the secure shell (SSH) daemon

learn more… | top users | synonyms

7
votes
1answer
88 views
+50

tmux session killed when disconnecting from ssh

Summary: I'm trying to figure out why my tmux session dies when I disconnect from ssh Details: I have tmux installed on an Arch Linux system. When I start a tmux session I can detach from it and ...
0
votes
1answer
13 views

Migrate SSHD sftp Logging

currently my messages log file is filling up with Dec 19 08:46:43 XXXXXXXXX sftp-server[32357]: closedir and similar messages - is there a setting that I can move all sftp-server messages off to ...
0
votes
1answer
60 views

CentOS 7 add new user with root privileges

I am reading this tutorial, and trying to create a new user with root privileges and then block root access via ssh in a CentOS 7 server. The problem is that the new user is blocked from doing root ...
1
vote
0answers
24 views

SSHD_CONFIG keeps corrupting on reverse SSH setup

I have a reverse SSH setup to traverse an impenetrable CGN NAT. It works well, but the SSHD daemon on the client behind the NAT keeps dieing for unknown reasons (fails to start-up). The client ...
1
vote
1answer
26 views

Jail in chroot in debian 7.5 - Privileges Separation problem

I'm trying to create a jail for a user in my server. Let's call the user "juser". What do I want to achieve? I want an ssh user to be jailed in his home folder and not have any access (whatsoever) on ...
0
votes
0answers
56 views

ssh: connect to host 104.131.76.121 port 10222: Connection refused

I have been trying to solve this problem for quite some time. The error is in the title. The server is a digitalocean ubuntu 14.04. It was working before hand. I changed the ServerAliveInterval on ...
0
votes
1answer
22 views

Memory Required for SSH-only Linux Setup

I am attempting to set up a minimal Debian or CentOS installation for internal network access. The purpose of the setup will be to allow SSH access into the rest of the internal network—that's it. It ...
2
votes
1answer
121 views

installing fail2ban on CentOS 7

I am using @GarethTheRed 's answer to this question to install fail2ban on a remote CentOS 7 server. I am able to complete all the steps up until tail -f /var/log/fail2ban.log, at which point I get ...
0
votes
2answers
33 views

Pinpoint strange text at initiation of SSH session

On my OpenSUSE 13.1 (Gnome 3) system, whenever I start a SSH session, somewhere in the initialization, the terminal outputs some strange lines. Last login: Sat Nov 29 00:00:00 2014 from [HOSTNAME] ...
2
votes
1answer
472 views

ssh-add -D doesn't erase stored keys from the ssh-agent

How come this happens?: stan@tcpc:~/.ssh$ ssh-add -l 8192 e0:45:5e:cc:45:3e:17:2b:a6:54:6f:8d:53:1b:j2:e3 github (RSA) 2048 25:41:53:a6:45:5d:ac:eb:5c:45:f8:ce:42:a9:he:aa BITBUCKET (RSA) ...
0
votes
0answers
105 views

Key-based authentication from PyCharm / JSCH to OpenBSD fails

I am trying to configure PyCharm (java-based IDE) to connect via sftp to a new OpenBSD 5.6 machine with an almost-default setup. However, it keeps returning an error "Algorithm negotiation fails". I ...
0
votes
0answers
65 views

ssh with rsa key asks for password

I have a server with Ubuntu 14.04 x64 operation system. Part of my sshd_config file (entire file): Port 2202 Protocol 2 PermitRootLogin without-password StrictModes yes RSAAuthentication yes ...
3
votes
1answer
626 views

Public-Key Authentication w/ Jailed SFTP User

I'm trying to set up a jailed SFTP user account on my own local machine to test an application with libcurl. I used this guide to help me figure out how to set up a jailed SFTP user: ...
1
vote
0answers
36 views

Some commands does not work in su envirorment

I have logged in to CentOS 5 machine with normal user and then I used su command to login as root user. Now commands like ifconfig, useradd, userdel are not working on machine and it gives command not ...
3
votes
1answer
30 views

Allow SFTP users to create sub-accounts

Environment Ubuntu 14.04.1 LTS server edition OpenSSH_6.6.1p1 Ubuntu-2ubuntu2, OpenSSL 1.0.1f 6 Jan 2014 Current Configuration SFTP password-protected accounts are setup for Alice and Bob. Their ...
0
votes
1answer
51 views

How to start sshd on Puppy Linux?

