the secure shell (SSH) daemon

learn more… | top users | synonyms

4
votes
2answers
108 views

How to change service type of well defined ports in SElinux (centOS 6.5)

I need to be able to run SSH on port 23 instead of 22 on CentOS 6.5. SElinux won't allow that, as it has it as tcp/23 defined in policy. Any steps on how can I go about changing service type from ...
1
vote
2answers
66 views

unable to SSH to eth1 after bringing down eth0

I have a remote machine with 2 interfaces: eth0 and eth1. I am able to ssh using eth0 ip address as well as eth1 ip addr. However, things go strange once I bring down eth0 using the command ifdown ...
1
vote
2answers
64 views

Add user with root/administrative privileges

quick questions. I'm running lots of Debian boxes (as servers), we don’t install the UI. We would like to setup monitoring Via a SSH connection (monitoring tool establishing an SSH connection to scan ...
1
vote
2answers
711 views

SSH via cert-authority

I'm trying to use SSH using signed certificates. I'm using ssh -i keys/client.key to connect to the target device. If I generate a public key from that private key (with ssh-keygen -y -f keys/client....
1
vote
2answers
422 views

SSH key authentication works with /usr/sbin/ssh -d, does not with the daemon?

CentOS x64 6.5: if I connect as root to my server and do the following: service sshd stop /usr/sbin/ssh -d I'll able to connect as user using public key authentication from my development machine: ...
3
votes
1answer
28 views

Ignore sshd inhibitors when rebooting

On my home PC, I set up sshd as an SFTP server so I could share files with my friends. However, when I attempt to reboot and someone has an SFTP client connected, I get the following message: $ ...
2
votes
1answer
180 views

CentOS 6.4: SSH RSA key issue, “[…]== rsa-key-20140711\n failed”

For some reason sshd is reading from my authorized_keys file a new line that does not exist. I generated the keys with puttygen, copied the public key text in as required, concatenated the key into ...
2
votes
1answer
330 views

How to prevent ssh-agent from starting in CentOS?

How do I stop ssh-agent from starting when logging into CentOS via openssh? There are no references to ssh-agent in my bash startup scripts (.bashrc) or /etc/bashrc.
1
vote
1answer
66 views

CentOS - SSH - File That Change Iunput Setup

I use CentOS 7 and I need to change the file that delivers the SSH configuration /etc/ssh/sshd_config to /etc/ssh/sshd_config_other. This demand was due to a security automation that always ...
1
vote
1answer
45 views

Is 2s a “normal” variation in ssh's execution time?

In my program, ssh "normally" takes around 0.3s, however sometimes it may take more than 2s. I wonder whether this is a normal variation for ssh's execution time, and whether there is some thing I ...
1
vote
1answer
231 views

failure in connecting to my server through ssh

My goal: I want to be able to ssh to my workstation from external client. My workstation(in the following also referred as server) is on a lan. Its ip address on this lan is obviously different from ...
0
votes
1answer
29 views

SSH Tunnel “channel x: open failed: connect failed: Connection timed out”

I've Googled and searched far and wide for some sort of "solution" to this problem; however, the best answer I got is "There's nothing that can be done." Of course, that's unsatisfying, so here goes: ...
0
votes
1answer
41 views

sshd AllowGroups group not granting access

I have this weird situation: On a Centos 6.6 box, in my sshd_config, I have the line AllowGroups foo bar baz just like on all the other servers. However, when user baz (whose group is baz) tries to ...
0
votes
1answer
60 views

How can I avoid always having to use `eval 'ssh-agent -s'`

I can't figure out why everytime I ssh back into my server I always have to start my ssh agent with the command eval 'ssh-agent -s' followed by ssh-add <my_key.pem> in order to successfully ssh ...
0
votes
1answer
37 views

What does this mean :“sshd 5927 root 3u IPv4 66110 0t0 TCP 192.168.1.165:ssh->43.229.53.76:60 673 (ESTABLISHED)”

I tried to check who is connecting to my server and got this line I could not recognized. I used sudo lsof -i -n | egrep '\<ssh\>'. And these lines looks odd to me: sshd 5921 sshd ...
0
votes
1answer
83 views

Migrate SSHD sftp Logging

currently my messages log file is filling up with Dec 19 08:46:43 XXXXXXXXX sftp-server[32357]: closedir and similar messages - is there a setting that I can move all sftp-server messages off to ...
0
votes
1answer
176 views

Memory Required for SSH-only Linux Setup

I am attempting to set up a minimal Debian or CentOS installation for internal network access. The purpose of the setup will be to allow SSH access into the rest of the internal network—that's it. It ...
0
votes
1answer
2k views

How to start sshd on Puppy Linux?

