New answers tagged sshd
Why are the SSH variables set? It is likely that the variables are set because your VNC connection is tunneled through an SSH connection. There are good reasons to do this. VNC uses the RFB protocol which is not secure. Tunneling VNC through SSH improves security. Why is the SSH_CONNECTION variable the same? The SSH_CONNECTION variable consists of four ...
I found a solution. In the OpenVPN configuration file /etc/openvpn/server.conf you can specify a script to run on up. If you take a look at the OpenVPN manual page man openvpn, you will see --up cmd. In the /etc/openvpn/server.conf configuration file, I added a line: up "/etc/openvpn/up.sh" This file is one that I created and will be executed when the ...
Looks like ssh uses upstart, but openvpn doesn't ... you might be able to force ssh to come up delayed by doing this, but it's untested (I don't want to mess up my install): update-rc.d ssh defaults 99 And as it's untested: CAVEAT EMPTOR
When I do it from sftp with the ! prefix, it says it's worked It has! But ! executes the command on the client, not on the server. So watch out for what you may inadvertently have changed on the client. The SFTP protocol deliberately doesn't allow the client to specify commands to run on the server. It's only a file transfer protocol. You may however ...
sshd logs are typically stored in /var/log/auth.log sshd logs to the AUTHPRIV syslog facility by default. As long as rsyslog is configured to send those messages to /var/log/auth.log you'll be in business. Uncomment the following in /etc/rsyslog.d/50-default.conf auth,authpriv.* /var/log/auth.log Restart rsyslog for the changes to ...
Look in /var/log/auth.log for lines of the form: Jul 6 06:25:57 hostname sshd: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=x.y.z user=root Jul 6 06:25:59 hotname sshd: Failed password for root from 18.104.22.168 port 5673 ssh2 (failed attempts) and: Jul 12 12:12:43 hostname sshd: Accepted ...
As CrunchBang is a debian variant, the openssh server logs would be in: /var/log/auth.log
When copying keys into your $HOME/.ssh/authorized_keys file you have to make sure that the the string pasted is one continuous string with no breaks whatsoever. I typically will open this file in vim and make sure that the strings are correct. They should appear as such: ssh-dss ....key1.... email@example.com ssh-dss ....key2.... firstname.lastname@example.org ...
Removed ForceCommand internal-sftp from /etc/ssh/sshd_config and rebooted the server (to refresh the configuration file) and I'm back in.
You can override what tool is used to ask for the passwords/passphrases via the environment variable $SSH_ASKPASS. $ echo $SSH_ASKPASS /usr/libexec/openssh/gnome-ssh-askpass excerpt - Password Reading and Handling Password Reading Programs. Why re-invent the wheel. There are lots of programs that have already been written for getting password ...
Putting host names in hosts.allow or hosts.deny means the server must do a reverse DNS resolution to get the domain name for the IP address. This will affect login times if your name resolution system is slow or if some intermediary name server is slow to respond. It is faster to put the IP addresses ur subnets into the file instead, as is explained by man ...
The value !root alone doesn't match anything. The value !root,* matches everything except root. The man page is not clear about that but it may be that the order matters i.e. *,!root would be the same like * because the * would match and the rest is not checked any more.
according to this reference, The match patterns may consist of single entries or comma-separated lists and may use the wildcard and negation operators described in the PATTERNS.. Therefore, it should be the same.
Top 50 recent answers are included