Skip to main content

Questions tagged [sshd]

the secure shell (SSH) daemon

Filter by
Sorted by
Tagged with
0 votes
0 answers
11 views

SSH port forwarding was working, now it's not

I have a pair of CentOS7 servers in a production environment where the server on the internal network opens up an ssh SOCKS proxy tunnel to the server on the edge network to allow the internal server ...
dbush's user avatar
  • 113
0 votes
1 answer
103 views

sshd: Server refused public-key signature despite accepting key

I am renting a VPS running CentOS Stream 8, for which I set up SSH pubkey authentication for the user "foo". I access it via PuTTY on Windows. Recently I rented another VPS running Rocky ...
dr_'s user avatar
  • 30.1k
2 votes
1 answer
107 views

Configuring sshd directly instead of using "security policy" on RHEL 8

RHEL 8 overrides some sshd settings, so no matter what it has been set in /etc/ssh/sshd_config, the options listed in /etc/crypto-policies/back-ends/opensshserver.config takes precedence. From my ...
pepoluan's user avatar
  • 1,363
2 votes
1 answer
134 views

sshd: combining AllowUsers and DenyUsers

I have an sshd config that looks like this: DenyUsers * AllowUsers root@* AllowUsers user1@* AllowUsers user2@* The sshd docs state that "The allow/deny users directives are processed in the ...
QF0's user avatar
  • 305
0 votes
3 answers
152 views

OpenSSH: Suddenly can't login with default (ED25519) key; server prompts password; other keys work? Is the problem on the Server or the Client?

I have a server running Linux 6.6.32, OpenSSH_9.7p1, and OpenSSL 3.0.13 (30 Jan 2024). All of a sudden, after a reboot, the server won't accept my ED25519-key anymore when I log in into it from my ...
phip1611's user avatar
  • 101
0 votes
0 answers
45 views

how to add multiple interfaces in `/etc/hosts.allow` file?

SSH is listening on all the available 10 Ethernet interfaces in my system. I have tested using nc 160.49.198.97 22 command in Linux. To allow only particular interface and block others, i have created ...
Karma Yogi's user avatar
0 votes
1 answer
39 views

how to silence X11 warnings on a headless node

I have a headless server setup, and when I ssh in I get Warning: untrusted X11 forwarding setup failed: xauth key data not generated Everything still works fine, since there's no X11 data to forward. ...
jyoung's user avatar
  • 111
0 votes
1 answer
58 views

sshd refuses to verify SSH keys, postponing a key despite accepting it, because Bitdefender seems to intercept it, which ultimately prevents login

After fighting trying to login to this server without a password for a while, regenerating host keys, restarting sshd, and more, it turns out to be Bitdefender Security Tools Daemon's fault, as ...
C0rn3j's user avatar
  • 161
2 votes
1 answer
521 views

Configure SSHD via Red Hat crypto-policy

I am using Rocky Linux 8 and 9 and they use the crypto-policy framework from Red Hat. Now I want to adjust some settings in the policy to forbid sshd to use some specific algorithms. But I can not ...
Lucas's user avatar
  • 2,895
0 votes
1 answer
43 views

I am still required to enter both passphrase for the key and server password when using SSH key authentification

I am trying to setup remote access from my new laptop (client) to my old laptop (server). The old one runs on Linux Mint 21.2, the new one on Ubuntu 23.10.1. I created a pair of SSH keys on the client,...
Daigaku no Baku's user avatar
0 votes
1 answer
380 views

SSH Unable to negotiate: no matching host key type found

I have an issue where older clients aren't able to connect to current (v8.x) versions of openssh server. I'm familiar with adding ssh-rsa,ssh-dss to the list of available key types but that doesn't ...
Honkypants's user avatar
0 votes
0 answers
36 views

Can't have both Match Address and Match User directives in /etc/ssh/sshd_config

The system is an Redhat 8. I have found the following configuration for /etc/ssh/sshd_config file: # $OpenBSD: sshd_config,v 1.103 2018/04/09 20:41:22 tj Exp $ # This is the sshd server system-...
XXX's user avatar
  • 1
1 vote
1 answer
78 views

I just installed guix on a virtual machine.. how can I run sshd?