I have installed sshd on puppy linux. Can someone tell me how to start sshd on it?
0
votes
1answer
553 views

Separate SSHD Authpriv logs into /var/log/sshd, all other authpriv logging goes to messages

Right now, sshd is using the authpriv facility. The level of logging is fine, but I don't want it in the syslog, I want it to go to /var/log/sshd (which doesn't yet exist) on Red Hat Linux/Enterprise ...
4
votes
0answers
796 views

SSH AuthorizedKeysCommand and SELinux

I'm trying to use the SSH AuthorizedKeysCommand in a CentOS 6.5 machine, but I'm encountering an SELinux error. When I switch SELinux to permissive mode - using setenforce 0 - it works, but when I ...
3
votes
0answers
307 views

Kerberos Forwarding in SSSD

So, I'm trying to set up forwarding with Kerberos and seem to have some problems. On some of my servers I'm able to forward after receiving a ticket; however, some I'm not. My system setup is a ...
3
votes
0answers
128 views

Are there any canned solutions for running sshd in the initrd?

This is mostly aimed at Debian/Ubuntu, but I feel savvy enough on a variety of distros to be able to adapt the solution for one distro to another. Here's my scenario. There are a few situations when ...
3
votes
0answers
660 views

telneting to ssh port works, but SSH not

I installed a machine with two network cards: one goes in the router, gets IP via DHCP, OK, another is connected to my notebook directly, using a different IP subnet. I can ping both IP addresses, ...
3
votes
0answers
259 views

SSH server is not disconnecting session when I shutdown the machine

I have a Arch Linux virtual machine, if I shutdown the machine while a ssh connection is alive. The SSH session would stuck (and the machine shuts down correctly) So the server is not disconnecting ...
2
votes
0answers
28 views

ssh connection to OSMC fails after giving the correct password

I have a freshly setup Raspberry Pi 3 with OSMC; I can't login via ssh. I can open a shell when using my wireless keyboard, sudo -s works, and AFAICS, WiFi connection is fully functional, including ...
2
votes
0answers
83 views

Why is denyhosts not banning *some* brute force root SSH login attempts?

I recently noticed in my logwatch emails from a couple of servers that although denyhosts was doing its job for some brute force root ssh login attempts others seem to be ignored and continue to ...
2
votes
0answers
412 views

“Too many open files ssh” when the number of open files is far below ulimit

I was trying to set up 2000 concurrent ssh connections, but got the error message in server log (i.e. journalctl): sshd[1356]: error: reexec socketpair: Too many open files I've set both the soft ...
2
votes
0answers
149 views

Two ISP and redirecting traffic

I have a gateway with two ISP connected to eth0 and eth2. There is also a eth1 with local network. I'm trying to group some services in one interface and some in the second: incoming traffic 1 ...
1
vote
0answers
18 views

setting up sftp users only second instances of sshd

I created second instances of sshd called sshd-sftponly and using different port (e.g 2222 ) and made all necessary changes in /etc/rc.d/init.d/sshd-sftponly and /etc/ssh/sshd_config-sftponly ...
1
vote
0answers
68 views

Slow SSH connection on embedded platform

I am operating an embedded device running the linux core. I have OpenSHH_4.9p1 installed running in debug mode and trying to establish an SSH connection using PuTTY. After the login screen everything ...
1
vote
0answers
120 views

Freeradius PAM create user and home on login

At this moment i have installed freeradius and PAM radius properly. When i create an account on the system and set a password in /etc/raddb/users.conf the user can login. Sudo also works great with ...
1
vote
0answers
98 views

Unable to ssh in to machine behind router

I'm trying to ssh into a desktop which is behind a router from a remote location. I've set the router (TP-link AC1750) to forward TCP connections to port 8000 along to port 8000 on my desktop using ...
1
vote
0answers
135 views

Reverse AutoSSH working, but the proxied LISTEN ports fail randomly

I'm having a hard time describing the error, sorry for the lengthy explanation: I have a successful, working, stable reverse AutoSSH solution nailed up between a client beagle board and a server. The ...
1
vote
0answers
297 views

