the secure shell (SSH) daemon
1
vote
2answers
19 views
Allowing only specific users to login via ssh at one port and others to login via another port
I have the following use case: Need to allow users to login from a secured, trusted network and then allowing a couple (only two) mobile users to login remotely on a Linux Centos machine.
I can make ...
1
vote
1answer
33 views
Why is sshd looking at a non-existent public key file?
In an effort to get SSH keys working I'm tailing the sshd authorization log and I see these lines:
debug1: test whether pkalg/pkblob are acceptable
debug1: temporarily_use_uid: 10144/10029 (e=0/0)
...
1
vote
1answer
68 views
Unable to make sshd start at boot time on centos 6.4 . It starts ONLY after I login from console
I have installed centos 6.4 on a desktop and wanted to access it mostly remotely. For this, I tried ...
13
votes
2answers
678 views
SSH ignores characters after correct password string?
Remote machine 10.10.10.1 has password "asdFGH12" for user named "user". I'm able to log in even if I type in password "asdFGH12dasdkjlkjasdus" or any other characters after the "asdFGH12" string.
$ ...
2
votes
0answers
35 views
ssh-add -D doesn't erase stored keys from the ssh-agent
How come this happens?:
stan@tcpc:~/.ssh$ ssh-add -l
8192 e0:45:5e:cc:45:3e:17:2b:a6:54:6f:8d:53:1b:j2:e3 github (RSA)
2048 25:41:53:a6:45:5d:ac:eb:5c:45:f8:ce:42:a9:he:aa BITBUCKET (RSA)
...
12
votes
5answers
454 views
what's the purpose of ssh-agent?
I've read the official definition:
ssh-agent is a program to hold private keys used for public key authentication (RSA, DSA, ECDSA). The idea is that ssh-agent is started in the beginning of an ...
2
votes
1answer
28 views
Assuming sshd allows only public key authentication, how do I log the fingerprints?
With OpenSSH, how can I log the fingerprints of the keys used for authentication?
I would like to log it in production, so it would be best if this wasn't just some debug setting or similar.
1
vote
1answer
167 views
Set up chroot for LDAP users in RHEL6
I have been working on this for 2 days now and am about to give up so someone please help.
I have a Red Hat 6 server joined to my active directory domain. Logins work just fine under normal ...
0
votes
1answer
77 views
ssh daemon error: sshd must be own
Running service sshd restart and then service sshd status on my system as root prints the following error:
Redirecting to /bin/systemctl status sshd.service sshd.service -
OpenSSH server daemon ...
0
votes
0answers
489 views
Need help configuring Openssh on Win2008 via CYGWIN [closed]
I am trying to configure an OpenSSH server on Windows Server 2008 Datacenter via CYGWIN. I have installed and configured CYGWIN with OpenSSH and Basic LinuxUtils. I am logging onto the system on a ...
3
votes
1answer
2k views
Fedora 18 - Start sshd on boot
I've just installed Fedora 18, and trying to configure sshd - I used chkconfig but this is only starting sshd when a user is logged in. How do I change so that sshd starts on system boot?
Thanks in ...
1
vote
1answer
704 views
SSH publickey works for root but not user [duplicate]
Possible Duplicate:
Why am I still getting a password prompt with ssh with public key authentication?
I'm setting up a remote server. The sshd is configured to use publickey only. There ...
0
votes
0answers
140 views
FreeNX on Ubuntu: “The connection with remote server was shut down.”
I've been using FreeNX on my Ubuntu machine for many months and just yesterday I've begun having troubles using it. What happens is that the FreeNX client (which is on my Windows machine) would ...
2
votes
3answers
364 views
How to limit ssh access for localhost only?
I need to forbid ssh access (except localhost) for specified user.
So. ssh localhost should work. ssh hostname from outside should not work for that user.
All other users should work as usual.
...
2
votes
2answers
258 views
Use SSH key authentification with custom user $HOME
I have some users which have different $HOME directories than /home/...
The user homes are under /pkg/homeand /pkg owner is a different user but all users have group access to /pkg. But it seems ...