I am a first time guix user and need assistance doing this basic thing. I did guix pull and guix install openssh but the sshd command is not there. After typing guix pull and guix install openssh, I ...
Rainb's user avatar
  • 121
0 votes
0 answers
173 views

Cannot start fail2ban on debian 12: Failed to initialize any backend for Jail 'sshd'

I cannot start fail2ban on a Debian 12 server. I get the following error: 2024-04-01 23:51:42,973 fail2ban [16176]: ERROR NOK: ("Failed to initialize any backend for Jail 'sshd'&...
giovi321's user avatar
  • 907
0 votes
0 answers
37 views

Enable MFA for both password and key-based authentication

I've implemented Multi-Factor Authentication (MFA) for both password and key-based SSH logins on an AlmaLinux 9 server. While sshd typically handles key authentication directly, I've configured sshd ...
supmethods's user avatar
1 vote
0 answers
24 views

How to change the facility of sshd

The default config in /etc/ssh/sshd_config is #SyslogFacility AUTH I added SyslogFacility LOCAL5 below, and local5.* /var/log/sshd.log in /etc/rsyslog.conf As usual restarted sshd and rsyslog....
Matrix24601's user avatar
4 votes
1 answer
188 views

After changing the username, no SFTP login is possible anymore

I have SFTP server with many users connecting with different usernames. One user requested the name change. Since I thought that is pretty straightforward procedure, I did typical usermod --login ...
spaceman117X's user avatar
0 votes
1 answer
112 views

SSH login tries to execute commands that does not exist

I upgraded a server from Debian 9 to 10 and after a reboot at the next SSH login I get the following errors : -bash: root:x:0:0:root:/root:/bin/bash: No such file or directory -bash: daemon:x:1:1:...
user2360915's user avatar
0 votes
1 answer
66 views

Is there an env var 'SSH_PWD', and how do I use it to restore my last 'pwd' prior to logout?

The lab has several "Raspberry Pi" machines which run a Debian-flavor OS. They are used for specific purposes - which is to say that after I make an SSH connection, I cd to the folder where &...
Seamus's user avatar
  • 3,062
0 votes
0 answers
41 views

SSH hangs before login prompt, fixes temporarily on reboot

I recently built a small home server (using Arch, I know it's not suitable for stable environments but I like it) and everything was going smooth but, after a while the server was on, it started to ...
FedFer's user avatar
  • 1
0 votes
2 answers
516 views

Issue with SSH Client Alive Interval in sshd_config

We are currently using SSH for our project, and we need to implement a feature where SSH users are logged off after 1 minute of inactivity. Below are excerpts from our ssh_config and sshd_config files:...
karkator's user avatar
0 votes
0 answers
39 views

Set sshd to refuse new connection [duplicate]

I have a busy server with lots of connection. When I want to plan a reboot I'd like to set SSH to refuse new connection until the machine restarted. Is there such an option in the sshd deamons ? I ...
Kiwy's user avatar
  • 9,744
0 votes
1 answer
324 views

sFTP admin permission denied when placing files into user directory

I am running Ubuntu 22.04.3 with an sFTP server configured through SSHD. I have several user home directories each with a dropoff and a pickup folder inside of them. While my admin user is able to ...
Vince D's user avatar
0 votes
2 answers
395 views

SSH Server Side, Specify Algorithm Per Host

On a server running SSH I need it to accept some legacy algorithms for 1 particular host for SSH so that I can copy files from the client to the server. I can't change the client side because its old ...
john smith's user avatar
1 vote
0 answers
1k views

