the secure shell (SSH) daemon

learn more… | top users | synonyms

1
vote
2answers
15 views

Forward ssh for git user to git server

It is surprisingly difficult to find information on this simple problem. Like many people we run a gitlabs/gogs server on a remote instance. Currently it listens on port 10022. We also run ssh on ...
2
votes
1answer
26 views

enable access via ssh-key without using ~/ssh/authorized_keys

i want to enable access to a home dirs via ssh/scp with an key. Normally i would place the pub key into ~/ssh/authorized keys But i want disable the ability to add or remove ssh-keys (turn off ...
0
votes
1answer
26 views

Make sshd override login shell of a group of users

My users are shared across a number of machines via LDAP. For one of those machines (let's call it 'fileserf'), I would like to restrict some users in what they can do (actually: prevent them from ...
0
votes
2answers
47 views

Why does SSH server say, “authorized_keys is not a regular file”?

I've been trying to configure the login with a key generated from puttygen so I can disable password authentication. I saved a private key from puttygen and copied the public part to my ...
2
votes
1answer
64 views

SSH/SCP Connection problem | Lost connection

We are unable to ssh or scp to a particular host, SSH Connection hangs for a while and then gets disconnected and we get this error "Lost connection" All the hosts are CentOS 6.7 Openssh version ...
0
votes
1answer
1k views

How to start sshd on Puppy Linux?

I have installed sshd on puppy linux. Can someone tell me how to start sshd on it?
-1
votes
2answers
39 views

Need the sshd server be run in root privilege for a password-less login? [closed]

I mean: if the sshd is't being run in root account, then how can it let the remote ssh client run shell or other command in root account ? if sshd call the login command, then the user could login ...
1
vote
1answer
47 views

How can I restrict SSH login on CentOS 7 to Active Directory groups? [closed]

I've successfully added CentOS 7 to AD and can login locally or SSH with domain credentials before I try restricting login. I'm using the AllowGroups flag in sshd_config and this works if I specify a ...
3
votes
2answers
36 views

How much RAM should an SSH connection typically use?

I'd like to ask about how much memory an SSH connection should take typically. Here is how I'm finding out how much of a RAM hit is incurred: Kindly don't get vehement that I'm using a GoDaddy shared ...
0
votes
1answer
16 views

The path to sshd centos

How do I find the path to sshd? I need it to configure some stuff but the instructions just say /path/to/sshd. Does that mean the sshd_config file or something else? is there a default? or terminal ...
0
votes
1answer
38 views

How can I avoid always having to use `eval 'ssh-agent -s'`

I can't figure out why everytime I ssh back into my server I always have to start my ssh agent with the command eval 'ssh-agent -s' followed by ssh-add <my_key.pem> in order to successfully ssh ...
0
votes
0answers
21 views

How to get informed about EVERY incoming ssh connection (e.g. with no remote command specified)

The case I'm used to set up automatic reverse ssh tunnels to remote computers via my server with cron. Usually I use the following entry: @reboot sleep 300 && ssh -MNf -R xxx22:host:22 ...
0
votes
2answers
122 views

Unable to login with SSH-RSA key

This post is following this question : Authentication refused: bad ownership or modes for file /var/git/.ssh/authorized_keys . The issue as exposed there is solved (about files modes of the ...
5
votes
1answer
2k views

ssh-add -D doesn't erase stored keys from the ssh-agent

How come this happens?: stan@tcpc:~/.ssh$ ssh-add -l 8192 e0:45:5e:cc:45:3e:17:2b:a6:54:6f:8d:53:1b:j2:e3 github (RSA) 2048 25:41:53:a6:45:5d:ac:eb:5c:45:f8:ce:42:a9:he:aa BITBUCKET (RSA) ...
8
votes
5answers
62k views

X client forwarded over SSH “cannot open display: localhost:11.0”

I have enabled X forwarding on remote machine where SSH server is running: # grep -i forward /etc/ssh/sshd_config X11Forwarding yes # On local machine, I have started SSH client with -X flag ...
3
votes
2answers
292 views

SSHD Password Feedback (Show Asterisks for Characters)

Is it possible to have SSHD show asterisks for the password characters much like pwfeedback does for sudo? I am using CentOS 6.5. For example:
0
votes
0answers
19 views

Trying to make a SSH Tunel [duplicate]

I configurated a bastion server on AWS on my public subnet. I can make direct ssh to the ec2 instance inside the private subnet, using the bastion host. I can connect to the bastion host and check ...
1
vote
2answers
34 views

Add user with root/administrative privileges

quick questions. I'm running lots of Debian boxes (as servers), we don’t install the UI. We would like to setup monitoring Via a SSH connection (monitoring tool establishing an SSH connection to scan ...
2
votes
1answer
54 views

How to allow unauthenticated logins over ssh on FreeBSD?