I have installed sshd on puppy linux. Can someone tell me how to start sshd on it?
2
votes
1answer
128 views

Is there a way to run a privileged command upon successful SSH login (not necessarily with shell or PTY)?

I'd like to run a privileged command upon successful SSH logins at the server's end. However, this has to be in the server configuration (sshd_config or anything else that cannot be manipulated or ...
0
votes
1answer
44 views

How to deny SSH Connection from other user [closed]

I need to know is there is any other way to deny ssh entry other than /etc/ssh/sshd_config. If any please let me know.
5
votes
5answers
1k views

ssh command unexpectedly continues on other system after ssh terminates

I'm running the below command, and monitoring the output file on the other system: ssh $ip_address 'for n in 1 2 3 4 5; do sleep 10; echo $n >>/tmp/count; done' If I kill the ssh command ...
3
votes
2answers
1k views

Disable ssh banner for specific users or ips

I've enabled the banner that appears before the password prompt by setting it it sshd_config. However certain users (especially me) really don't need to see the banner (it also screws up a lot of ...
1
vote
0answers
23 views

Are there any loopholes in IP restricting sshd?

Say that i want to only allow username/password logins on my private network, but restrict all external sources on to key/cert login. I would do something like this: RSAAuthentication yes ...
2
votes
2answers
113 views

How to upgrade SSHD without the change of the server key?

So... we need to upgrade the SSHD. How can we do this without having that issue that the people (who are signing in through ssh) would see the message: ...
1
vote
1answer
195 views

How do I troubleshoot ssh tunnels disconnection?

I am using SSH tunnels launched via autossh at boot on a device installed at remote locations. Up to now everything was working fine but yesterday the connection partly went down and autossh wouldn't ...
1
vote
3answers
204 views

Can't ssh to a machine

All of a sudden, I couldn't ssh to a machine to which I used to ssh earlier. Consider I am ssh-ing from A to B. Output when I run ssh root@ip_addr_of_B I get: Permission denied ...
2
votes
3answers
78 views

Redirect SSH user server side

I know that I can create shortcuts for specific users/servers on the client side via ~/.ssh/config or /etc/ssh/ssh_config, but I would like to do something similar but on the server side. That is, ...
3
votes
1answer
156 views

How to know which public key was used when someone used passwordless ssh login?

Say for some reason, there is only a "user" account on a shhd server. Everyone has his own private key to ssh to the server, as "user". Then, is there a way to see who is he (during or after his ...
3
votes
1answer
86 views

How do you verify if an INCOMING ssh tunnel is still up and who it belongs to?

See edit below for short version I am having issues displaying the status of the ssh tunnels on our server. Here is some relevant info: user001 = remote client's username 123.123.123.123 = ssh ...
6
votes
2answers
15k views

X client forwarded over SSH “cannot open display: localhost:11.0”

I have enabled X forwarding on remote machine where SSH server is running: # grep -i forward /etc/ssh/sshd_config X11Forwarding yes # On local machine, I have started SSH client with -X flag ...
1
vote
1answer
28 views

How does ssh server defines which key to use first having more than 1?

I have just found out that on my Ubuntu machine I have more public keys to serve in /etc/ssh directory: $ ll /etc/ssh total 296K -rw-r--r-- 1 root root 237K lip 3 2013 moduli -rw-r--r-- 1 root root ...
3
votes
1answer
254 views

SSH Public Key authentication - works only after a physical login

I am trying to connect via SSH to my ubuntu server with public key authentication. For some reasons I get an "Permission denied (publickey)." on the client, whenever I execute ssh -i ~/.ssh/id_rsa ...
1
vote
0answers
34 views

sshd suddenly wants a passphrase from Linux box, but not from windows (putty)

My Amazon EC2 instance running Ubuntu is no longer letting me ssh in via my local Linux system. I haven't changed a darned thing on either side but now it wants a passphrase and says nope when I ...
1
vote
0answers
67 views

Kerberos Forwarding in SSSD

So, I'm trying to set up forwarding with Kerberos and seem to have some problems. On some of my servers I'm able to forward after receiving a ticket; however, some I'm not. My system setup is a ...
-1
votes
2answers
49 views

Connect to a remote linux server that is in default setup, not configured to be connected?

In our Company we have an internal-wikipedia-like help site. The Problem is, the MindTouch-Wiki is out of date, so i have to update it! The Problem is, its running virtual. Its Ubuntu 7.7 In ...
1
vote
0answers
134 views

pam_tacplus.so and sshd: skip user validation?

