the secure shell (SSH) daemon

learn more… | top users | synonyms

2
votes
1answer
78 views

Unable to connect after ChrootDirectory within sshd_config

After adding the following to my sshd_config file... Match user myuser ChrootDirectory /var/www/html X11Forwarding no AllowTcpForwarding no ForceCommand internal-sftp I am unable to ...
0
votes
1answer
153 views

Separate SSHD Authpriv logs into /var/log/sshd, all other authpriv logging goes to messages

Right now, sshd is using the authpriv facility. The level of logging is fine, but I don't want it in the syslog, I want it to go to /var/log/sshd (which doesn't yet exist) on Red Hat Linux/Enterprise ...
1
vote
1answer
1k views

Activity Logging Level in SFTP

I'm using CentOS, i have already figured out how to enable the SFTP Logging. After that when i test it by using FileZilla (from User-end) and tail -f /var/log/sftp.log from the Server, all the ...
2
votes
1answer
42 views

How to prepare a headless machine?

I'm currently preparing an SD-card for my Raspberry Pi, i.e. an ARM machine, while I'm sitting on a x86 one. Therefore I cannot simply chroot into it and run rc-update add sshd default. So, how else ...
1
vote
3answers
7k views

Where are my sshd logs?

I can't find my sshd logs in the standard places. What I've tried: Not in /var/log/auth.log Not in /var/log/secure Did a system search for 'auth.log' and found nothing I've set /etc/ssh/sshd_config ...
1
vote
2answers
96 views

can I tell to useradd to execute a script? Maybe in /etc/default/useradd?

There are plenty of people that already answered to the question "how to execute useradd properly in a script?" My question is: "is it possible to tell to useradd to execute one script when it is ...
2
votes
1answer
215 views

Reconfigure login through root ftp (lost ssh access)

My question is twofold. I need to somehow re-enable telnet and/or ssh in a device where I currently only have root ftp access. Also, if I am going about this wrong, please let me know. Details to ...
2
votes
2answers
2k views

Why does sshd requires an absolute path?

Why does sshd require an absolute path when restarting, e.g /usr/sbin/sshd rather than sshd Are there any security implications? P.S the error message: # sshd sshd re-exec requires execution with ...
2
votes
0answers
138 views

telneting to ssh port works, but SSH not

I installed a machine with two network cards: one goes in the router, gets IP via DHCP, OK, another is connected to my notebook directly, using a different IP subnet. I can ping both IP addresses, ...
6
votes
2answers
9k views

X client forwarded over SSH “cannot open display: localhost:11.0”

I have enabled X forwarding on remote machine where SSH server is running: # grep -i forward /etc/ssh/sshd_config X11Forwarding yes # On local machine, I have started SSH client with -X flag ...
3
votes
0answers
32 views

unable to forward X11 applications [duplicate]

I installed a headless Debian server which has Wireshark installed. Now I would like to run Wireshark in a way that it uses X11 server running in my Linux Mint laptop. As a first step I permitted X11 ...
2
votes
1answer
121 views

SFTP chroot jail/access based on wildcard

I want to give a list of people SFTP access to /webdocs/ABC* where they will read-write access to only directories that match this wildcard. How do I do this? Can I create a chroot jaill or some ...
5
votes
2answers
820 views

How to Provide login delay in ssh

I wanted to provide login delay while login through ssh .I tried couple of ways of doing same but couldn't find desired result. I tried steps provided by given link. ...
2
votes
1answer
248 views

Why “sshd Bad prime description” errors?

I've noticed that all our FreeBSD machines throw sshd Bad prime description in line xxx (insert a large number of values for xxx). Presumably this is not something they are all supposed to be doing ...
4
votes
1answer
364 views

Executing a remote command on SSH connection, before login

I am trying to find a way to execute a specific command when connecting to a server via SSH. By this I mean, the command will execute unconditionally on opening a connection, so this would preferably ...
0
votes
3answers
567 views

What are the commands to apply changes made to /etc/ssh/sshd_config?