PAM - Disabling "check pass; user unknown" syslog messages

TLDR: We use PAM with SSHD. CentOS and Ubuntu exist in the environment. For every SSHD failure of an unknown user, it creates two messages. One of the messages doesn't provide the unknown username and ...
Top-Lunch-7931's user avatar
0 votes
1 answer
345 views

SSH Chroot problems

Having multiple issues with a Chroot im trying to setup. When logging in, the users name shows up as "I have no name!". The etc/passwd file is present and accessible by the chroot user, ...
Will's user avatar
  • 3
0 votes
1 answer
133 views

userauth_pubkey: unsupported public key algorithm: spki-sign-rsa

I'm trying to SSH into my Debian 12 box from my 1988 Mac SE/30. I know that I need to enable old algorithms -- but it's still better than telnet. What I've got so far in my sshd_config is: ...
Richard Barraclough's user avatar
0 votes
3 answers
136 views

What could be the possible reasons of remote linux host shows terminal prompt with around 15 seconds delay

When I try to ssh in to a linux host, its terminal prompt shows around 15 seconds later after entering the ssh command on my local computer. The subsequent connections take 2-3 seconds. However, ...
Rafiq's user avatar
  • 168
0 votes
0 answers
246 views

key type ecdsa-sha2-nistp521 not in PubkeyAcceptedAlgorithms [preauth]

I have trouble setting passwordless authentication on a host: Sep 21 09:57:36 pvestorage2 sshd[1688625]: userauth_pubkey: key type ecdsa-sha2-nistp521 not in PubkeyAcceptedAlgorithms [preauth] OS: ...
Vatharian's user avatar
2 votes
1 answer
2k views

How to configure SSHD to allow users to ssh without password or public key?

I just want to allow one user to be public, i.e. let people log in without typing a password or having to setup a public key. This is to create an open SSH app. It should be simple but it seems to be ...
blmayer's user avatar
  • 121
0 votes
0 answers
136 views

Environment variables are not getting loaded when script is executed on a remote server via SSH (RHEL 8)

I have a vendor script (startup.sh) to start application services on a Linux box. Script when called manually by logging into the server (as sudo su - userID) initiates all the environment variables. ...
Akshay's user avatar
  • 15
0 votes
2 answers
189 views

Reorder of launching Systemd services

OS: Debian 11 Bullseye Context: The Zerotier application adds the zerotier-one.service system service and creates a virtual network interface (when it works). The sshd server default listens to all ...
DarekH's user avatar
  • 97
1 vote
3 answers
876 views

How to restrict user login for specific IP-address (private address)?

I have two users on my ssh-server machine, user_A and user_B. user_B is permitted to log in with private key only for security reasons, because he needs to log in from remote. All this works. My ...
udippel's user avatar
  • 13
0 votes
0 answers
186 views

ssh-copy-id closed by remote host

I'm trying to copy public ssh with ssh-copy-id but it gives a connection close: user@serverA:~/ctm/cm/AFT/data/Keys$ ssh-copy-id -p 1222 -i /home/user/keys/serverA.pub vivek@serverB /usr/bin/ssh-copy-...
defekas17's user avatar
2 votes
1 answer
2k views

Are all Debian 11 systems automatically vulnerable to CVE-2023-38408?

I really really hope I'm wrong here, but it seems that Debian 11 has a vulnerable version of OpenSSH. My OpenSSH banner reports my OpenSSH version is: 8.4p1 Debian 5+deb11u1 I checked with sshd and it ...
Sir Muffington's user avatar
0 votes
0 answers
27 views

RB5 linux system cannot use ssh to connect V2X with the serial port

I have a V2X module, and I cannot it to linux/window PC with USB. Then using the command ssh [email protected], and entrance the v2x module.root@autotalks:~# However, when i used the RB5, the ssh root@...
YUKI's user avatar
  • 1
1 vote
1 answer
152 views

Use sshfs session to run commands on the remote

Something has happened with the SSH process on a remote server so that now when trying to connect it rants: kex_exchange_identification: read: Connection reset by peer It looks like the SSH daemon ...
Greendrake's user avatar
2 votes
1 answer
694 views

SSH Key issue - Fedora 38

I've a remote server with at least 2 users (root and myself). I've the same keys in .ssh/authorized_keys in both $HOME folder. I can connect with the root account, but from my account i've a "...
admstg's user avatar
  • 753
0 votes
2 answers
103 views

How can I map the sshd logs to my current ssh session?

