the secure shell (SSH) daemon

learn more… | top users | synonyms

0
votes
1answer
2k views

How to start sshd on Puppy Linux?

I have installed sshd on puppy linux. Can someone tell me how to start sshd on it?
0
votes
1answer
29 views

sshd AllowGroups group not granting access

I have this weird situation: On a Centos 6.6 box, in my sshd_config, I have the line AllowGroups foo bar baz just like on all the other servers. However, when user baz (whose group is baz) tries to ...
12
votes
3answers
2k views

tmux session killed when disconnecting from ssh

Summary: I'm trying to figure out why my tmux session dies when I disconnect from ssh Details: I have tmux installed on an Arch Linux system. When I start a tmux session I can detach from it and ...
0
votes
1answer
43 views

I have to restart sshd every time I reboot

I have an arch machine that I use as a local server. It used to be that every time I rebooted it (which was not often), I had to login and enter # dhcpcd net0. After that, I could ssh into it from my ...
5
votes
2answers
8k views

Fedora 18 - Start sshd on boot

I've just installed Fedora 18, and trying to configure sshd - I used chkconfig but this is only starting sshd when a user is logged in. How do I change so that sshd starts on system boot?
-2
votes
2answers
38 views

Why does running a Cron Job as root stop the sshd service and disallows login for other users?

I have a script for getting Clamav updates from another server which I run as a Cron job as root. Also, I have root login disabled for /sbin/nologin. But this has serious implications on the system as ...
1
vote
1answer
128 views

Being Prompted for Password After Already Registered Public Key On server [closed]

NOTE: This is not a duplicate to the popular question. Why am I still getting a password prompt with ssh with public key authentication? I had an original post but I did not get much answers helping ...
0
votes
0answers
12 views

ssh warning banner on centos 6.7

I am using the kick start installation for my centos 6.7. After installation, the output of mount command looks like below: proc on /proc type proc (rw) sysfs on /sys type sysfs (rw) devpts on ...
4
votes
1answer
113 views

Separate messages of multiple sshds in syslog-ng

Is there a common way of distinguishing between the messages of multiple processes in syslog-ng beside setting different facilities? +1 if filtering and therefore logging in different files would be ...
3
votes
2answers
50 views

How to make ssh account capabele to only sshfs and rsync?

I'd like to make ssh account that is capable of doing two things: mounting (can be one) directory via sshfs performing backup&recovery of his/her desired directories using rsync I would love ...
2
votes
2answers
36 views

sshd: Problem disabling password authentication from outside LAN

I have a CentOS 7 server with 2 NICs, one inside the LAN with a private IP 192.168.1.1 (lan0) and one with a public internet IP (ppp0) For connections originating from inside the LAN I want password ...
0
votes
0answers
31 views

Why would my putty key be refused “server refused our key”, but works on next attempt?

I use PuTTY, and I use a key generated with PuTTYgen. My server is a VPS running Ubuntu 14.04 (perhaps this belongs on askubuntu, but I think it may not be Ubuntu specific). The public portion of the ...
0
votes
1answer
51 views

unable to SSH to eth1 after bringing down eth0

I have a remote machine with 2 interfaces: eth0 and eth1. I am able to ssh using eth0 ip address as well as eth1 ip addr. However, things go strange once I bring down eth0 using the command ifdown ...
0
votes
2answers
44 views

How to suppress debug2 messages during SSH session?

When I am logged into my home Linux machines via SSH, I get the following debug output a few times every minute: debug2: channel 0: request window-change confirm 0 When I am editing files in nano, ...
-2
votes
2answers
38 views

linux + ssh login took time from one server to another

I have a central Linux server (Red Hat version 6.5), and from this server I establish SSH sessions to other servers. To one server the SSH login took around 5 seconds, while to all others it took ...
4
votes
1answer
49 views

How to avoid calling 'startx' upon ssh login

my current situation is that in my .zprofile file I have the following line I found somewhere on the internet [[ -z $DISPLAY && $XDG_VTNR -eq 1 ]] && exec startx I think it's ...
3
votes
1answer
31 views

Remove any ssh-keygen commands from init scripts

I'm running Ubuntu 14.04 64 bit server. I'm following this guide: Secure Secure Shell https://stribika.github.io/2015/01/04/secure-secure-shell.html It includes the instruction: remove any ...
2
votes
1answer
34 views

