Tag Info

Hot answers tagged

4

As explained in man ssh: -t         Force pseudo-tty allocation. This can be used to execute arbi‐           trary screen-based programs on a remote machine, which can be           very ...


4

You shouldn't believe everything you read on the Internet. :) There is no security problem with enabling TCPKeepAlive. There never was any such problem. The meaning of the warning in the sshd_config(5) manual is that you shouldn't rely on TCPKeepAlive alone, since an attacker can spoof it to fool the server into thinking a connection is still alive when it ...


4

Ok, we need some history here, back in the days that the primary way to access a UNIX box was a Terminal and a serial line there were four programs involved in logging in. They were init, getty, login, and a shell. init started getty and kept it running. getty opened a serial port (and maybe did modem specific stuff), and then displayed the login prompt and ...


3

Assuming all your Match blocks are at the end of the sshd_config file. If your blocks are separated by empty lines, e.g.: Match User FOO1 PasswordAuthentication no Match User FOO2 PasswordAuthentication yes Match User FOO ChrootDirectory /srv/www/FOO AllowTCPForwarding no X11Forwarding no ForceCommand internal-sftp then just ...


2

Turns out my router was set up to forward some high ports to the internal SSH port - so basically the problem was caused by some ancient configuration leftovers. How stupid.


1

I am reading this tutorial, and trying to create a new user with root privileges and then block root access via ssh in a CentOS 7 server. The problem is that the new user is blocked from doing root actions like nano /etc/sudoers. Also, I seem unable to remove the block of root login. So my pre-existing open root session is the only access I have to root ...


1

For those of you using chef, adding MaxSessions 1 to /etc/ssh/sshd_config will break knife ssh as it seems to rely on multiplexing. If anyone has a workaround for this, I'd love to hear it!!! (adding MaxSessions 1 and NOT breaking chef, that is...). NOTE: For above ^^^ You'll see errors like: ERROR: IOError: closed stream ERROR: Net::SSH::Disconnect: ...



Only top voted, non community-wiki answers of a minimum length are eligible