I have made some changes to /etc/ssh/sshd file and wanted these effects should take place. I know I can run below command for the effects to take place. /etc/init.d/sshd reload But on my box I ...
2
votes
1answer
292 views

How to terminate an interactive ssh session after certain amount of time

In my /etc/ssh/sshd_config file I have set the below parameters: ClientAliveInterval 10 ClientAliveCountMax 3 Now from host machine I did ssh to the my server (where I made changes to ...
2
votes
0answers
129 views

SSH server is not disconnecting session when I shutdown the machine

I have a Arch Linux virtual machine, if I shutdown the machine while a ssh connection is alive. The SSH session would stuck (and the machine shuts down correctly) So the server is not disconnecting ...
2
votes
1answer
294 views

How to dump SSHD process and search for strings

Symantec has disclosed details on an SSHD backdoor and suggests to dump the SSHD process and search for some particular strings. NOTE: Background here: Symantec report on Linux Back Door I have no ...
0
votes
2answers
1k views

SSH client authentication as non root user

On my system ssh client authentication was allowed for root, but I wanted ssh client authentication to be allowed only for non root users. To disable ssh as root, I changed the PermitRootLogin yes to ...
1
vote
1answer
319 views

Reverse connection to SSH server [duplicate]

Machine A is connected to the internet and is behind firewall so it cannot receive incoming connections. Machine B is open to the internet. I want to be able to type commands into B and have them ...
1
vote
1answer
142 views

failure in connecting to my server through ssh

My goal: I want to be able to ssh to my workstation from external client. My workstation(in the following also referred as server) is on a lan. Its ip address on this lan is obviously different from ...
2
votes
2answers
1k views

Disable ssh banner for specific users or ips

I've enabled the banner that appears before the password prompt by setting it it sshd_config. However certain users (especially me) really don't need to see the banner (it also screws up a lot of ...
8
votes
4answers
766 views

Failing to block brute force ssh with iptables

I'm trying to block (slow down) brute force attacks on my sshd server. I'm following this guide http://www.rackaid.com/resources/how-to-block-ssh-brute-force-attacks/ which basically says I need to ...
1
vote
2answers
728 views

installing/configuring and running sshguard on debian

I am trying to install/configure and run sshguard on debian, I want to check if brute force attacks happen on my server. I have installed it via apt-get, then I installed systemd and followed the ...
1
vote
3answers
167 views

Can't ssh to a machine

All of a sudden, I couldn't ssh to a machine to which I used to ssh earlier. Consider I am ssh-ing from A to B. Output when I run ssh root@ip_addr_of_B I get: Permission denied ...
3
votes
2answers
89 views

Why does SSH hosts keys differ when connecting if the host_keys are the same?

There are 3 machines: A (from where I connect to B and C), B, and C. B and C have the same SSHD host keys (they have been copied, so they are 100% the same, SSHD has been restarted too, identical ...
4
votes
1answer
148 views

hosts.allow: %u not working (log username)

I need to keep track of all SSH connections on my server. In my /etc/hosts.allow I have something like this: sshd: ALL : spawn ( echo "`date` from %u %a " >> /var/log/ssh/%d.log ) & where ...
0
votes
2answers
347 views

How many authorized_keys can/should be set up in SSHD?

I'm following a FreeNX install wiki page for ArchLinux. Right now I'm setting the SSHD parameter for "AuthorizedKeysfIle". And this brings up the question, How many authorized_keys can/should be set ...
6
votes
2answers
8k views

What do the channel numbers in ssh error message refer to?

In the example below what do the channel numbers correspond to? Which are on the server? Which are on the client? $ ssh -L1570:127.0.0.1:8899 root@thehost Password: Last login: Fri Aug 9 ...
1
vote
2answers
204 views

Unable to force passphraseless ssh authentication while port forwarding

I'm completely at a loss as to what is preventing my local machine from authenticating the connection that is being forwarded from the remote server. I've read a ton of the posts on here regarding ...
3
votes
1answer
557 views

Public-Key Authentication w/ Jailed SFTP User

I'm trying to set up a jailed SFTP user account on my own local machine to test an application with libcurl. I used this guide to help me figure out how to set up a jailed SFTP user: ...
1
vote
1answer
2k views

iptables prevents connection via ssh after port change despite ACCEPT rule

I have two machines hooked up to a router, one Windows with PuTTY, and one CentOS 6.4 with sshd and with the default SELinux still enabled. They can both ping each other successfully. I installed ...
0
votes
2answers
86 views

How to test that X11Forward is working or not?