I created an account ckurs on my FreeBSD 10 workstation. This account uses a custom shell-script as a login-shell that attaches the user to a tmux-session in read-only mode. I have sufficiently ...
1
vote
1answer
34 views

Force SSH password prompt without restarting the service [closed]

I've met a problem when I configure SSH users in Centos7. There are two computing nodes, for example: hostname: node1 users: user1 user2 hostname : node2 users :user1,user2 If I input the ...
0
votes
0answers
9 views

From when does OpenSSHD use SHA-2?

IMHO in OpenSSHD, SHA* is only used for "Data Integrity Verification". Question: But from which version does OpenSSHD use SHA-2 as default?
1
vote
2answers
44 views

Why ssh is not authenticating the password [closed]

I'm trying ssh to another machine with option k or K. It is not verifying the password. With any string in password section, it is logging in. what is the reason behind this? Example: ssh -k ...
6
votes
2answers
62 views

Isolate SSH Authentication Failures into Own Log File on RHEL 6.6

This may be impossible, but I've got a case where we want to log SSH authentication failures separately from standard SSH logging on a RHEL 6.6 box. I am aware we can use SyslogFacility with ...
-2
votes
1answer
37 views

What is the maximum number of ssh connections we can do and how can i check in linux

I am trying to figure out how many max number of ssh connections we can do to a machine. where we need to change this value if i want more or reduce the connections. i mean the path of the file.
-4
votes
1answer
47 views

How to disable ssh remote login using tcp wrapper [closed]

I want to use tcp wrapper to disable ssh remote login from a client on the server. How do I find out if sshd supports tcp wrapper and hence use it to disable ssh login?
2
votes
2answers
98 views

How do I configure sshd to 1) require public key _and_ 2) require a password for login?

How do I configure sshd to 1) require public key and 2) require a password for login? Note that I am not referring to the symmetric encryption of the client's key here. I am referring to a server-side ...
4
votes
1answer
26 views

How to avoid calling 'startx' upon ssh login

my current situation is that in my .zprofile file I have the following line I found somewhere on the internet [[ -z $DISPLAY && $XDG_VTNR -eq 1 ]] && exec startx I think it's ...
0
votes
1answer
5k views

CentOS 7 add new user with root privileges

I am reading this tutorial, and trying to create a new user with root privileges and then block root access via ssh in a CentOS 7 server. The problem is that the new user is blocked from doing root ...
0
votes
1answer
29 views

What does this mean :“sshd 5927 root 3u IPv4 66110 0t0 TCP 192.168.1.165:ssh->43.229.53.76:60 673 (ESTABLISHED)”

I tried to check who is connecting to my server and got this line I could not recognized. I used sudo lsof -i -n | egrep '\<ssh\>'. And these lines looks odd to me: sshd 5921 sshd ...
0
votes
0answers
468 views

SSH Connection Refused In CentOS?

For a week, SSH was working perfectly. Today I restarted my server and I got this error in my Mac terminal: ssh: connect to host 162.243.7.7 port 22: Connection refused This is very odd... I am ...
4
votes
2answers
70 views

How to change service type of well defined ports in SElinux (centOS 6.5)

I need to be able to run SSH on port 23 instead of 22 on CentOS 6.5. SElinux won't allow that, as it has it as tcp/23 defined in policy. Any steps on how can I go about changing service type from ...
2
votes
2answers
66 views

Does keyboard-interactive authentication support two sequential passwords?