In journald, why are some sshd log entries not attributed to ssh.service

When using journalctl to inspect my journald logs the output from the commands journalctl -u ssh.service and journalctl _COMM=sshd differ. The first command produces just a subset of the log ...
0
votes
0answers
15 views

Testing OpenSSH Logging

I'm attempting to turn on logging inside OpenSSH running in an Alpine Docker container. I made sure to install rsyslog and start the daemon with /usr/sbin/rsyslogd. My sshd logging settings are as ...
0
votes
2answers
75 views

SSH always connects to the same IP address [closed]

No matter what the host is, SSH keeps trying to connect to 162.13.177.241. Command ssh -v user@host Output debug1: Connecting to 162.13.177.241 [162.13.177.241] port 22. My /etc/hosts file is ...
0
votes
0answers
37 views

sshd error: no more sessions

I see many lines in /var/log/auth.log about sshd sessions, like below Mar 25 11:04:47 hosting-prd sshd[7882]: error: no more sessions Mar 25 11:04:47 hosting-prd sshd[7882]: error: no more sessions ...
0
votes
0answers
34 views

ssh PrintLastLog prints actual login

I connect with my server via ssh and always it shows the last log: Last login: Sat Mar 19 14:05:17 2016 from... but that login is my actual login. What's the utility of this info? It should print the ...
5
votes
2answers
3k views

ssh-add -D doesn't erase stored keys from the ssh-agent

How come this happens?: stan@tcpc:~/.ssh$ ssh-add -l 8192 e0:45:5e:cc:45:3e:17:2b:a6:54:6f:8d:53:1b:j2:e3 github (RSA) 2048 25:41:53:a6:45:5d:ac:eb:5c:45:f8:ce:42:a9:he:aa BITBUCKET (RSA) ...
1
vote
1answer
44 views

SSH tunnels force new tunnel and kill old session

This is the situation: I have a Linux server running Ubuntu server 14.04 to which multiple computers connect and authenticate with SSH and try to open a reverse tunnel. These computers usually do not ...
25
votes
6answers
63k views

Where are my sshd logs?

I can't find my sshd logs in the standard places. What I've tried: Not in /var/log/auth.log Not in /var/log/secure Did a system search for 'auth.log' and found nothing I've set /etc/ssh/sshd_config ...
0
votes
1answer
38 views

reading the output of netstat for tcp

If I ssh root@server -R 5901:localhost:5900 and netstat -an I get: Active Internet connections (servers and established) │ Proto Recv-Q Send-Q Local Address ...
0
votes
1answer
42 views

How can I restrict multiple groups or users to specific folders with SFTP? [duplicate]

I know how to restrict users of groups to their home folders and remove terminal access, but I cannot seem to get it working for multiple groups. I have two groups: groupA groupB My sshd_config ...
1
vote
0answers
58 views

Slow SSH connection on embedded platform

I am operating an embedded device running the linux core. I have OpenSHH_4.9p1 installed running in debug mode and trying to establish an SSH connection using PuTTY. After the login screen everything ...
0
votes
1answer
18 views

2 Factor Authentication in SSH using public key and yubikey

I'm trying to setup 2 Factor Authentication. I want to login via 2 methods: Public Key > YubiKey Password > YubiKey And now I have this done, but I want to specify what users can login via ...
6
votes
4answers
4k views

How to setup password-less ssh with RSA keys

I am trying to setup a password-less SSH configuration between two machines and I am having a problem. There are a ton of howtos out there that I have followed and have had no success. Here are the ...
1
vote
0answers
89 views

Freeradius PAM create user and home on login

At this moment i have installed freeradius and PAM radius properly. When i create an account on the system and set a password in /etc/raddb/users.conf the user can login. Sudo also works great with ...
3
votes
0answers
49 views

Cant SSH in to cloned EC2 server from public network [closed]

I created a new AWS EC2 instance, using the AMI image, configured it to my liking, and saved an image, (Call this svr01). Then I created another EC2 instance, using that same image ((Call this svr02). ...
3
votes
1answer
66 views

kill user who is idle for more than 3 hours

I have a user who logs in via sftp but he opens a lot of sessions and keep them opened. This will make ssh and sftp very slow for all other users. I thought about using ClientAliveInterval number ...
9
votes
5answers
1k views