4
votes
6answers
296 views
How to setup password-less ssh with RSA keys
I am trying to setup a password-less SSH configuration between two machines and am having trouble. There are a ton of howtos out there that I have followed and have had no success. Here are ...
2
votes
1answer
81 views
How to upgrade SSHD without the change of the server key?
So... we need to upgrade the SSHD. How can we do this without having that issue that the people (who are signing in through ssh) would see the message:
...
1
vote
3answers
130 views
How to restrict OpenSSHD when I'm logging in from dynamic IP address?
So I have an OpenSSHD on an Ubuntu machine using static IP address.
My notebook PC has dynamic IP address -> "I mean really dynamic", so there couldn't be any ranges specified...
I need to restrict ...
3
votes
4answers
384 views
ssh command unexpectedly continues on other system after ssh terminates
I'm running the below command, and monitoring the output file on the other system:
ssh $ip_address 'for n in 1 2 3 4 5; do sleep 10; echo $n >>/tmp/count; done'
If I kill the ssh command ...
1
vote
1answer
68 views
How to get the public key from sshd server without touching the known_hosts file?
Are there any tricks to get the public key (the line that goes into the known_hosts file after I answered yes after connecting with ssh) of a server?
2
votes
2answers
391 views
nmap isn't showing sshd?
I want to open a ssh terminal but it gives me a connection refused on port 22. My nmap doesn't list a port 22? How can I connect to my server?
PORT STATE SERVICE
21/tcp open ftp
...
2
votes
1answer
286 views
How can I tell if sshd is running with ClientAliveInterval > 0?
The title pretty much says it all, I'm a user on a system, and I want to know if that system is running sshd with a ClientAliveInterval > 0, which would tell me if I need to worry about using ...
7
votes
1answer
7k views
How does tcp-keepalive work in ssh?
I am trying to code a shell-script that uses a ssh-connection for doing "heartbeats". I want to terminate the client- and server-side of that connection after a certain timeout (after the connection ...
0
votes
2answers
1k views
Change default path for when I SSH in to CentOS server?
I have a CentOS 5.7 web server, and I want to change the default place I land in when connecting using SSH.
Currently I land in /home/username, and I want to land in /home instead.
I've gone in as ...
2
votes
1answer
130 views
Why doesn't my new cygwin .bashrc interactive check work?
I just updated Cygwin and the new .bashrc contains this line right at the top:
echo "BEFORE TEST"
# If not running interactively, don't do anything
[[ "$-" != *i* ]] && return
echo "AFTER ...
3
votes
2answers
257 views
Is there an easy way to not log a specific sshd event?
The monitoring tool of my hoster is making regular connections with ssh on port 22 to see or the service is up.
This is cluttering my /var/log/messages with this kind of messages:
Dec 13 22:20:17 ...
2
votes
1answer
2k views
sshd_config MaxSessions parameter
I have problem with "MaxSessions" parameter in sshd.
I would like to restrict number of sessions via one ssh connection. For example for tcp forwarding.
When I set MaxSessions to 0, logons are not ...
3
votes
3answers
277 views
How to install openssh in Crux Linux
In Crux Linux I already have installed SSH but when I use ssh-keygen, and try to use the command:
ssh localhost
to test SSH I get this error:
# ssh localhost
ssh: connect to host localhost port ...
2
votes
1answer
629 views
Can sshd restrict client tunnel endpoints to localhost?
Normally an ssh client can request TCP forwarding using the -L command line option. The server can disable this completely using AllowTcpForwarding no. If enabled, the client can request to connect ...
3
votes
4answers
168 views
Internet SSH Server Security Considerations
What steps should I take to reasonably secure my linux desktop before opening sshd to the Internet so I can connect from anywhere?
5
votes
4answers
928 views
How to debug SSH port forwarding
This is an extension to ssh port forward to access my home machine from anywhere
I tried things mentioned there but I am not able to ssh to my machine.
Netgear router settings for port forwarding:
...
2
votes
3answers
488 views
I killed sshd but it's still running?
On AIX 6100-05-01-1016 I accidentally killed the sshd. But for a suprise it still was running. Why? I did a:
kill PID
Q: ..so sshd doesn't reacts to normal kill signal? or are there any default ...
