Hot answers tagged sshd
Putting host names in hosts.allow or hosts.deny means the server must do a reverse DNS resolution to get the domain name for the IP address. This will affect login times if your name resolution system is slow or if some intermediary name server is slow to respond. It is faster to put the IP addresses ur subnets into the file instead, as is explained by man ...
You can override what tool is used to ask for the passwords/passphrases via the environment variable $SSH_ASKPASS. $ echo $SSH_ASKPASS /usr/libexec/openssh/gnome-ssh-askpass excerpt - Password Reading and Handling Password Reading Programs. Why re-invent the wheel. There are lots of programs that have already been written for getting password ...
Look in /var/log/auth.log for lines of the form: Jul 6 06:25:57 hostname sshd: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=x.y.z user=root Jul 6 06:25:59 hotname sshd: Failed password for root from 184.108.40.206 port 5673 ssh2 (failed attempts) and: Jul 12 12:12:43 hostname sshd: Accepted ...
As CrunchBang is a debian variant, the openssh server logs would be in: /var/log/auth.log
Why are the SSH variables set? It is likely that the variables are set because your VNC connection is tunneled through an SSH connection. There are good reasons to do this. VNC uses the RFB protocol which is not secure. Tunneling VNC through SSH improves security. Why is the SSH_CONNECTION variable the same? The SSH_CONNECTION variable consists of four ...
By looking at /var/log/auth.log, it is verified that Filezilla on the Mac client actually seems to be using the Mac SSH-agent rather than the password entered there. Verified that SFTP is using SSH-keys authentication by trying and failing to connect through SFTP on another computer.
sshd logs are typically stored in /var/log/auth.log sshd logs to the AUTHPRIV syslog facility by default. As long as rsyslog is configured to send those messages to /var/log/auth.log you'll be in business. Uncomment the following in /etc/rsyslog.d/50-default.conf auth,authpriv.* /var/log/auth.log Restart rsyslog for the changes to ...
Removed ForceCommand internal-sftp from /etc/ssh/sshd_config and rebooted the server (to refresh the configuration file) and I'm back in.
Only top voted, non community-wiki answers of a minimum length are eligible