Failing to block brute force ssh with iptables

I'm trying to block (slow down) brute force attacks on my sshd server. I'm following this guide http://www.rackaid.com/resources/how-to-block-ssh-brute-force-attacks/ which basically says I need to ...
1
vote
2answers
59 views

Forward ssh for git user to git server

It is surprisingly difficult to find information on this simple problem. Like many people we run a gitlabs/gogs server on a remote instance. Currently it listens on port 10022. We also run ssh on ...
2
votes
1answer
42 views

enable access via ssh-key without using ~/ssh/authorized_keys

i want to enable access to a home dirs via ssh/scp with an key. Normally i would place the pub key into ~/ssh/authorized keys But i want disable the ability to add or remove ssh-keys (turn off ...
1
vote
1answer
99 views

Make sshd override login shell of a group of users

My users are shared across a number of machines via LDAP. For one of those machines (let's call it 'fileserf'), I would like to restrict some users in what they can do (actually: prevent them from ...
0
votes
2answers
140 views

Why does SSH server say, “authorized_keys is not a regular file”?

I've been trying to configure the login with a key generated from puttygen so I can disable password authentication. I saved a private key from puttygen and copied the public part to my ...
1
vote
1answer
151 views

SSH/SCP Connection problem | Lost connection

We are unable to ssh or scp to a particular host, SSH Connection hangs for a while and then gets disconnected and we get this error "Lost connection" All the hosts are CentOS 6.7 Openssh version ...
0
votes
2answers
56 views

Need the sshd server be run in root privilege for a password-less login? [closed]

I mean: if the sshd is't being run in root account, then how can it let the remote ssh client run shell or other command in root account ? if sshd call the login command, then the user could login ...
1
vote
1answer
171 views

How can I restrict SSH login on CentOS 7 to Active Directory groups? [closed]

I've successfully added CentOS 7 to AD and can login locally or SSH with domain credentials before I try restricting login. I'm using the AllowGroups flag in sshd_config and this works if I specify a ...
3
votes
2answers
131 views

How much RAM should an SSH connection typically use?

I'd like to ask about how much memory an SSH connection should take typically. Here is how I'm finding out how much of a RAM hit is incurred: Kindly don't get vehement that I'm using a GoDaddy shared ...
0
votes
1answer
20 views

The path to sshd centos

How do I find the path to sshd? I need it to configure some stuff but the instructions just say /path/to/sshd. Does that mean the sshd_config file or something else? is there a default? or terminal ...
0
votes
1answer
53 views

How can I avoid always having to use `eval 'ssh-agent -s'`

I can't figure out why everytime I ssh back into my server I always have to start my ssh agent with the command eval 'ssh-agent -s' followed by ssh-add <my_key.pem> in order to successfully ssh ...
0
votes
0answers
28 views

How to get informed about EVERY incoming ssh connection (e.g. with no remote command specified)

The case I'm used to set up automatic reverse ssh tunnels to remote computers via my server with cron. Usually I use the following entry: @reboot sleep 300 && ssh -MNf -R xxx22:host:22 ...
0
votes
2answers
365 views

Unable to login with SSH-RSA key

This post is following this question : Authentication refused: bad ownership or modes for file /var/git/.ssh/authorized_keys . The issue as exposed there is solved (about files modes of the ...
11
votes
5answers
79k views

X client forwarded over SSH “cannot open display: localhost:11.0”

I have enabled X forwarding on remote machine where SSH server is running: # grep -i forward /etc/ssh/sshd_config X11Forwarding yes # On local machine, I have started SSH client with -X flag ...
3
votes
2answers
368 views

SSHD Password Feedback (Show Asterisks for Characters)

Is it possible to have SSHD show asterisks for the password characters much like pwfeedback does for sudo? I am using CentOS 6.5. For example:
0
votes
0answers
19 views

Trying to make a SSH Tunel [duplicate]

I configurated a bastion server on AWS on my public subnet. I can make direct ssh to the ec2 instance inside the private subnet, using the bastion host. I can connect to the bastion host and check ...
1
vote
2answers
62 views

Add user with root/administrative privileges

quick questions. I'm running lots of Debian boxes (as servers), we don’t install the UI. We would like to setup monitoring Via a SSH connection (monitoring tool establishing an SSH connection to scan ...