I'm trying to implement tacacs authentication on a freebsd box as a client. The box is actually a network appliance that SHOULD have this config built into its cli/ui but doesn't. Since it's built ...
1
vote
1answer
90 views

What is the maximum length of an ssh-banner message?

It seems that if the banner message is longer than a certain limit, no banner at all will be displayed to the client. What is either the character or file size limit?
2
votes
0answers
74 views

How does ssh work when client and host are on the same machine? [closed]

I illustrate my question with the help of docker containers but this example is orthogonal to the rest of the problem. In fact any program that allows the use of bridge interfaces and ssh would do. I ...
1
vote
1answer
846 views

slow ssh login to a remote machine

I am experiencing slow ssh login from a machine to a remote machine. The verbose of ssh is shown below in two broken blocks. ssh freezes for 15 seconds in the below shown block. [root@zabbix ~]# ssh ...
2
votes
1answer
677 views

sshd service is not being started: Centos 6.5

I am getting the error message below when I start the sshd service in centos 6.5. Any help to get rid of this issue? 81: GSSAPIAuthentication yes 83: GSSAPICleanupCredentials yes 97: UsePAM yes ...
1
vote
1answer
79 views

SSH key authentication works with /usr/sbin/ssh -d, does not with the daemon?

CentOS x64 6.5: if I connect as root to my server and do the following: service sshd stop /usr/sbin/ssh -d I'll able to connect as user using public key authentication from my development machine: ...
3
votes
2answers
299 views

allow only specific users to login via sshd, but refuse connect to non-listed users

I'm running a CentOS server (7.0) and I'd like to login via sshd as a user, not root. So I set PermitRootLogin no in the config file and su - after login. I've received lots of hacking activities and ...
0
votes
2answers
183 views

SSH Server on Ubuntu not works

I wanted to start SSH server on Ubuntu 14.04 running on VirtualBox. I installed Openssh, sshd, etc., configured sshd_config to listen on ip, which I see in ifconfig and it not working. I'm starting ...
0
votes
1answer
221 views

Separate SSHD Authpriv logs into /var/log/sshd, all other authpriv logging goes to messages

Right now, sshd is using the authpriv facility. The level of logging is fine, but I don't want it in the syslog, I want it to go to /var/log/sshd (which doesn't yet exist) on Red Hat Linux/Enterprise ...
1
vote
1answer
794 views

Can use Password authentication with SFTP even though “PasswordAuthentication no” in /etc/ssh/sshd_config

I have enabled SSH-keys based authentication on the Ubuntu 14.04 server, disabled root login using SSH and can connect successfully using SSH-keys based authentication with my user account blahblah on ...
5
votes
1answer
147 views

Linux: $SSH_CONNECTION is set even without SSHing to the server

I have a remote server and I am writing a script in the server and want it to fire only when I SSH. I thought of using the $SSH_CONNECTION and $SSH_TTY for this purpose. I found out that when I have ...
4
votes
2answers
274 views

Starting SSH server after VPN starts

I am running an OpenVPN server on Ubuntu 14.04 as well as OpenSSH. I have my SSH server configured to bind to an IP address on my VPN interface. Once my machine boots, binding to that IP fails. ...
1
vote
2answers
209 views

Locked myself out of Amazon EC2 SSH - This service allows sftp connections only

Doh. Locked myself out of SSH on an Amazon EC2 box after fiddling with ForceCommand internal-sftp in /etc/ssh/sshd_config in order to allow root log-in via SFTP. SFTP still works fine, but PuTTY ...
0
votes
3answers
37 views

Is there a log for sshd where I can see who has used ssh to access my PC? [duplicate]

I am running the OpenSSH daemon (sshd) on CrunchBang Linux, and I want to see a history of who (i.e. IP address) has logged in using SSH.
1
vote
1answer
50 views

CentOS 6.4: SSH RSA key issue, “[…]== rsa-key-20140711\n failed”

For some reason sshd is reading from my authorized_keys file a new line that does not exist. I generated the keys with puttygen, copied the public key text in as required, concatenated the key into ...
3
votes
1answer
115 views

SSHD Password Feedback (Show Asterisks for Characters)

Is it possible to have SSHD show asterisks for the password characters much like pwfeedback does for sudo? I am using CentOS 6.5. For example:
1
vote
1answer
93 views

SSH slow after configuring TCP Wrappers

We have SSH open on one of our production servers leaving it prone to various brute force attacks to break in. I reduced the attempts by changing the default port from 22. I want to further harden ...