunnels disconnection?

I am using SSH tunnels launched via autossh at boot on a device installed at remote locations. Up to now everything was working fine but yesterday the connection partly went down and autossh wouldn't ...
1
vote
1answer
52 views

How does ssh server defines which key to use first having more than 1?

I have just found out that on my Ubuntu machine I have more public keys to serve in /etc/ssh directory: $ ll /etc/ssh total 296K -rw-r--r-- 1 root root 237K lip 3 2013 moduli -rw-r--r-- 1 root root ...
1
vote
0answers
42 views

sshd suddenly wants a passphrase from Linux box, but not from windows (putty)

My Amazon EC2 instance running Ubuntu is no longer letting me ssh in via my local Linux system. I haven't changed a darned thing on either side but now it wants a passphrase and says nope when I ...
3
votes
1answer
571 views

SSH Public Key authentication - works only after a physical login

I am trying to connect via SSH to my ubuntu server with public key authentication. For some reasons I get an "Permission denied (publickey)." on the client, whenever I execute ssh -i ~/.ssh/id_rsa ...
2
votes
0answers
145 views

Kerberos Forwarding in SSSD

So, I'm trying to set up forwarding with Kerberos and seem to have some problems. On some of my servers I'm able to forward after receiving a ticket; however, some I'm not. My system setup is a ...