SSHD_CONFIG keeps corrupting on reverse SSH setup

I have a reverse SSH setup to traverse an impenetrable CGN NAT. It works well, but the SSHD daemon on the client behind the NAT keeps dieing for unknown reasons (fails to start-up). The client ...
1
vote
0answers
285 views

ssh with rsa key asks for password

I have a server with Ubuntu 14.04 x64 operation system. Part of my sshd_config file (entire file): Port 2202 Protocol 2 PermitRootLogin without-password StrictModes yes RSAAuthentication yes ...
1
vote
0answers
117 views

Some commands does not work in su envirorment

I have logged in to CentOS 5 machine with normal user and then I used su command to login as root user. Now commands like ifconfig, useradd, userdel are not working on machine and it gives command not ...
1
vote
0answers
636 views

pam_tacplus.so and sshd: skip user validation?

I'm trying to implement tacacs authentication on a freebsd box as a client. The box is actually a network appliance that SHOULD have this config built into its cli/ui but doesn't. Since it's built ...
1
vote
0answers
1k views

X11 connection rejected because of wrong authentication — on CentOS, for all users (including root)

I'm configuring a small computing cluster with CentOS. The last step is setting up X11 forwarding, and here I find problems that I cannot solve. On all compute nodes except one, I can set up ...
0
votes
0answers
16 views

ssh warning banner on centos 6.7

I am using the kick start installation for my centos 6.7. After installation, the output of mount command looks like below: proc on /proc type proc (rw) sysfs on /sys type sysfs (rw) devpts on /dev/...
0
votes
0answers
44 views

Why would my putty key be refused “server refused our key”, but works on next attempt?

I use PuTTY, and I use a key generated with PuTTYgen. My server is a VPS running Ubuntu 14.04 (perhaps this belongs on askubuntu, but I think it may not be Ubuntu specific). The public portion of the ...
0
votes
0answers
20 views

Testing OpenSSH Logging

I'm attempting to turn on logging inside OpenSSH running in an Alpine Docker container. I made sure to install rsyslog and start the daemon with /usr/sbin/rsyslogd. My sshd logging settings are as ...
0
votes
0answers
41 views

sshd error: no more sessions

I see many lines in /var/log/auth.log about sshd sessions, like below Mar 25 11:04:47 hosting-prd sshd[7882]: error: no more sessions Mar 25 11:04:47 hosting-prd sshd[7882]: error: no more sessions ...
0
votes
0answers
38 views

ssh PrintLastLog prints actual login

I connect with my server via ssh and always it shows the last log: Last login: Sat Mar 19 14:05:17 2016 from... but that login is my actual login. What's the utility of this info? It should print the ...
0
votes
0answers
28 views

How to get informed about EVERY incoming ssh connection (e.g. with no remote command specified)

The case I'm used to set up automatic reverse ssh tunnels to remote computers via my server with cron. Usually I use the following entry: @reboot sleep 300 && ssh -MNf -R xxx22:host:22 user@...
0
votes
0answers
11 views

From when does OpenSSHD use SHA-2?

IMHO in OpenSSHD, SHA* is only used for "Data Integrity Verification". Question: But from which version does OpenSSHD use SHA-2 as default?
0
votes
0answers
442 views

How to restart ssh server / sshd on Linux?

I am trying to restart the ssh server on my server which is running Fedora Cloud. I have tried the method here http://www.cyberciti.biz/faq/howto-restart-ssh/ (# service sshd restart) and get Failed ...
0
votes
0answers
85 views

SMTP traffic being forwarded through SSH even do AllowTcpForwarding is disabled

I have a situation on one server, where it seems to be spaming over traffic being sent over SSH tunnel. Output below shows connections being made to remote SMTP server that seem to be initiated over ...
0
votes
0answers
339 views

xterm Xt error: Can't open display: localhost:11.0

I'm on a windows machine running Xming32, putty and plink. I have two centos boxes. One I can connect to just fine. The other I can't. I'm trying with this command plink -C -v jdearing@BROKENHOST ...
0
votes
0answers
56 views

How do I configure SSHd to require 2 (or more) passwords to log in

I'm asking because I want to setup a server that cannot be administered by any single admin, not without the permission (and oversight) of one other authorized admin (there can be many). Since there ...
0
votes
0answers
482 views

Unable to SSH into Puppy Linux, even though SSHD is running

I installed OpenSSH client and server on my Puppy Linux computer. That computer is behind a router. I tried to ssh into it over the internet (outside the router) but it times out. Also doesn't work if ...