Keyboard-interactive authentication(RFC 4256), which is implemented as ChallengeResponseAuthentication in OpenSSH configuration file, allows one to chain multiple authentication methods. For example ...
4
votes
2answers
38 views

Understand the PasswordAuthentication in sshd configuration

I have an OpenSSH server which supports only password authentication: [martin@ ~]$ ssh -v 10.10.1.183 -l root OpenSSH_5.2p1 FreeBSD-20090522, OpenSSL 0.9.8k 25 Mar 2009 debug1: Reading configuration ...
1
vote
0answers
64 views

Unable to ssh in to machine behind router

I'm trying to ssh into a desktop which is behind a router from a remote location. I've set the router (TP-link AC1750) to forward TCP connections to port 8000 along to port 8000 on my desktop using ...
5
votes
3answers
10k views

Allowing only specific users to login via ssh at one port and others to login via another port

I have the following use case: Need to allow users to login from a secured, trusted network and then allowing a couple (only two) mobile users to login remotely on a Linux Centos machine. I can make ...
3
votes
2answers
5k views

slow ssh login to a remote machine

I am experiencing slow ssh login from a machine to a remote machine. The verbose of ssh is shown below in two broken blocks. ssh freezes for 15 seconds in the below shown block. [root@zabbix ~]# ssh ...
2
votes
1answer
34 views

Use two SSH ports, but open only one?

My iptables.conf looks roughly like this: -A INPUT -p tcp --dport 65000 -j ACCEPT -A INPUT -j DROP My sshd_config looks like this: Port 22 Port 65000 #AddressFamily any #ListenAddress 0.0.0.0 ...
9
votes
1answer
21k views

Installing fail2ban on CentOS 7

I am using @GarethTheRed 's answer to this question to install fail2ban on a remote CentOS 7 server. I am able to complete all the steps up until tail -f /var/log/fail2ban.log, at which point I get ...
5
votes
1answer
2k views

Logging ssh remote commands to `bash_history`

SSH allows a remote user to issue some command without interactively logging in to the server, as the last line of ssh usage indicates: usage: ssh [-1246AaCfgKkMNnqsTtVvXxYy] [-b bind_address] [-c ...
6
votes
2answers
1k views

Can't login to a remote machine with key

I used to login to a remote machine( I have to root of this machine) using key. Both my local machine and remote machine is in f23. From last few days, I can't login to this machine using key. It is ...
3
votes
2answers
153 views

SSH - Connection closed after correct login

I had SSH working on my Raspberry but suddenly it's not working anymore and I get the follwing output. Any help is really appreciated. Thanks, ssh -vvv pi@192.168.1.151 OpenSSH_6.9p1, LibreSSL ...
17
votes
5answers
52k views

Where are my sshd logs?

I can't find my sshd logs in the standard places. What I've tried: Not in /var/log/auth.log Not in /var/log/secure Did a system search for 'auth.log' and found nothing I've set /etc/ssh/sshd_config ...
1
vote
1answer
44 views

chroot directive in sshd_config fails to exclude users

In Ubuntu, I have this SSH server configuration set up in /etc/ssh/sshd_config: Subsystem sftp internal-sftp UsePAM yes ChrootDirectory %h ForceCommand internal-sftp GatewayPorts no ...
1
vote
0answers
51 views

Why is denyhosts not banning *some* brute force root SSH login attempts?

I recently noticed in my logwatch emails from a couple of servers that although denyhosts was doing its job for some brute force root ssh login attempts others seem to be ignored and continue to ...
0
votes
0answers
22 views

Why wont my ssh key work on a different port? [duplicate]

Edit: This answer, fixed my problem. I have used ssh-copy-id to move my ssh key to my server. I have changed it so that my server is listening for ssh connections on port 50505 instead of the ...
2
votes
1answer
84 views

How to Use who/w with Non-Interactive SSH logins

I'd like to perform selective shutdown of a server in my house after backing-up over SSH. My post-backup script waits for five minutes and then runs a very short 'safe shutdown' script located on the ...
3
votes
1answer
522 views

How to tell systemd to start sshd later in the boot sequence?

My sshd_config file specifies it should listen on some specific IP addresses instead of on all IP addresses. The problem is that one of these NICs doesn't come up until later in the boot sequence. ...
0
votes
0answers
204 views

How to restart ssh server / sshd on Linux?

I am trying to restart the ssh server on my server which is running Fedora Cloud. I have tried the method here http://www.cyberciti.biz/faq/howto-restart-ssh/ (# service sshd restart) and get Failed ...
2
votes
2answers
150 views

Can't connect to another user than root through SSH

I'm trying to connect to a server on my local network using SSH and would like to be able to login as storm but not as root (for obvious security purposes). I copied my .pub key to the ...
1
vote
1answer
31 views

CentOS - SSH - File That Change Iunput Setup

I use CentOS 7 and I need to change the file that delivers the SSH configuration /etc/ssh/sshd_config to /etc/ssh/sshd_config_other. This demand was due to a security automation that always ...