I am exploring methods to correlate my current SSH session with the SSHD logs. I aim to extract specific information from the SSHD logs that pertain to my SSH session only. Jul 04 09:39:06 linuxbox ...
Karthick's user avatar
  • 123
0 votes
0 answers
60 views

sshing with a certificate as root

I seem to have the opposite problem then all the other posts I found during my search. I can log in as root with a password; but, not with a certificate. I followed the same steps I have done dozen ...
Garnet's user avatar
  • 398
1 vote
0 answers
189 views

SSH Authentication Prompts Twice for Password When Using PAM with Google Authenticator

I'm setting up two-factor authentication (2FA) on an Ubuntu server using libpam-google-authenticator. I've configured SSH to use PAM for authentication with the following /etc/pam.d/sshd configuration:...
rbehzadan's user avatar
-3 votes
1 answer
219 views

Use openssh for ssh connections and for public sftp

I have a system to which some users need to connect trough regular SSH. I will name them the “Privileged Users”. In the same time this system should provide an SFTP server to “Anonymous” user (without ...
fauve's user avatar
  • 1,278
3 votes
0 answers
576 views

Very odd SSH known_hosts verification failure with certificates

I recently upgraded one of my machines to latest Ubuntu 22.04, and now I am experiencing a very strange SSH server verification issue. Here is a short explanation of the situation. I am using SSH ...
Teemu Karimerto's user avatar
0 votes
1 answer
74 views

Remotely rebooting linux mint server(SSH): permission denied (needed to enter password manually in the server)

I have a simple ssh server setup, an old Macbook air (XFCE Mint). I'm new in the topic and would like to try out some of the basic commands. tried rebooting the server by reboot from my client, ...
nau1t2's user avatar
  • 1
2 votes
2 answers
1k views

SSH connection freezes when receiving large amount of data

I'm having issues with a series of GNU/Linux industrial devices that I connect to via SSH. The configuration is very basic, as I haven't made any changes to the server, and on the client side, I only ...
Fco Javier Balón's user avatar
0 votes
0 answers
1k views

How to fix fatal: Access denied for user A by PAM account configuration [preauth]?

Updated openssh to sshd 8.1. Error connecting to server: sshd fatal: Access denied for user A by PAM account configuration [preauth] Configured ldap, authorization by key. I don't understand what's ...
alex_cd's user avatar
0 votes
0 answers
255 views

sshd log verbose filter out specific user

I would to filter out one specific user that very often connect to my servers via sshd. I no more want to see into ssh's logs the connexion of this user. Is it possible to do that ? to keep the actual ...
Peutre's user avatar
  • 77
1 vote
1 answer
2k views

How to restart sshd after assembly?

it is necessary to update the openssh server to the latest version, since everything is closed, it has come to manually assemble it ./configure --prefix=/usr --with-pam --with-selinux --with-privsep-...
Iceforest's user avatar
  • 113
0 votes
0 answers
191 views

Setting up SSH Password

I've been setting up ssh access to my desktop computer. I'm running a Debian Distro. I've enabled password authentication in the sshd_config file, and I've tried looking for the "keyboard-...
Lee's user avatar
  • 97
1 vote
1 answer
101 views

Allow system user (_gogs) to use ssh

I have created a system user for gogs using mkuser for the dogs git server. I have ssh setup but discovered that when I login it closes the connection. Looking at the console I see this error: fatal: ...
annpocoyo's user avatar

1
2 3 4 5
15