X11Forwarding yes was enabled and sshd reloaded. But how can I test that X Forwarding works or not? xclock is not installed. Perl and python-base is installed, are there any tricks ex.: pop-up a GUI ...
4
votes
1answer
1k views

My reverse-ssh tunnel is using keepalives but they're not helping

I have an ssh client machine picard behind multiple unreliable internet connections - all with NAT. I have my server time, reliable with a static IP. I want to be able to access picard thorugh time. ...
1
vote
1answer
165 views

How to prevent ssh-agent from starting in CentOS?

How do I stop ssh-agent from starting when logging into CentOS via openssh? There are no references to ssh-agent in my bash startup scripts (.bashrc) or /etc/bashrc.
1
vote
2answers
3k views

Allowing only specific users to login via ssh at one port and others to login via another port

I have the following use case: Need to allow users to login from a secured, trusted network and then allowing a couple (only two) mobile users to login remotely on a Linux Centos machine. I can make ...
1
vote
1answer
221 views

Why is sshd looking at a non-existent public key file?

In an effort to get SSH keys working I'm tailing the sshd authorization log and I see these lines: debug1: test whether pkalg/pkblob are acceptable debug1: temporarily_use_uid: 10144/10029 (e=0/0) ...
1
vote
1answer
761 views

Unable to make sshd start at boot time on centos 6.4 . It starts ONLY after I login from console

I have installed centos 6.4 on a desktop and wanted to access it mostly remotely. For this, I tried ...
15
votes
2answers
2k views

SSH ignores characters after correct password string?

Remote machine 10.10.10.1 has password "asdFGH12" for user named "user". I'm able to log in even if I type in password "asdFGH12dasdkjlkjasdus" or any other characters after the "asdFGH12" string. $ ...
2
votes
1answer
248 views

ssh-add -D doesn't erase stored keys from the ssh-agent

How come this happens?: stan@tcpc:~/.ssh$ ssh-add -l 8192 e0:45:5e:cc:45:3e:17:2b:a6:54:6f:8d:53:1b:j2:e3 github (RSA) 2048 25:41:53:a6:45:5d:ac:eb:5c:45:f8:ce:42:a9:he:aa BITBUCKET (RSA) ...
12
votes
5answers
689 views

what's the purpose of ssh-agent?

I've read the official definition: ssh-agent is a program to hold private keys used for public key authentication (RSA, DSA, ECDSA). The idea is that ssh-agent is started in the beginning of an ...
2
votes
1answer
90 views

Assuming sshd allows only public key authentication, how do I log the fingerprints?

With OpenSSH, how can I log the fingerprints of the keys used for authentication? I would like to log it in production, so it would be best if this wasn't just some debug setting or similar.
1
vote
1answer
1k views

Set up chroot for LDAP users in RHEL6

I have been working on this for 2 days now and am about to give up so someone please help. I have a Red Hat 6 server joined to my active directory domain. Logins work just fine under normal ...
0
votes
1answer
292 views

ssh daemon error: sshd must be own

Running service sshd restart and then service sshd status on my system as root prints the following error: Redirecting to /bin/systemctl status sshd.service sshd.service - OpenSSH server daemon ...
3
votes
1answer
5k views

Fedora 18 - Start sshd on boot

I've just installed Fedora 18, and trying to configure sshd - I used chkconfig but this is only starting sshd when a user is logged in. How do I change so that sshd starts on system boot?
3
votes
1answer
3k views

SSH publickey works for root but not user [duplicate]

Possible Duplicate: Why am I still getting a password prompt with ssh with public key authentication? I'm setting up a remote server. The sshd is configured to use publickey only. There ...
2
votes
3answers
2k views

How to limit ssh access for localhost only?

I need to forbid ssh access (except localhost) for specified user. So. ssh localhost should work. ssh hostname from outside should not work for that user. All other users should work as usual.
2
votes
3answers
1k views

Use SSH key authentification with custom user $HOME

I have some users which have different $HOME directories than /home/... The user homes are under /pkg/homeand /pkg owner is a different user but all users have group access to /pkg. But it seems ...
5
votes
5answers
657 views

How to setup password-less ssh with RSA keys

I am trying to setup a password-less SSH configuration between two machines and am having trouble. There are a ton of howtos out there that I have followed and have had no success. Here are ...